Privacy Policy

Last Updated: July 31, 2026

This Privacy Policy describes how Evira London, operated by Seta Services (“Evira London,” “we,” “us,” or “our”), collects, uses, stores, shares, and otherwise processes personal information when you:

Visit or use our website.
Create or use a customer account.
Place or attempt to place an order.
Contact our customer-service team.
Subscribe to marketing communications.
Participate in a promotion.
Submit a review or other content.
Otherwise interact with our products and services.

Our website, online store, products, customer support, and related services are collectively referred to as the “Services.”

This Privacy Policy is primarily intended for customers and website visitors located in the United Kingdom.

Seta Services is established in the Netherlands and operates the Evira London online store. Depending on the circumstances, our processing of personal information may be subject to:

The UK General Data Protection Regulation.
The Data Protection Act 2018.
The Privacy and Electronic Communications Regulations 2003.
The Data (Use and Access) Act 2025.
The European General Data Protection Regulation.
Other applicable privacy and data-protection laws.

Nothing in this Privacy Policy limits any privacy right or protection that cannot lawfully be excluded.

1. Who Is Responsible for Your Personal Information?

For the purposes of applicable data-protection law, the controller responsible for the personal information described in this Privacy Policy is:

Trading Name: Evira London
Legal Company Name: Seta Services
Chamber of Commerce Number: 92397379
VAT Number: NL004950717B85
Email: info@eviralondon.com
Phone Number: XXXXXX
Business Address: Damstraat 10, 2265 AH Leidschendam, The Netherlands

In this Privacy Policy, references to Evira London include Seta Services where appropriate.

2. About This Privacy Policy

In this Privacy Policy, “you” and “your” refer to:

Customers.
Prospective customers.
Website visitors.
Account holders.
Newsletter subscribers.
Individuals who contact us.
Other people whose personal information we process in connection with the Services.

“Personal information” or “personal data” means information relating to an identified or identifiable individual.

Please read this Privacy Policy carefully before providing personal information or using our Services.

3. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

Our business practices.
Our website or Services.
Our suppliers and fulfilment arrangements.
Our payment, advertising, or technology providers.
Applicable laws or regulatory guidance.
The purposes for which we process personal information.

The current version will be published on our website, and the “Last Updated” date will be amended.

Where required by law, we will take additional reasonable steps to inform affected individuals about material changes before those changes take effect.

4. Personal Information We Collect

The information we collect depends on how you interact with Evira London.

Identity and Contact Information

We may collect:

Full name.
Email address.
Telephone number.
Billing address.
Delivery address.
Country.
County, town, or city.
Postcode.
Account username or identifier.

Order and Transaction Information

We may collect:

Products purchased.
Products added to your basket.
Selected sizes, colours, or variations.
Order number.
Order value.
Discounts or promotional codes used.
Billing and delivery information.
Payment status.
Dispatch and delivery status.
Return, refund, cancellation, or exchange information.
Customer-service communications relating to an order.

Payment Information

Payments are processed by Shopify Payments or other payment providers made available during checkout.

Payment providers may process:

Cardholder name.
Billing address.
Credit or debit card information.
Bank or payment-account information.
Payment authentication information.
Transaction status.
Fraud-screening information.

Evira London does not normally receive or store your full card number or card-security code.

Account Information

Where customer accounts are available, we may collect:

Login email address.
Password or authentication information.
Saved delivery addresses.
Saved preferences.
Order history.
Account activity.

Passwords are normally processed by Shopify or another authentication provider in protected or encrypted form. We do not normally have access to a readable copy of your password.

Customer-Service Information

When you contact us, we may collect:

The contents of your message.
Your order number.
Your preferred contact method.
Complaint or support information.
Photographs or videos.
Details of a faulty, damaged, missing, incorrect, or delayed product.
Information relating to a return, refund, dispute, or chargeback.
Records of our communications with you.

