Privacy Policy
[To confirm by the merchant: this policy is a draft prepared for Emily Harrison London. Every item marked "To confirm by the merchant" must be completed, and the whole text checked, before it is relied on.]
Emily Harrison London · Privacy Policy
This Privacy Policy explains how Emily Harrison London collects and uses personal data when you visit our online shop or place an order. We respect your privacy and handle your personal data in line with applicable data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 where they apply.
[To confirm by the merchant: the data controller (legal entity and address), a privacy contact email address and the data protection law that applies to the business.]
1. Data we collect
We collect the personal data you give us when you place an order, create a customer account, contact us or browse our website:
- your name
- your delivery and billing address
- your email address
- your telephone number, if you provide it
- payment information, which is processed by our payment providers (we do not store card details)
- your IP address and information about the device you use
- how you browse and use our website
2. Why we use your data
We use your personal data to:
- process, dispatch and deliver your orders
- answer your questions and provide customer service
- send you news and offers, only where you have agreed to receive them
- keep our website secure and improve the shopping experience
Legal basis for processing (UK GDPR Article 6):
- order processing: performance of a contract
- marketing emails: your consent, which you can withdraw at any time
- website improvement and fraud prevention: our legitimate interests
3. Sharing your data
We only share personal data where it is needed to run the shop:
- with our e-commerce platform, Shopify, which hosts this shop and processes orders
- with payment providers, to take payment securely
- with carriers and postal services, to deliver your order
- where the law requires us to
We never sell or rent your personal data.
[To confirm by the merchant: the analytics, advertising and email marketing services in use (for example a Meta pixel, Google Analytics or a newsletter service), which must be named here.]
4. How long we keep your data
We keep personal data only for as long as we need it for the purposes above, or for as long as the law requires, for example for accounting records. After that, it is deleted securely.
[To confirm by the merchant: the retention period for order and accounting records.]
5. Cookies
Our website uses cookies. Our Cookie Policy explains which cookies we use and how you can manage them.
6. Your rights
Under the UK GDPR you have the right to:
- access the personal data we hold about you
- have your data corrected or erased
- object to, or ask us to restrict, the processing of your data
- receive your data in a portable format
- withdraw your consent at any time, where we rely on consent
- complain to a data protection supervisory authority, in the UK the Information Commissioner's Office (ico.org.uk)
To use any of these rights, contact us through our contact page. We respond within one month.
7. Security
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. Our website uses encrypted connections, and payment card details are handled by our payment providers, not stored by us.
8. International transfers
Some of our service providers may process personal data outside the UK. Where this happens, we make sure appropriate safeguards are in place, as data protection law requires.
9. Contact
If you have a question about this Privacy Policy, please contact Emily Harrison London through our contact page.
[To confirm by the merchant: privacy contact email address and postal address.]