Privacy Policy

When you visit or buy from us we may collect:

• Order information — name, delivery and billing address, email address, phone number and the items you bought.
• Payment information — processed by our checkout provider (Shopify) and its payment partners. We never see or store your full card details.
• Device and usage information — IP address, browser type, pages viewed and referring links, collected through cookies and similar technologies.
• Communications — messages you send to our support team.

• To process, fulfil and deliver your order, including passing your delivery details to our fulfilment partner and carrier.
• To send order confirmations, dispatch and tracking updates.
• To respond to support requests, returns and refund claims.
• To detect and prevent fraud and to meet our legal and accounting obligations.
• To measure how our site and adverts perform, and — where you have consented — to send marketing emails you can unsubscribe from at any time.

We rely on contract (to fulfil your order), legal obligation (tax and consumer-law records), consent (marketing and non-essential cookies) and legitimate interests (site security, fraud prevention and improving our products).

We share data only with the service providers we need to run the shop: our ecommerce and checkout platform, payment processors, fulfilment and shipping partners, email provider and analytics/advertising platforms (including Meta). We do not sell your personal data. We may disclose information where required by law.

We use essential cookies to keep your basket working, and analytics/advertising cookies — including the Meta pixel — to understand which adverts lead to orders. You can block or delete cookies in your browser settings, and opt out of personalised ads in your Meta ad preferences.

Order and transaction records are kept for six years to satisfy UK tax and accounting rules. Marketing contacts are kept until you unsubscribe. Support messages are kept for up to two years.

You can ask us to access, correct, delete or export your personal data, restrict or object to processing, and withdraw consent to marketing. Email support@getsmileshine.com and we will respond within one month. UK customers can also complain to the Information Commissioner's Office (ico.org.uk).

We use encrypted connections (HTTPS) and reputable processors. No method of transmission is completely secure, so we cannot guarantee absolute security. Our store is not intended for children under 16.

Smile Shine Ltd — support@getsmileshine.com