Marketing Information

We may collect:

Newsletter subscription status.
Marketing preferences.
Email or SMS consent records.
Unsubscribe or opt-out records.
Responses to marketing campaigns.
Promotion, competition, or survey responses.
Information about interactions with marketing emails or advertisements.

Reviews and User-Generated Content

We may collect:

Product reviews.
Ratings.
Comments.
Images.
Social-media content submitted or shared with us.
Other content you voluntarily provide.

Fraud and Security Information

We may collect or generate information relating to:

Suspicious transactions.
Payment-verification results.
Device or account security.
Failed login attempts.
Chargebacks.
Possible misuse of promotions.
Suspected unauthorised orders.
Other activity relevant to protecting customers and our business.

5. Information Collected Automatically

When you access or use our website, we and our service providers may automatically collect information using cookies, pixels, software-development kits, local storage, server logs, and similar technologies.

This may include:

IP address.
Device type.
Browser type and version.
Operating system.
Language settings.
Approximate location.
Referring website or advertisement.
Pages viewed.
Products viewed.
Searches performed.
Links clicked.
Basket activity.
Checkout activity.
Session duration.
Date and time of visits.
Email or advertisement interactions.
Device identifiers.
Cookie identifiers.
Information about how you navigate and use the Site.

We may combine this information with information collected from other sources where permitted by law.

6. Information Received From Third Parties

We may receive personal information from third parties involved in operating the Services.

Shopify

Our online store is hosted by Shopify.

Shopify may process information needed to:

Operate the website.
Support checkout.
Manage customer accounts.
Process orders.
Prevent fraud.
Provide analytics.
Support payments and store functionality.

Payment Providers

We may receive information from payment providers concerning:

Payment authorisation.
Payment failure.
Refund status.
Fraud screening.
Billing verification.
Payment disputes.
Chargebacks.

Suppliers and Fulfilment Providers

We may receive information from suppliers, warehouses, and fulfilment centres concerning:

Product availability.
Fulfilment status.
Shipment details.
Returns.
Product problems.
Package contents.

Delivery Providers

Postal and courier providers may supply:

Tracking information.
Delivery status.
Delivery confirmation.
Failed-delivery information.
Collection-point information.
Return-to-sender status.
Details relating to missing or damaged packages.

Advertising and Analytics Providers

Advertising platforms, social-media platforms, and analytics providers may supply information about:

Website visits.
Advertisement views or clicks.
Campaign performance.
Marketing attribution.
General audience information.
Device and browser activity.
Purchases or other conversion events.

Fraud and Security Providers

We may receive information from providers that assist with:

Payment verification.
Fraud detection.
Bot prevention.
Identity or address verification.
Account security.
Chargeback prevention.

7. How We Use Personal Information

We use personal information only where we have a lawful and legitimate reason to do so.

Providing the Services

We may use personal information to:

Process and confirm orders.
Process payments.
Arrange fulfilment.
Arrange shipping and delivery.
Send order and dispatch confirmations.
Provide tracking information.
Manage customer accounts.
Process returns, cancellations, exchanges, and refunds.
Respond to customer-service requests.
Investigate missing, delayed, damaged, or incorrect orders.
Maintain transaction records.

Communicating With You

We may use your information to:

Respond to enquiries.
Provide support.
Send service-related messages.
Contact you about an order.
Request information needed to complete an order.
Notify you of delays or product issues.
Handle complaints or disputes.
Inform you of material changes to our Services or policies.

Improving the Website and Services

We may use information to:

Monitor website performance.
Diagnose technical issues.
Understand how customers use the Site.
Improve navigation and checkout.
Personalise parts of the website.
Recommend products.
Improve our product range.
Test new features.
Analyse customer-service performance.
Conduct internal research and reporting.

