Privacy policy

Last updated: 24 September 2026.

Who is responsible for your information?

ManeDivas (manedivas.co.uk) is operated by Fleeta Limited, company number 16675897, registered office 50 Princes Street, Ipswich, IP1 1RJ, United Kingdom. Fleeta Limited is the controller of the information described here. Our ICO registration reference is ZC229278. For privacy questions or requests, email accounts@fleeta.co.uk or write to our registered office.

This notice covers visits to this website, shopping and orders, enquiries and newsletter sign-ups. We need relevant contact, payment and delivery information to process an order; providing information for optional enquiries and newsletter subscriptions is voluntary.

What we collect and why

When you contact us, we receive the name, email address and message you provide, together with relevant correspondence. We use these details to respond and resolve your enquiry. Our lawful basis is our legitimate interest in providing helpful support and keeping an appropriate record; where you ask us to take steps towards a purchase, it may also be necessary to respond to that request before a contract. Please avoid sending sensitive information that we do not need.

The Shopify platform receives technical information such as your IP address, device and browser information, page requests and security events. Essential processing supports the website, prevents abuse and keeps forms and services working. We rely on our legitimate interests in operating a secure, reliable website. We also process information where necessary to meet a legal obligation or deal with a lawful request.

Orders, payments and returns

Fleeta Limited is responsible for the personal information we use to operate ManeDivas. When you buy, we process your name, contact and delivery details, ordered items, payment status, transaction references and order-related correspondence to take payment, supply the goods, send service messages and deal with cancellations, returns or complaints. This processing is necessary to perform our contract with you or take steps you request before ordering.

Shopify hosts the store and provides checkout and order-management services. Shopify Payments and any other payment provider you choose process the information needed to authorise and manage payment. We do not receive your full payment-card details through ordinary store administration.

For products fulfilled through Shopify Collective, relevant order and delivery details are passed to the product's fulfilment supplier and the delivery carrier so that they can send, track or collect the goods and handle a return. An order containing products from different suppliers may involve more than one fulfilment provider. We remain your retailer and contact for the purchase.

We also use relevant transaction information to prevent fraud, protect the store and resolve disputes, relying on our legitimate interests where appropriate, and to comply with legal obligations. Shopify and payment providers may process information for their own security, regulatory and other purposes as described in their privacy notices. Existing information in this policy about Shopify's wider services and international processing continues to apply.

Keeping order records and marketing choices

We retain records needed for tax and accounting obligations; UK VAT records generally need to be kept for at least six years. Other order and correspondence records are kept for as long as necessary for the transaction, any unresolved matter and applicable legal requirements, then deleted or reduced where appropriate.

Order confirmations, delivery updates and return messages are service communications. Purchasing does not subscribe you to marketing. Optional ManeDivas email subscriptions use the separate consent and unsubscribe choices described in this policy. The contact details and privacy rights explained elsewhere in this policy also apply to order information.

ManeDivas email updates

If you choose the newsletter checkbox, we collect your email address, subscription status and a record of your consent to receive haircare guides, product news and offers from ManeDivas. The lawful basis for those emails is your consent. We use a confirmation email to check the address before activating the subscription. Signing up here does not enrol you in another brand's mailing list.

You can withdraw consent at any time using the unsubscribe link in a marketing email or by contacting accounts@fleeta.co.uk. Withdrawal does not affect the lawfulness of earlier processing. We keep a limited record of withdrawals so that we can respect them, relying on our legitimate interest in avoiding unwanted messages.

Shopify, email services and security

Shopify hosts this store and processes website and subscriber information to provide its services. Our business email provider processes messages sent to our contact address. Access is limited to the people and service providers who need it to operate the website, answer enquiries or manage the emails you selected. Our own newsletter choices remain specific to this brand.

Native Shopify anti-spam protection, including hCaptcha where applied to a form, can process technical and interaction signals to distinguish legitimate requests from automated abuse. Shopify may also process some information for its own purposes under its own privacy terms, including when you use its consumer services. Read Shopify’s consumer privacy policy and hCaptcha’s privacy policy for their respective practices.

Shopify Network Intelligence

Shopify Network Intelligence is enabled for this store. Shopify may combine information about your interactions with this store, other Shopify merchants and Shopify itself to provide and improve analytics, personalisation, advertising and other enhanced services. For this processing Shopify acts as a controller under its consumer privacy policy. Optional uses that require consent are subject to your privacy choices. You can use the store cookie controls and the Shopify privacy portal to learn about and exercise the relevant choices.

Ahrefs Web Analytics

We use Ahrefs Web Analytics to understand aggregate website usage, including which guides people read and where visits come from. Its default setup uses no analytics cookies or persistent identifiers. Ahrefs reports page and referrer information, browser/device categories and approximate location; it states that raw IP addresses are discarded rather than stored. We use these aggregate figures to improve the website, relying on our legitimate interest in understanding its use. This is separate from Shopify’s platform cookies and privacy choices. Read Ahrefs’ explanation of Web Analytics.

Cookies and similar technologies

Shopify uses cookies and related technologies for essential store functions, security and preferences. Its platform also supports measurement and other optional uses. Where consent is required for optional cookies, you can choose through the store’s cookie controls; essential functions may remain active. You can also manage cookies through your browser, although blocking essential cookies can affect forms and other features. See Shopify’s cookie information for details about the platform.

International processing

Shopify and its service providers operate internationally, so information may be processed outside the UK, including in Canada and Singapore. Where UK transfer protections are required, the relevant arrangements can include an adequacy decision or approved contractual safeguards. Shopify’s Data Processing Addendum describes its processing and transfer arrangements. Contact us if you need further information about the safeguards relevant to your data.

How long we keep information

We keep enquiry records for as long as needed to answer the matter and deal with a reasonable follow-up, complaint or legal requirement. Newsletter details remain while a subscription is active and useful for the purpose you chose. We review inactive and unconfirmed records and remove information we no longer need. Limited consent and suppression records may remain after withdrawal to demonstrate and respect your choice. Retention depends on the reason for the record, any unresolved issue and applicable legal obligations; this notice does not promise an automated deletion period.

Your choices and rights

Depending on the circumstances, you can ask for access, correction, erasure, restriction or a portable copy of your information. You can withdraw newsletter consent at any time. You have the right to object to direct marketing, and to processing based on legitimate interests. Contact us using the details above; we may need information to confirm your identity before acting. We do not use the information collected through these forms to make solely automated decisions with legal or similarly significant effects about you.

You can raise a concern with us and also complain to the Information Commissioner’s Office, the UK data protection regulator. We may update this notice when our services or processing change; the date above identifies this version.