Pretty & Spice Privacy Policy

Your privacy is important to us. It is Pretty & Spice’s policy to respect your privacy regarding any information we may collect from you across our website, https://www.prettyandspice.co.uk, and other sites we own and operate.

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from www.prettyandspice.co.uk (the “Site”).

We may update this Privacy Policy from time to time in order to reflect e.g. changes to our privacy practices or for other operational, legal, or regulatory reasons. If we make material changes to this Privacy Policy, we will notify you of such changes by posting the revised policy on this Website, and where appropriate, by other means. Changes and clarifications will take effect immediately upon their posting on the website. By continuing to use our Website and Services after these changes are posted, you agree to the revised policy. If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to provide you with our Services. If such events do take place then this Privacy Policy will continue to apply to your personal data.

It is important that the personal data we hold about you is accurate and up to date. Please keep us informed if your data changes during your relationship with us.

Section 1 – Personal information

We may ask for personal information, such as your name, email address, physical address, and payment details. This data is considered “identifying information”, as it can personally identify you.

We only request this information when you interact with our site services—like shopping and transacting on our site, creating a user account, or subscribing to our newsletter. We may also ask for personal information belonging to someone else when you buy goods and services as gifts intended for direct delivery to the recipient. We only use collected personal information in the context of providing or improving these services.

 Section 2 – Log data

When you visit our website, our servers may automatically log the standard data provided by your web browser. This data is considered “non-identifying information”, as it does not personally identify you on its own. It may include your computer’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details.

We may also collect data about the device you are using to access our website. This data may include the device type, operating system, unique device identifiers, device settings, and geo-location data. What we collect can depend on the individual settings of your device and software. We recommend checking the policies of your device manufacturer or software provider to learn what information they make available to us.

Section 3 – How we collect information

We collect information by fair and lawful means, with your knowledge and consent. We also let you know why we’re collecting it and how it will be used. You are free to refuse our request for this information, with the understanding that we may be unable to provide you with some of your desired services without it.

Section 4 – Use of information

We may use a combination of identifying and non-identifying information to understand who our visitors are, how they use our services, and how we may improve their experience of our website in future. We also use this information to gain insights into demographics, product and service popularity, and the effectiveness of our marketing activity. We do not disclose the specifics of this information publicly, but may share aggregated and anonymised versions of this information, for example, in website and customer usage trend reports.

We primarily use your personal information for the purposes of processing your orders of products and services, delivering those products and services to you (or your nominated recipient), and granting you access to engage with certain areas of our site.

We may use your personal details to contact you with updates about our website and services, along with promotional content that we believe may be of interest to you. If you wish to opt out of receiving promotional content, you can follow the “unsubscribe” instructions provided alongside any promotional correspondence from us.

Section 5 – Data processing and storage

The personal information we collect is stored and processed in, or where we or our partners, affiliates and third-party providers maintain facilities. We only transfer data within jurisdictions subject to data protection laws that reflect our commitment to protecting the privacy of our users.

We only retain personal information for as long as necessary to provide a service, or to improve our services in future. While we retain this data, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification. That said, we advise that no method of electronic transmission or storage is 100% secure, and cannot guarantee absolute data security.

If you request your personal information be deleted, or where your personal information becomes no longer relevant to our operations, we will erase it from our system within a reasonable timeframe.

Section 6 – Cookies

We use “cookies” to collect information about you and your activity across our site. A cookie is a small piece of data that our website stores on your computer, and accesses each time you visit, so we can understand how you use our site. This helps us serve you content based on preferences you have specified. Please refer to our Cookie Policy for more information.

Section 7 – Third-party access to information

We use third-party services for:

  • Analytics tracking
  • User authentication
  • Advertising and promotion
  • Content marketing
  • Email marketing
  • Payment processing

These services may access our data solely for the purpose of performing specific tasks on our behalf. We do not share any personally identifying information with them without your explicit consent. We do not give them permission to disclose or use any of our data for any other purpose.

We may, from time to time, allow limited access to our data by external consultants and agencies for the purpose of analysis and service improvement. This access is only permitted for as long as necessary to perform a specific function. We only work with external agencies whose privacy policies align with ours.

We will refuse government and law enforcement requests for data if we believe a request is too broad or unrelated to its stated purpose. However, we may cooperate if we believe the requested information is necessary and appropriate to comply with legal process, to protect our own rights and property, to protect the safety of the public and any person, to prevent a crime, or to prevent what we reasonably believe to be illegal, legally actionable, or unethical activity.

We do not otherwise share or supply personal information to third parties. We do not sell or rent your personal information to marketers or third parties.

Section 8 – How we use cookies

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number.  We refer to this information as “Order Information.”