Marketing and Advertising

Where permitted by law, we may use personal information to:

Send promotional emails.
Send marketing text messages.
Inform you about products, offers, or sales.
Display personalised or non-personalised advertisements.
Measure campaign performance.
Create or update advertising audiences.
Understand whether advertisements led to website visits or purchases.
Prevent the same advertisement from being shown excessively.

Security and Fraud Prevention

We may use personal information to:

Verify transactions.
Detect and prevent fraud.
Protect customer accounts.
Identify suspicious activity.
Prevent misuse of promotions.
Protect our website and systems.
Enforce our Terms of Service.
Protect our customers, service providers, and legal rights.

Legal and Regulatory Purposes

We may use or disclose personal information where reasonably necessary to:

Comply with legal obligations.
Meet tax, accounting, and record-keeping requirements.
Respond to lawful requests or court orders.
Cooperate with regulators or law-enforcement authorities.
Establish, exercise, or defend legal claims.
Manage disputes or chargebacks.
Enforce contractual rights.
Protect the safety or rights of individuals.

8. Lawful Bases for Processing

Where the UK GDPR or EU GDPR applies, we rely on one or more of the following lawful bases.

Contract

Processing may be necessary to:

Process your order.
Take payment.
Deliver products.
Provide order updates.
Manage returns or refunds.
Respond to requests connected with a purchase.
Take steps requested by you before entering into a contract.

Legal Obligation

Processing may be necessary to comply with:

Tax obligations.
Accounting requirements.
Consumer-protection law.
Product-safety requirements.
Court orders.
Regulatory obligations.
Other legal duties.

Legitimate Interests

We may process information where necessary for legitimate interests such as:

Operating and improving our business.
Providing customer support.
Preventing fraud.
Protecting our systems.
Understanding website performance.
Managing claims or disputes.
Measuring certain marketing activity.
Improving our products and Services.

We will not rely on legitimate interests where your rights and interests override those interests.

Consent

We may rely on consent for:

Certain marketing communications.
Non-essential cookies.
Behavioural advertising technologies.
Other processing where consent is legally required.

You may withdraw consent at any time. Withdrawal does not affect processing that occurred lawfully before consent was withdrawn.

Legal Claims and Vital Interests

In limited circumstances, processing may be necessary to:

Establish, exercise, or defend legal claims.
Protect someone’s life or physical safety.
Respond to an emergency.

9. Marketing Communications

We may send promotional emails or text messages only where permitted by applicable law.

This may be where:

You have actively consented; or
We obtained your contact details during a sale or genuine negotiation for a sale, the marketing concerns our own similar products, and we provided an opportunity to opt out when collecting your details and in every later message.

We will not use pre-ticked boxes as evidence of marketing consent.

Every promotional email will contain an unsubscribe facility.

You may also opt out by contacting:

info@eviralondon.com

We will process opt-out requests within a reasonable period.

We may retain limited information about your opt-out preference so that we do not contact you again contrary to your request.

Opting out of marketing will not prevent us from sending essential service communications, including:

Order confirmations.
Payment information.
Shipping updates.
Return or refund messages.
Security notifications.
Responses to customer-service requests.

10. Cookies and Similar Technologies

Evira London and our service providers may use cookies, pixels, local storage, tags, and similar technologies.

These technologies may be used for:

Shopping-basket functionality.
Secure checkout.
Account login.
Fraud prevention.
Remembering preferences.
Website analytics.
Measuring performance.
Advertising.
Marketing attribution.
Personalisation.

Strictly Necessary Technologies

Certain technologies are necessary for the website to function or to provide a service requested by you.

These may include technologies used for:

Maintaining your shopping basket.
Processing checkout.
Providing security.
Preventing fraud.
Maintaining an active session.
Distributing website traffic.

Consent may not be required for strictly necessary technologies.

Optional Technologies

Where required, we will ask for your consent before using non-essential technologies for purposes such as:

Analytics.
Behavioural advertising.
Social-media advertising.
Cross-site tracking.
Marketing measurement.
Personalisation that is not strictly necessary.

