Privacy Policy

Last updated: 20 October 2026

At Stars.co.uk we take your privacy seriously. This policy explains what personal data we collect, how we use it and what your rights are under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Swiss Federal Act on Data Protection (FADP).

Data controller

The controller of your personal data is Revent GmbH, a company incorporated in Switzerland, with its registered office at Moosstrasse 2, 6003 Lucerne (Switzerland), registered under UID number CHE-240.732.435, which operates the website stars.co.uk. Data protection contact: info@stars.co.uk

What data we collect

We only collect the information needed to provide you with the service and comply with our legal obligations:

  • Identification and contact data: first name, surname, email address and phone number (if you provide it).
  • Delivery data: full postal address of the recipient.
  • Billing data: billing address.
  • Order data: information about the personalised product (dates, coordinates, text to include on the map).
  • Payment data: processed entirely by our payment providers (Shopify Payments, Shop Pay, Google Pay, PayPal, Klarna); we don't store full card numbers on our servers.
  • Browsing data: IP address, device type, pages visited and cookies, as described in the Cookies section below.

How we use your data

  • To manage your order: production, delivery, invoicing and after-sales support (legal basis: performance of the contract).
  • To comply with legal, tax and accounting obligations (legal basis: legal obligation).
  • To send you marketing communications, only if you give us your express consent (legal basis: consent).
  • To improve the website experience through aggregated analytics (legal basis: legitimate interest).
  • To measure the effectiveness of our advertising, including the Google Ads enhanced conversions feature described below, only if you give us your consent through the cookie banner (legal basis: consent).

Who we share your data with

We share strictly necessary data with the following processors, who act under contracts that guarantee the protection of your information:

  • Shopify Inc. (Canada): the e-commerce platform hosting the store.
  • Gelato Group (Norway): print-on-demand network that prints and ships orders from the centre closest to the destination.
  • Payment providers: Shopify Payments, Shop Pay, Google Pay, PayPal and Klarna.
  • Hotjar Ltd (Malta): session analytics (heatmaps and recordings), only with your consent.
  • Transactional email and marketing provider: Klaviyo Inc. (United States).
  • Google Ireland Limited (Ireland) and Google LLC (United States): advertising and measurement services (Google Ads and Google Analytics). If you accept marketing cookies, we share purchase data with Google (amount, currency and order number) and, for enhanced conversions measurement, your email, phone and/or address in pseudonymised form (hashed with SHA-256), so Google never receives this data in plain text.
  • Simprosys InfoMedia (India): provider of the app that manages our product catalogue on Google and conversion measurement, acting as a processor exclusively under our instructions.
  • Local carriers (Royal Mail, Evri, DPD, Yodel or others, depending on the shipment's origin).

Some of these providers may process data outside the United Kingdom. In all cases we use providers covered by the UK International Data Transfer Agreement, the European Commission's Standard Contractual Clauses or equivalent adequacy decisions, ensuring a level of data protection comparable to that of the UK GDPR.

Google enhanced conversions measurement

If you give us your consent through the cookie banner, we use the Google Ads enhanced conversions feature to measure the effectiveness of our advertising more accurately. This means that when you complete a purchase, we send Google the email, phone and/or address you provided with the order, always first transformed using an irreversible hashing algorithm (SHA-256), together with the transaction data (amount, currency and order number). Google uses this information solely to securely match it against its own records and correctly attribute advertising conversions, in accordance with its advertising data processing terms. This transfer is made through the Simprosys Google Shopping Feed app, which acts as a processor. The legal basis for this processing is your consent, which you can withdraw at any time through the cookie banner, without retroactive effect.

How long we keep your data

We keep your data while you're a customer and, afterwards, for the periods required by applicable law: up to 10 years for accounting and tax records, and until you withdraw your consent for marketing communications.

Your rights

You can exercise the following rights at any time by writing to info@stars.co.uk with the subject line "Data protection": access to your personal data, rectification of inaccurate data, erasure (right to be forgotten), objection to processing, restriction of processing, data portability, and withdrawal of your consent at any time, without retroactive effect.

If you believe your rights haven't been properly respected, you can lodge a complaint with the Information Commissioner's Office (ico.org.uk) or with the Swiss Federal Data Protection and Information Commissioner (www.edoeb.admin.ch).

Cookies

This site uses technical cookies necessary for the basket and checkout to work, as well as analytics and marketing cookies that are only activated with your consent through the cookie banner. Marketing cookies enable, among other things, the Google advertising conversion measurement described above. You can review and change your preferences at any time.

Changes to this policy

We may update this policy to reflect legal or service changes. The current version will be published at this same URL with the date of the last update.