Privacy Policy

Reseda Collective is a trading name of Cresva Commerce Group Limited, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. We are the controller of personal data collected through resedacollective.com, our own stores and our customer service channels. When we run reporting for a client, we act as that client's processor and follow their instructions. Contact us at hello@resedacollective.com.

• Enquiries: your name, company, email, phone and message when you contact us or book a call.
• Customers of our stores: name, email, phone, delivery address, order details, and messages you send us by email, Facebook Messenger, Instagram, Shopify chat or WhatsApp.
• Website use: pages visited and basic device information, through first-party analytics.
• Advertising data: campaign performance from Meta and Google Ads accounts our clients connect. This is aggregate reporting and doesn't identify individuals.

• To reply to messages, fulfil and deliver orders, handle returns and provide customer support (contract and legitimate interests).
• To respond to business enquiries and provide our services (legitimate interests and contract).
• To keep accounts secure and meet legal and tax obligations (legal obligation).

We don't sell personal data, and we don't use your messages to train AI models.

If you message one of our Facebook Pages or Instagram accounts, our app reads that conversation (with Meta's permission) so our customer service team can see it alongside your order. We only read messages sent to our own Pages and accounts. We use them to answer you and support your order, and for nothing else. Replies are sent by a person.

Only the service providers needed to run the business, under contract and only for these purposes: hosting and database (Vercel, Supabase), our store platform (Shopify), email (Microsoft), messaging (Meta), payments (GoCardless, and the payment providers at checkout), and suppliers and couriers who deliver your order (name, address and phone only). Some providers are outside the UK and EEA; where they are, we rely on approved safeguards such as standard contractual clauses.

Order records are kept for six years for tax purposes. Customer service notes and messages are kept for up to two years after your last order or message, then deleted or anonymised. Enquiries that don't become customers are deleted after two years.

Personal details, messages and access tokens are encrypted at rest. Access is limited to the team members who need it, and every change is logged.

You can ask for a copy of your data, or ask us to correct, restrict or delete it, or object to how we use it. Email hello@resedacollective.com. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

To have your data deleted, including messages you sent us on Facebook or Instagram, email hello@resedacollective.com with the subject "Data deletion request". Include the name, email or social handle you used. We'll confirm within 30 days. We may need to keep order records that the law requires us to keep.