Privacy Policy
Welcome to www.lucyloveslatex.com by accessing or using this website, you agree to be bound by the following Privacy Policy. Please read them carefully. If you do not agree to these Terms, you should not use this site.
1. Who We Are
Lucy Loves Latex is a sole trader business based in Norfolk, United Kingdom.
Email: lucy@lucyloveslatex.com
Correspondence address: [INSERT FULL GEOGRAPHICAL ADDRESS OR VIRTUAL OFFICE ADDRESS]
For the purposes of UK data protection law, we are the data controller.
2. Information We Collect
We collect personal information when you place an order, contact us, register interest in an event, or interact with the website. This may include your name, email address, billing and delivery address, order details, payment confirmation, IP address, device information, and website usage data. If you contact us directly, we may retain records of that correspondence.
We do not store full payment card details. Payments are processed securely via Wix Payments and associated payment providers.
3. How We Use Your Information
Your personal data is used to fulfil orders, deliver personalised digital content, respond to enquiries, manage event registrations, and provide customer support. We also use data to maintain website security, prevent fraud, and comply with legal and tax obligations.
Where you have opted in, we may use your email address to send marketing communications. You may unsubscribe at any time.
4. Lawful Basis for Processing
We process personal data in accordance with UK GDPR. The lawful bases we rely upon include contractual necessity (to fulfil your order), compliance with legal obligations (such as tax requirements), legitimate interests (such as maintaining website security), and consent (for marketing communications and non-essential cookies).
5. Data Sharing
We may share personal data with trusted third parties where necessary to operate the business. This includes our website hosting provider (Wix), payment processors, delivery providers, and professional advisers such as accountants or legal advisers.
We do not sell or rent personal data to third parties.
6. Data Retention
Order and financial records are retained for up to six years in accordance with UK tax legislation. Marketing data is retained until you withdraw your consent. Other personal data is retained only for as long as reasonably necessary for the purpose for which it was collected.
7. Data Security
We take reasonable technical and organisational measures to safeguard personal data. However, no method of online transmission can be guaranteed to be completely secure.
Data Protection Registration
We are registered with the UK Information Commissioner’s Office (ICO) as a data controller and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Your Rights
Under UK GDPR, you have the right to request access to your personal data, request correction of inaccurate information, request erasure where appropriate, restrict processing, object to processing, and request data portability where applicable.
If you wish to exercise any of these rights, please contact lucy@lucyloveslatex.com.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached.