Privacy Policy

Last updated: 7 September 2026

Steel Magnolias Bling respects your privacy and is committed to handling your personal information responsibly and transparently. This Privacy Policy explains what information we may collect, why we collect it, how it may be used and the rights you have in relation to your personal information.

1. Who We Are

Steel Magnolias Bling is operated by Aliye and provides an online retail service specialising in Bomb Party jewellery.

Email: hello@steelmagnoliasbling.com

For data protection enquiries, please contact us using the email address above.

2. Information We May Collect

Depending on how you use our website, we may collect information including:

• Your name
• Billing and delivery address
• Email address
• Telephone number where provided
• Order and purchase history
• Products you have asked us to source
• Messages or correspondence you send to us
• Delivery and tracking information
• Marketing preferences
• Technical information relating to use of the website, such as device, browser, IP address or cookie information where collected
• Payment-related information processed through our payment service providers

Steel Magnolias Bling does not normally receive or store your complete payment card details where payments are handled securely by an external payment provider.

3. Why We Use Your Information

Your personal information may be used to:

• Process and fulfil orders
• Take payment through our payment providers
• Deliver purchased products
• Provide order confirmations and delivery information
• Respond to questions and customer-service enquiries
• Handle cancellations, refunds or product issues
• Search for products you have specifically asked Aliye to source
• Maintain appropriate business and transaction records
• Protect the website and customers against fraud or misuse
• Comply with legal obligations
• Improve the operation of the website and customer experience
• Send marketing communications where permitted by law

4. Our Lawful Bases

Depending upon the purpose for which information is being used, our lawful basis may include:

Contract – where processing is necessary to take an order, receive payment, deliver goods or otherwise perform our agreement with you.

Legal obligation – where records or information must be retained or processed to comply with applicable law.

Legitimate interests – where reasonably necessary to operate, protect and improve the business, provided those interests are not overridden by your rights.

Consent – where you have actively agreed to a particular use of your information, including marketing where consent is required.

5. Marketing Emails

From time to time, Aliye may send emails about:

• New products added to Steel Magnolias Bling
• New BP collections
• Upcoming releases
• Special events or live sales
• Restocks
• Hard-to-find pieces
• Offers or other Steel Magnolias Bling news

Marketing emails will only be sent where we are permitted to do so. Where consent is required, you will be given a clear opportunity to opt in rather than being automatically subscribed simply because you made a purchase.

In circumstances where UK law permits marketing to existing customers without separate consent, we will only rely on that provision where the relevant legal requirements have been satisfied.

Every marketing email will contain a straightforward method of unsubscribing. You can also ask to stop receiving marketing emails at any time by contacting hello@steelmagnoliasbling.com.

Unsubscribing from marketing will not prevent us from sending necessary service communications relating to an order you have placed.

6. Who We May Share Information With

We may share personal information where necessary with trusted organisations involved in operating the shop, including:

• Website and ecommerce providers
• Payment processors
• Delivery companies and postal services
• Email and communications providers
• IT, hosting and security providers
• Professional advisers where necessary
• Government bodies, regulators or law-enforcement authorities where legally required

We do not sell customer personal information to third parties. Third parties are only provided with information reasonably necessary for the relevant service or purpose.

Stripe processes payments securely. We do not receive or store your full card number or card security code. Stripe handles payment data under its privacy policy.

Order records are stored using Supabase, the website is hosted by Vercel, and the necessary delivery details are shared with the selected postal or delivery service. Email enquiries are handled using Fasthosts forwarding and Google Gmail. These providers may process information outside the UK under their applicable data-protection safeguards.

7. International Services

Some companies used to operate the website, process payments, provide communications or support our services may process information outside the United Kingdom. Where personal information is transferred internationally, appropriate protections will be used where required by applicable data protection law.

8. How Long We Keep Information

Personal information will only be kept for as long as reasonably necessary for the purpose for which it was collected, including to fulfil orders, provide customer service, maintain appropriate business records and comply with legal or regulatory obligations.

Different categories of information may therefore be retained for different periods. When information is no longer required, it will be deleted, anonymised or otherwise securely disposed of where appropriate. Your basket is saved on your device so it can remain available when you return to the shop.

9. Keeping Your Information Secure

Reasonable technical and organisational measures are used to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. However, no internet-based system can be guaranteed to be completely secure.

Customers should also take reasonable steps to protect any account credentials or passwords associated with the website.

10. Cookies and Website Technology

Our website may use cookies or similar technologies to:

• Operate essential website functions
• Remember preferences
• Maintain shopping baskets
• Provide security
• Understand website usage
• Improve website performance
• Support analytics or marketing where permitted

Where consent is legally required for non-essential cookies, appropriate choices should be provided through the website's cookie controls.

11. Your Rights

Subject to applicable UK data protection law, you may have rights relating to your personal information, including the right to:

• Ask what personal information we hold about you
• Request a copy of your personal information
• Ask us to correct inaccurate information
• Ask us to delete information in certain circumstances
• Ask us to restrict certain processing
• Object to certain uses of your information
• Withdraw consent where processing is based on consent
• Object to direct marketing at any time
• Request transfer of certain information where applicable

These rights are subject to the circumstances and exemptions provided by law. To exercise a data protection right, contact hello@steelmagnoliasbling.com. We may need to verify your identity before responding.

12. Complaints

If you have concerns about how your personal information has been handled, please contact us first so we have an opportunity to investigate.

You also have the right to raise a concern with the UK Information Commissioner's Office (ICO), the UK's data protection regulator.

13. Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes to the website, our services or applicable law. The latest version will be published on this website together with its updated date.

14. Contact

Questions about this Privacy Policy or the use of your personal information can be sent to hello@steelmagnoliasbling.com.