Privacy Policy
Last updated: 24 September 2026
GISSAH LIMITED (“Gissah”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you visit our website, purchase our products, create an account, communicate with us, subscribe to marketing communications, or otherwise interact with Gissah.
This Privacy Policy applies to customers and visitors using our online store and should be read together with our Terms and Conditions and Cookie Policy.
1. Who We Are
For the purposes of applicable data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, the controller responsible for your personal information is:
GISSAH LIMITED
Company Registration Number: 850915
VAT Registration Number: GB514193312
Email: [email protected]
If you have any questions about this Privacy Policy or how we process your personal information, please contact us using the details above.
2. Personal Information We Collect
Depending on how you interact with Gissah, we may collect and process the following categories of personal information.
Identity and Contact Information
This may include your name, billing and delivery addresses, email address, telephone number and customer account information.
Order and Transaction Information
When you purchase from us, we may process information including:
- Products purchased
- Order value and history
- Returns and refunds
- Discounts and promotional codes
- Delivery information
- Payment status
Payment information may be processed by Shopify and/or our authorised payment service providers. We do not necessarily receive or store your complete payment card details.
Website and Device Information
We and our technology providers may collect information including your IP address, browser and device type, operating system, website activity, pages and products viewed, referring website, shopping activity, cookie/device identifiers and approximate location derived from technical information.
Customer Service Information
If you contact us, we may process emails, customer-service conversations, WhatsApp communications, telephone communications, complaints, product enquiries, returns/refund requests and other information you choose to provide.
Marketing Information
This may include your email or SMS subscriptions, marketing preferences, campaign interactions, advertising interactions and promotional engagement.
3. How We Use Your Personal Information
We may use your personal information to:
- Process payments, orders, deliveries, returns and refunds.
- Provide customer service and respond to enquiries.
- Create and manage customer accounts.
- Operate, analyse and improve our website and customer experience.
- Detect and prevent fraud, misuse and security threats.
- Communicate information about Gissah products, launches, promotions and offers where permitted.
- Personalise website content and product recommendations where permitted.
- Measure and improve advertising and marketing performance.
- Comply with tax, accounting, consumer protection, regulatory and other legal obligations.
4. Lawful Bases for Processing
Depending on the circumstances, we may rely on the following lawful bases:
Contract — where processing is necessary to enter into or perform our contract with you, including processing and delivering your order.
Legal obligation — where processing is required for us to comply with applicable law.
Legitimate interests — where processing is necessary for legitimate business purposes, provided those interests are not overridden by your rights and interests. This may include fraud prevention, security, business administration and service improvement.
Consent — where you have provided consent for a particular activity, such as certain marketing communications, cookies or advertising technologies.
Where we rely on consent, you may withdraw your consent at any time.
5. Shopify
Our online store is powered and hosted by Shopify.
Shopify provides the ecommerce technology that enables us to operate our website, manage customer accounts, process orders and provide online shopping functionality.
As part of these services, Shopify may process certain personal information relating to our customers and website visitors.
6. Payments
Payments may be processed by Shopify Payments and/or other authorised payment providers available through our website.
Payment providers may process information required to authorise transactions, process payments and refunds, prevent fraud and comply with applicable financial regulations.
We generally do not directly store your complete payment card number or card security code.
7. Delivery, Warehousing and Logistics
We may share information with our warehouse, fulfilment, courier, shipping and logistics partners where necessary to fulfil and deliver your order.
This may include your name, delivery address, telephone number, email address, order details and shipment/tracking information.
8. Service Providers and Third Parties
We may use trusted third-party providers to support our operations, including providers of:
- Ecommerce technology
- Payment processing
- Warehousing and fulfilment
- Shipping and delivery
- Customer service
- Email, SMS and WhatsApp communications
- Loyalty programmes
- Analytics
- Advertising and marketing
- Fraud prevention
- IT and cybersecurity
- Accounting, legal and professional services
These organisations may process personal information where necessary to provide their services.
We may also disclose information when required by law, regulation, court order or another legally valid request.