You can manage optional technologies through any cookie-preference tool available on the website.

You may also adjust your browser settings, although blocking cookies may affect certain website features.

Consent must be actively given. Simply continuing to browse the Site will not by itself be treated as valid consent where consent is legally required.

11. Disclosure of Personal Information

We may disclose personal information to third parties where reasonably necessary to operate our business and provide the Services.

Recipients may include:

Shopify.
Payment processors.
Fraud-prevention providers.
Cloud and hosting providers.
Suppliers.
Warehouses.
Fulfilment providers.
Postal services.
Courier companies.
Customer-support providers.
Email and SMS providers.
Analytics providers.
Advertising and social-media platforms.
Information-security providers.
Accountants.
Lawyers.
Insurers.
Professional advisers.
Courts.
Regulators.
Government authorities.
Law-enforcement bodies.

We do not permit service providers to use personal information for unrelated purposes unless they independently act as controllers and provide their own privacy information.

12. Advertising and Social-Media Platforms

We may use services provided by advertising and social-media platforms.

Depending on the configuration, we may provide those platforms with information such as:

Email-address identifiers.
Device identifiers.
Cookie identifiers.
Website activity.
Purchase events.
Product-view events.
Basket or checkout events.

This may be used to:

Measure advertising effectiveness.
Show relevant advertisements.
Create advertising audiences.
Exclude existing customers from certain campaigns.
Understand customer journeys.

Where required, these technologies will not be activated until you have provided consent.

The relevant platform may independently process personal information under its own privacy policy.

13. Business Transactions

If Evira London or Seta Services is involved in a:

Merger.
Acquisition.
Financing.
Reorganisation.
Insolvency.
Sale of assets.
Sale or transfer of the business,

personal information may be disclosed to:

Professional advisers.
Prospective purchasers.
Investors.
Lenders.
Insurers.
Other parties involved in the transaction.

Any disclosure will be subject to applicable confidentiality and data-protection requirements.

14. International Data Transfers

Seta Services is established in the Netherlands, while Evira London offers products to customers in the United Kingdom.

Personal information may therefore be transferred to, accessed from, or processed in countries outside the United Kingdom.

Recipients may be located in:

The Netherlands.
Other countries in the European Economic Area.
The United States.
Countries where Shopify or its service providers operate.
Countries where payment providers operate.
Countries where suppliers or fulfilment centres are located.
Countries where analytics or advertising providers operate.
Countries involved in delivering your order.

The exact countries may vary depending on:

The products ordered.
The fulfilment route.
The delivery destination.
The payment method.
The technology providers used.
The advertising or analytics services enabled.

Where UK data-protection law applies to an international transfer, we will use a legally recognised transfer mechanism where required.

This may include:

UK adequacy regulations.
The United Kingdom International Data Transfer Agreement.
The UK Addendum to European Commission standard contractual clauses.
Another approved contractual safeguard.
An applicable legal exception.

Where required, we will also assess whether additional protections are needed to prevent the level of protection from becoming materially lower after the transfer.

You may contact us for further information about the safeguards used for international transfers.

15. Data Storage and Security

Personal information may be stored electronically by Evira London, Seta Services, Shopify, or other authorised providers.

We use reasonable administrative, organisational, and technical measures designed to protect personal information against:

Loss.
Misuse.
Unauthorised access.
Unauthorised disclosure.
Unauthorised alteration.
Destruction.
Accidental damage.
Unlawful processing.

Measures may include:

Access controls.
Password protection.
Encryption where appropriate.
Secure payment processing.
Multi-factor authentication where available.
Fraud monitoring.
Limited access based on business need.
Staff or contractor confidentiality duties.
Service-provider security requirements.
Backups.
Security monitoring.

No method of transmission or electronic storage is completely secure. We cannot guarantee absolute security.

