Privacy policy

PRIVACY POLICY

Last updated: 22 October 2026

Romara Group LTD, trading as ROMARA ("ROMARA", "we", "us"), is the controller of your personal data. This policy explains what we collect, why, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).

Romara Group LTD, company number 17233136
338a Regents Park Road, Office 3 and 4, London, N3 2LN, United Kingdom
info@romara.co.uk

WHAT WE COLLECT
- Contact and order details: name, email, phone number, delivery and billing address, order history.
- Account and returns: the email you sign in with, and any return or exchange requests, including the reason you give.
- Payment information: processed securely by our payment providers. We never see or store your full card details.
- Communications: messages you send us.
- Technical data: IP address, browser and device type, and how you use our website, collected through cookies.
- Marketing preferences: if you sign up to our newsletter.

WHY WE USE IT
- To process, deliver and support your orders (performance of a contract).
- To handle returns, refunds and customer service (contract / legitimate interests).
- To meet legal and accounting obligations (legal obligation).
- To send newsletters and offers, only if you have opted in. You can unsubscribe at any time (consent).
- To keep our website secure and improve it (legitimate interests).
- Non-essential cookies are used only with your consent, which you can change through our cookie banner.

WHO WE SHARE IT WITH
We share data only with trusted providers who help us run our shop, such as our website platform, payment providers, delivery partners, and email and analytics tools. Some of these providers may process data outside the UK; where they do, appropriate safeguards are in place. We never sell your personal data.

HOW LONG WE KEEP IT
Order and accounting records are kept for 6 years as required by UK law. Marketing data is kept until you unsubscribe. Other data is kept only as long as necessary.

YOUR RIGHTS
You have the right to access, correct or delete your data, to restrict or object to its use, to data portability, and to withdraw consent at any time. To make a request, email info@romara.co.uk. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).

We may update this policy from time to time. The latest version will always be on this page.