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

Section 9 – How do we use your personal information?

We use the Order Information that we collect generally to fulfil any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations).  Additionally, we use this Order Information to:

  • Communicate with you;
  • Screen our orders for potential risk or fraud; and
  • When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.

You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable. If you would like a copy of the information held on you please write to us at the address given below in the Contact us section.

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

Section 10 – Sharing your personal information

We share your Personal Information with third parties to help us use your Personal Information, as described above.  For example, we use Google Analytics to help us understand how our customers use the Site- you can read more about how Google uses your Personal Information here:  https://www.google.com/intl/en/policies/privacy/.  You can also opt-out of Google Analytics here:  https://tools.google.com/dlpage/gaoptout.

We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

This Privacy Policy doesn’t apply to the practices of third parties that we do not own or control, including third party websites, services, products or applications that you elect to access and interact with during your use of the Services, or to individuals that we neither manage nor employ. We take every precaution to ensure that the Third Parties that we work with share our respect for your privacy but we cannot be responsible for them and therefore ask that you carefully review the privacy policies of any Third Party Services that you access on our site

Section 11 – Limits of our policy

This privacy policy only covers Pretty & Spice’s own collecting and handling of data. We only work with partners, affiliates and third-party providers whose privacy policies align with ours, however we cannot accept responsibility or liability for their respective privacy practices.

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

Section 12 – Third parties

Third Party Services that we use may act as joint controllers or processors and may be based inside or outside the EEA. They include the following:-

Shipping/ logistics

Royal Mail

https://www.royalmail.com/privacy-notice

Payment processing

Stripe

https://stripe.com/gb/privacy

Subscription order management

Subbly

http://www.subbly.co/privacy

Email Management

Mailchimp

https://mailchimp.com/legal/privacy/

Analytics and advertising

Google

https://policies.google.com/privacy

eCommerce Platform Hosting and Data Storage

Subbly

http://www.subbly.co/privacy

Social Media and advertising

Facebook

https://www.facebook.com/about/privacy/update

Social Media and advertising

Instagram

https://help.instagram.com/581066165581870

 Social Media

Twitter

https://twitter.com/en/privacy

In general, the third-party providers used by us will only collect, use and disclose your information only to the extent necessary to allow them to perform the services they provide to you/us. We (and our suppliers) use your data for our legitimate business interests of collecting and processing requests and orders, for risk and fraud screening, authentication, processing payments and to improve our Services. We do use some of the personal data that you provide to us to conduct some automated decision-making e.g. IP addresses or payment information to auto-block potentially fraudulent transactions for a period of time. Third-party service providers, such as our payment processors Stripe, have their own privacy policies. We recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

Our store uses Google Analytics, a commonly used software, to help us learn about who visits our site, what pages are being looked at and how well we are doing to help people in their online shopping experience. It records certain information e.g. the city and country you are browsing from, which browser you are using and how you reached the Pretty & Spice website.

Occasionally, we use advertisements that are targeted to people who fit certain general profile categories (Interest Based Ads) e.g. on Facebook or Google. The data for these may be provided to us by you, or by Third Parties. You can opt out of Interest Based Ads sourced by Google using Google’s Ads Settings. For further information on your options around these ads please visit the European Interactive Digital Advertising Alliance.

To protect your personal information, we take reasonable precautions and follow industry best practices to safeguard personal data and ensure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. Our information security systems apply to people, processes and IT systems.

Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

Section 13 – Behavioural advertising

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications (email) we believe may be of interest to you. 

Section 14 – Do not track

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

Section 15 – Your rights and responsibilities

As our user, you have the right to be informed about how your data is collected and used. You are entitled to know what data we collect about you, and how it is processed. You are entitled to correct and update any personal information about you, and to request this information be deleted. You may amend your account information at any time, using the tools provided in your account control panel.

You are entitled to restrict or object to our use of your data, while retaining the right to use your personal information for your own purposes. You have the right to opt out of data about you being used in decisions based solely on automated processing.

Section 16 – Data retention

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

Section 17 – Changes to this policy

At our discretion, we may change our privacy policy to reflect current acceptable practices. We will take reasonable steps to let users know about changes via our website. If you are a registered user on https://www.prettyandspice.co.uk, we will notify you using the contact details saved in your account. Your continued use of this site after any changes to this policy will be regarded as acceptance of our practices around privacy and personal information.

Section 18 – Contact us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at hello@prettyandspice.co.uk or by mail using the details provided below:

SBW Marketing Limited

Kemp House

152-160 City Road

London

EC1V 2NX

Pretty & Spice Data Controller

Saralyn White

Pretty & Spice Data Protection Officer

Saralyn White

This policy is effective as of 8 June 2019.