9. Cookies and Similar Technologies
Our website uses cookies, pixels and similar technologies.
Some are necessary to provide essential website functionality such as shopping carts, checkout, account authentication, security and customer preferences.
Other technologies may be used for analytics, personalisation, advertising, retargeting and marketing measurement.
Where required by applicable law, non-essential cookies and similar technologies will only be used after obtaining appropriate consent.
You can manage your preferences using the cookie controls available on our website.
10. Advertising, Analytics and Social Media
Subject to applicable law and your privacy choices, we may use advertising, analytics and social-media technologies from providers such as:
- Meta, including Facebook and Instagram
- TikTok
- Snapchat
- Microsoft
- Other analytics and advertising providers used by Gissah
These technologies may process information about your device, browsing activity, website interactions, purchases and interactions with advertisements.
Where consent is required, these technologies will be subject to your cookie and privacy preferences.
11. Marketing Communications
Where permitted by applicable law, we may send you information regarding Gissah products, fragrances, collections, launches, special offers, promotions, events and loyalty benefits.
Communications may be delivered through email, SMS or other appropriate channels.
You may unsubscribe from marketing emails using the unsubscribe link provided in those communications or contact us at [email protected].
Unsubscribing from marketing will not prevent us from sending necessary transactional communications regarding your orders, deliveries, returns, refunds or account.
12. International Transfers
Gissah operates internationally, and some of our service providers may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure such transfers comply with applicable data protection requirements.
Depending on the circumstances, this may include applicable adequacy regulations, approved contractual safeguards or other legally recognised transfer mechanisms.
13. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, accounting and regulatory requirements.
Information may be retained for purposes including:
- Fulfilling contractual obligations
- Transaction and accounting records
- Tax compliance
- Returns and customer service
- Resolving complaints and disputes
- Fraud prevention
- Protecting our legal rights
- Meeting regulatory requirements
Different categories of personal information may therefore have different retention periods.
When information is no longer required, we will delete, anonymise or otherwise appropriately dispose of it, subject to applicable law.
14. Information Security
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access or disclosure, accidental loss, alteration, destruction or misuse.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
Customers are responsible for keeping their account credentials confidential and should contact us if they believe their account has been compromised.
15. Your Privacy Rights
Depending on applicable law and your circumstances, you may have the right to:
- Request access to your personal information.
- Request correction of inaccurate or incomplete information.
- Request deletion of your personal information.
- Request restriction of processing.
- Object to certain processing.
- Request portability of certain personal information.
- Withdraw consent where processing relies on consent.
- Object to direct marketing.
Certain rights are subject to applicable legal conditions and exceptions.
To exercise your rights, contact [email protected].
We may need to verify your identity before processing certain requests.
16. Complaints
If you have concerns regarding how we process your personal information, please contact us at [email protected].
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
17. European Customers
If you are located in the European Economic Area (“EEA”), additional rights and protections may apply under the EU General Data Protection Regulation (“EU GDPR”) and applicable national data protection laws.
Depending on the circumstances, these may include rights concerning access, rectification, erasure, restriction, objection, data portability and withdrawal of consent.
You may also have the right to lodge a complaint with the relevant data protection supervisory authority in your country of residence.
18. Children's Privacy
Our online store is intended for a general adult consumer audience.
We do not knowingly collect personal information from children where parental or guardian consent would be required under applicable law.
If you believe a child has provided personal information to us inappropriately, please contact [email protected].
19. Third-Party Websites
Our website may contain links to websites, platforms or services operated by third parties.
We are not responsible for the privacy practices, security or content of third-party websites or services.
We recommend reviewing the applicable privacy policy before providing personal information to a third-party service.
20. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes to our business, services, website, technologies, legal requirements or privacy practices.
When we make changes, we will publish the updated policy on this page and revise the “Last updated” date where appropriate.
21. Contact Us
For questions about this Privacy Policy, requests relating to your personal information or concerns about how we handle your information, please contact:
GISSAH LIMITED
Company Registration Number: 850915
VAT Registration Number: GB514193312
Email: [email protected]