You are responsible for:

Keeping account credentials confidential.
Using a secure password.
Protecting access to your device.
Informing us promptly if you suspect unauthorised account activity.

16. Personal Data Breaches

We will investigate suspected personal-data breaches where appropriate.

Where required by law, we will notify:

The Information Commissioner’s Office.
Another competent supervisory authority.
Affected individuals.

A notification may include:

The nature of the breach.
The types of information involved.
The likely consequences.
Steps we have taken.
Steps you may take to protect yourself.
Our contact information.

We may not notify individuals where notification is not legally required.

17. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or as required by law.

Retention periods may depend on:

Whether you maintain an account.
Whether an order is open.
Whether a return or refund remains unresolved.
Tax and accounting obligations.
Consumer-rights obligations.
Fraud-prevention needs.
Chargeback periods.
Warranty periods.
Complaint or dispute handling.
Legal limitation periods.
The need to establish or defend claims.

Examples may include:

Order and transaction records retained for tax, accounting, and legal purposes.
Customer-service communications retained while a complaint or dispute may remain relevant.
Marketing-consent records retained to demonstrate consent.
Opt-out records retained to ensure we continue respecting your preference.
Security logs retained for fraud prevention and system protection.

When personal information is no longer required, we may securely delete, destroy, or anonymise it unless continued retention is legally required.

18. Automated Decision-Making and Profiling

We or our service providers may use automated systems to:

Assess potential fraud.
Identify suspicious orders.
Personalise website content.
Measure advertising.
Select advertisements.
Recommend products.

An order may be held or reviewed where an automated fraud system identifies unusual activity.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects without appropriate safeguards where those safeguards are legally required.

Where applicable, you may have the right to:

Request human review.
Express your point of view.
Challenge a significant automated decision.
Obtain information about the logic involved.

19. Accuracy of Personal Information

We take reasonable steps to ensure that personal information is accurate, complete, relevant, and up to date.

You may be able to update certain information through your customer account.

You may also contact us to request correction at:

info@eviralondon.com

We may ask you to:

Verify your identity.
Identify the relevant records.
Provide the correct information.
Provide supporting evidence where reasonably required.

Where required by law, we will explain a refusal to correct information and provide information about how to complain.

20. Your Privacy Rights

Depending on applicable law and the circumstances, you may have the right to:

Be informed about how your personal information is used.
Request access to your personal information.
Request correction of inaccurate information.
Request completion of incomplete information.
Request deletion of personal information.
Request restriction of processing.
Object to certain processing.
Object to direct marketing.
Withdraw consent.
Request transfer of certain information in a portable format.
Challenge certain automated decisions.
Complain to a data-protection authority.

These rights are subject to legal conditions, limitations, and exemptions.

21. Right of Access

You may request confirmation of whether we process your personal information and request access to that information.

Where applicable, we may also provide:

The purposes of processing.
The categories of information processed.
The categories of recipients.
Retention information.
Information about your rights.
The source of information not collected directly from you.
Information about relevant automated decision-making.
Information about international safeguards.

We may ask you to verify your identity before responding.

We will respond within the period required by applicable law.

22. Right to Correction

You may ask us to correct inaccurate information or complete information that is incomplete.

We may verify the accuracy of the requested correction before changing our records.

23. Right to Deletion

You may ask us to delete personal information in circumstances provided by law.

We may be unable to delete information where retention remains necessary to:

Complete a contract.
Comply with a legal obligation.
Establish or defend legal claims.
Prevent fraud.
Maintain suppression records.
Exercise freedom-of-expression rights.
Perform another legally permitted purpose.

24. Right to Restrict Processing

You may request restriction of processing where:

You contest the accuracy of the information.
Processing may be unlawful.
We no longer need the information but you require it for a legal claim.
You have objected and the objection is being considered.

25. Right to Object

You may object to processing based on legitimate interests.

We may continue processing if we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is required for legal claims.

