Privacy policy

Last updated: 23 September 2026

Dwellbright is a trading name of Vistaar Ltd. Vistaar Ltd is the controller of the personal information described in this policy.

Company number: 16097083. Registered in England and Wales. Registered office: 8 Trelawn Terrace, Leeds, England, LS6 3JQ. Email: hello@dwellbright.co.uk.

Information we collect

Depending on how you use the store, we may collect:

• identity and contact details, such as your name, billing and delivery addresses, email address and telephone number;
• order, payment-status, refund, delivery and customer-service information;
• account details and preferences if customer accounts are enabled;
• device, browser, IP-address, cookie and store-usage information;
• marketing preferences and records of consent; and
• fraud-prevention, security and transaction-risk information.

Payment-card information is handled by Shopify and the selected payment provider. We do not receive the complete card number.

How and why we use information

We use personal information where necessary to:

• take steps at your request and perform our contract with you, including checkout, payment, fulfilment, delivery, returns, refunds and support;
• comply with legal obligations, including tax, accounting, consumer-protection and fraud-prevention requirements;
• pursue legitimate interests in securing and improving the store, preventing misuse, keeping appropriate business records and understanding performance, provided those interests are not overridden by your rights; and
• send optional electronic marketing where we have the consent or other lawful permission required. You can unsubscribe at any time.

If required information is not provided, we may be unable to process or deliver an order.

Who receives information

We share only what is reasonably necessary with categories of recipients such as:

• Shopify, which hosts and operates the ecommerce platform;
• payment, fraud-prevention and identity-verification providers;
• Shopify Collective suppliers and other approved fulfilment partners that need order and delivery information;
• postal, courier, warehousing and logistics providers;
• customer-support, analytics, security, hosting and marketing service providers;
• accountants, insurers, professional advisers and technology providers; and
• regulators, courts, law-enforcement bodies or other parties where disclosure is legally required or necessary to protect rights.

We do not sell personal information.

International transfers

Some service providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards, we rely on an applicable adequacy regulation, approved contractual protections or another lawful transfer mechanism. Contact us if you would like more information about the safeguards relevant to your data.

Retention

We keep information only for as long as reasonably necessary for the purposes described above. Order, payment, tax and accounting records are generally retained for the period required by applicable law. Support, security and marketing records may be kept for shorter or longer periods depending on the issue, consent status, legal claims and fraud-prevention needs. We securely delete or anonymise information when it is no longer required.

Cookies and similar technologies

Shopify and our approved providers may use essential cookies to operate checkout, security, preferences and other store functions. Non-essential analytics or advertising technologies should be used only in accordance with the consent choices presented by the store. The live cookie banner and Shopify Customer Privacy settings must be read together with this policy.

Your rights

Subject to the law and any applicable exemptions, you may have rights to request access, correction, erasure, restriction or transfer of your personal information, and to object to certain processing. Where processing is based on consent, you may withdraw consent without affecting earlier lawful use.

To exercise a right, email hello@dwellbright.co.uk. We may need information to verify your identity. You also have the right to complain to the UK Information Commissioner's Office at https://ico.org.uk/make-a-complaint/.

Automated decisions

Payment and fraud-prevention providers may use automated risk signals when deciding whether to authorise or review a transaction. We do not intend to make other solely automated decisions that have legal or similarly significant effects on customers without providing the information and safeguards required by law.

Changes and contact

We may update this policy when our services, providers or legal obligations change. The current version will show its latest update date.

Questions or requests should be sent to hello@dwellbright.co.uk or by post to Vistaar Ltd, 8 Trelawn Terrace, Leeds, England, LS6 3JQ.