Privacy Policy
Last updated: 1.12.2025
1. Who we are (Controller)
“Celestica by Ray” (“we”, “us”, “our”) operates https://www.celesticabyray.uk/.
Controller: Celestica by Ray • Registered address: 2/1, 24 Ibrox Street, G51 1AQ, Glasgow, United Kingdom • Email: info@celesticabyray.uk
We comply with the UK GDPR and Data Protection Act 2018.
2. What this policy covers
How we collect, use, share and protect your personal data when you visit our website, place an order, contact us, subscribe to emails or interact with our ads. For cookies, see our Cookie Policy.
3. Data we collect
A) Provided by you
-
Contact & account data: name, email, phone, delivery/billing address, password.
-
Order & payment data: items purchased, order notes, transaction IDs (card details are processed by our payment provider; we don’t store full card numbers).
-
Messages: enquiries, reviews, support chats.
-
Preferences: marketing opt-ins, subject choices, subscription settings.
B) Collected automatically
-
Device/usage data: IP address, device type, browser, pages viewed, time on site, referring URLs (via cookies and similar).
-
Event data: product views, add-to-cart, checkout steps, purchases (for analytics and ads measurement).
C) From third parties (where lawful)
-
Payment/anti-fraud signals from [Stripe/PayPal/etc.]; delivery updates from carriers (e.g., Royal Mail / Evri / DPD); ad platforms (e.g., Meta) when you interact with our ads.
4. Why we use your data (lawful bases)
| Purpose | Examples | Lawful basis |
|---|---|---|
| To provide the store | create/manage account, process orders, deliver goods, customer service | Contract |
| Payments & fraud prevention | take payment, verify transactions | Contract; Legitimate interests; Legal obligation |
| Customer support | handle enquiries, returns, complaints | Contract; Legitimate interests |
| Email marketing | newsletters, product updates (only if you opt-in) | Consent (unsubscribe anytime) |
| Transactional messages | order/dispatch emails, service notices | Contract |
| Analytics | understand site performance (Google Analytics) | Consent |
| Advertising & measurement | Meta Pixel (remarketing, conversion measurement) | Consent; Legitimate interests where permitted (we honour your cookie choices) |
| Security & maintenance | prevent abuse, keep systems up to date | Legitimate interests; Legal obligation |
| Legal & accounting | tax/VAT records, responding to regulators | Legal obligation |
5. Cookies & similar tech
We use cookies and pixels for site operation, analytics (Google Analytics) and ads (Meta Pixel). Non-essential cookies run only with your consent. Manage preferences any time via Cookie Settings. See the Cookie Policy for details.
6. Sharing your data
We share only what’s necessary with trusted providers:
-
E-commerce & hosting: WordPress/WooCommerce, hosting provider Enigmatio Ltd.
-
Payments: [Stripe/PayPal/etc.] (they process your card securely; we receive tokens/confirmation only).
-
Email & CRM: [Mailchimp/Klaviyo/etc.] for newsletters and flows (only if you subscribe).
-
Delivery partners: Royal Mail / Evri / DPD (labels, tracking).
-
Analytics & ads: Google (Analytics) and Meta (Pixel/Ads) for measurement and relevance (respecting your consent choices).
-
IT/security/support: developers and tools we use to run and protect the service.
-
Legal/authorities: where required by law or to defend legal claims.
We do not sell your personal data.
7. International transfers
Some partners (e.g., Google, Meta, Mailchimp) may process data outside the UK/EEA. When this happens, transfers rely on safeguards such as Standard Contractual Clauses (SCCs) and other measures used by those providers.
8. How long we keep data (retention)
-
Orders & invoices: usually 6 years for tax/accounting.
-
Customer support: up to 3 years after resolution.
-
Marketing contacts: until you unsubscribe or after 24 months of inactivity.
-
Analytics event data: typically 26 months (per your cookie preferences).
We may keep data longer if needed for legal claims.
9. Marketing choices
-
Email: we’ll send marketing only if you opted in. Unsubscribe via any email footer or contact us.
-
Ads (Meta/Google): we may use hashed identifiers to reach or exclude customers in a privacy-protective way. You can control ads in your Meta or Google ad settings and through our Cookie Settings.
10. Your rights (UK GDPR)
You can:
-
Access your data and get a copy.
-
Correct inaccurate data.
-
Delete data (where we have no legal reason to keep it).
-
Restrict or object to certain processing (including direct marketing).
-
Port data you provided to us (machine-readable copy).
-
Withdraw consent at any time (where we rely on consent).
To exercise rights, email info@celesticabyray.uk. We aim to respond within one month. We may need to verify your identity.
11. Security
We use industry-standard safeguards: HTTPS/SSL, strong access controls, least-privilege accounts, and regular updates. No method is 100% secure; please keep your account password confidential and use unique credentials.
12. Children
Our site is not directed to children. You must be 18+ to purchase. If you believe a minor has provided data, contact us and we’ll delete it where appropriate.
13. Third-party links
Our website may link to external sites. Their privacy practices are their own—please review their privacy policies.
14. Changes to this policy
We’ll update this page if our practices change. Check the “Last updated” date. For significant changes, we’ll provide a clear notice.
15. Contact & complaints
Questions or requests: info@celesticabyray.uk or write to: Celestica by Ray, 2/1, 24 Ibrox Street, G51 1AQ, Glasgow, United Kingdom.
If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/ • Tel: 0303 123 1113. We’d appreciate the chance to resolve matters first.