You have an absolute right to object to the use of personal information for direct marketing.

26. Data Portability

Where processing is based on consent or contract and carried out by automated means, you may have the right to receive certain personal information in a structured, commonly used, machine-readable format.

Where technically feasible and legally required, you may request that the information be sent to another controller.

27. Withdrawing Consent

Where we rely on consent, you may withdraw it at any time.

You can:

Change cookie preferences.
Use an unsubscribe link.
Contact us.
Change available account preferences.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

28. How to Exercise Your Rights

To exercise a privacy right, email:

info@eviralondon.com

Please include:

Your full name.
Your email address.
Your order number where relevant.
The right you wish to exercise.
Enough information for us to identify the relevant records.

We may request reasonable evidence of identity.

We will normally respond without undue delay and within the period required by applicable law.

Complex or multiple requests may require additional time where legally permitted. Where applicable, we will notify you of any extension.

We will generally not charge a fee. A reasonable fee may be permitted for requests that are manifestly unfounded, excessive, or repetitive.

29. Anonymity and Pseudonymity

Where practicable, you may contact us anonymously or using a pseudonym for a general enquiry.

We will normally need identifying information to:

Process an order.
Take payment.
Deliver products.
Locate a transaction.
Process a return or refund.
Investigate fraud.
Respond to a privacy request.
Comply with legal obligations.

30. Children’s Privacy

Our Services are not directed to children under the age of 13.

We do not knowingly collect personal information directly from children under 13 without appropriate legal authority or parental involvement.

If you believe a child has provided personal information to us, contact:

info@eviralondon.com

Where appropriate and legally required, we will take reasonable steps to delete the information.

31. Third-Party Links

Our Site may contain links to websites or services operated by independent third parties.

Evira London does not control and is not responsible for their:

Privacy practices.
Security.
Content.
Cookie use.
Data-processing activities.

We recommend reviewing the privacy policy of every third-party website before providing personal information.

32. Privacy Complaints

If you believe we have mishandled your personal information or breached applicable data-protection law, contact us at:

info@eviralondon.com

Please include:

Your full name.
Your contact details.
A description of your concern.
Relevant dates.
An order number where applicable.
The outcome you are seeking.
Supporting information.

We will:

Acknowledge the complaint within a reasonable period.
Review the circumstances.
Request further information where necessary.
Investigate the complaint.
Provide a response and proposed resolution within a reasonable period.

We aim to provide a substantive response within 30 days, although complex matters may require longer.

33. Complaints to the Information Commissioner

You may have the right to complain to the Information Commissioner’s Office, the United Kingdom’s data-protection regulator.

We encourage you to contact us first so that we have an opportunity to resolve the matter.

Contacting us first does not remove your right to complain directly to the Information Commissioner’s Office.

Because Seta Services is established in the Netherlands, you may also have the right to complain to the Dutch Data Protection Authority or another competent European supervisory authority where European data-protection law applies.

34. United Kingdom Representative

Where required under the UK GDPR, a controller established outside the United Kingdom that offers goods or services to individuals in the United Kingdom may need to appoint a representative in the United Kingdom.

If Evira London appoints a UK representative, that representative’s identity and contact details will be added to this Privacy Policy.

Until such details are published, privacy enquiries should be directed to:

info@eviralondon.com

35. Contact Information

For questions about this Privacy Policy, privacy rights, marketing preferences, cookies, or privacy complaints, please contact us:

Store Name: Evira London
Legal Company Name: Seta Services
Chamber of Commerce Number: 92397379
VAT Number: NL004950717B85
Email: info@eviralondon.com
Phone Number: + 44 20 39967976
Business Address: Damstraat 10, 2265 AH Leidschendam, The Netherlands

Customer Service Hours:
Monday to Friday: 8:00 am–7:00 pm UK time
Saturday: 8:00 am–5:00 pm UK time

We aim to respond to general customer enquiries within 24 hours.