Elegant Infusions respects your privacy. This policy explains what personal information we collect when you visit our website, buy from us or get in touch, how we use it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Elegant Infusions Holistic and Giftware is the data controller for personal information collected through elegantinfusions.co.uk. Our address is 7 Heol-y-Parc, Aberdare, CF44 0QA. For any privacy question or request, email info@elegantinfusions.co.uk or call 0333 880 0285.
2. Information we collect
Information you give us
- Orders: your name, billing and delivery address, email address, phone number, order details and any gift messages or delivery notes.
- Your account: if you create an account, your login details, saved addresses and order history.
- Enquiries: your name, email, phone number and message when you use our contact form, email, phone us or message us on social media.
- Wedding and corporate orders: names, wedding dates, venue details, logos and other details you give us to prepare a quote or personalise products.
- Reviews, giveaways and offers: the details you provide when you leave a review, enter a giveaway or verify eligibility for a discount scheme.
We do not see or store your full card details. Card payments are handled directly by our payment providers.
Information collected automatically
When you use our website, our server records technical information such as your IP address, browser type and the pages requested. This is used to run the website securely and to prevent fraud and spam. Our contact form also uses your IP address to limit repeated submissions.
3. How and why we use your information
We only use your information where the law allows us to. We rely on the following lawful bases:
- To perform a contract with you: processing and delivering your order, handling returns and refunds, managing your account and preparing bespoke wedding or corporate orders.
- To meet our legal obligations: keeping accounting and tax records and responding to lawful requests from authorities.
- For our legitimate interests: answering your enquiries, keeping our website secure, preventing fraud, improving our products and service, and defending legal claims. We balance these interests against your rights.
- With your consent: sending marketing emails, if you choose to receive them, and featuring your photos or reviews where we ask permission. You can withdraw consent at any time.
We'll only send you marketing emails if you've opted in, or if you've bought from us before and didn't opt out (in which case we'll only tell you about similar products). Every marketing email includes a simple way to unsubscribe. We never sell your personal information.
4. Who we share your information with
We share personal information only where needed, with trusted service providers who act on our instructions and must keep it secure:
- Payment providers, such as card processors and PayPal, to take payment and prevent fraud;
- Delivery companies, such as Royal Mail and couriers, who receive your name, address and contact details to deliver your order;
- Website hosting, email and IT providers who host our website and handle our email;
- Professional advisers, such as our accountant, for bookkeeping and tax;
- Partner makers, for personalised items, who receive only the details needed to make your order.
We may also share information where required by law, to protect our rights, or with a buyer if the business is sold, in which case your information would continue to be protected in line with this policy.
5. International transfers
Some of our service providers may process data outside the UK. Where they do, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum approved by the Information Commissioner.
6. How long we keep your information
- Order and financial records: six years from the end of the financial year in which the order was placed, as required for tax purposes.
- Accounts: while your account is open. You can ask us to close it at any time.
- Enquiries: up to two years after our last contact, unless they become part of an order.
- Marketing preferences: until you unsubscribe, after which we keep a record so we don't contact you again.
- Server and security logs: for a short period, normally no longer than 90 days.
7. Your rights
You have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information, where we no longer have a reason to keep it;
- ask us to restrict or stop using your information, or object to our use of it, including for direct marketing;
- ask for your information in a portable format;
- withdraw your consent at any time, where we rely on consent.
To make a request, email info@elegantinfusions.co.uk. We'll respond within one month and there is normally no charge. We may need to confirm your identity first.
8. Cookies
Cookies are small text files stored on your device. We use only the cookies needed for the shop to work, so we do not ask for consent to them. We do not use advertising or analytics cookies.
- Basket and checkout cookies (WooCommerce, such as
woocommerce_cart_hash,woocommerce_items_in_cartandwp_woocommerce_session_) remember what is in your basket. They last up to 48 hours. - Account cookies (WordPress, such as
wordpress_logged_in_) keep you signed in to your account. They last for the session, or up to 14 days if you choose "Remember me". - Security cookies set by our payment providers at checkout help prevent fraud.
Embedded content, such as videos or social media posts in our blog, may set cookies from the site that hosts it. You can block or delete cookies in your browser settings, but parts of the shop, such as the basket, will not work without them. If we introduce analytics or marketing cookies, we'll update this policy and ask for your consent first.
9. Security
Our website uses an encrypted (HTTPS) connection, and we limit access to personal information to those who need it. No website can be completely secure, so please use a strong, unique password for your account and keep it private.
Our website is not intended for children under 16, and we do not knowingly collect their personal information.
10. Changes and complaints
We may update this policy from time to time, and the date at the top shows when it last changed. If you have a concern about how we use your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, on 0303 123 1113.