The term ‘Lois Avery Limited’ or ‘Lois Avery’ or ‘us’ or ‘we’ refers to the owner of the website whose registered office is 85 Great Portland Street, First Floor, London, W1W 7LT. The Company is registered in England and Wales and the registration number is 9979095. The term ‘you’ or ‘customer’ refers to the user or viewer of this website.
For the purposes of this policy, Lois Avery Limited is the Data Controller. This policy has been updated to incorporate the General Data Protection Regulations 2018 ("GDPR") and we are committed to protecting your privacy in accordance with this legislation.
If you have any queries about this policy please email firstname.lastname@example.org
Our store is hosted by Squarespace, they provide the online e-commerce platform that allows us to sell products and services to you.
INFORMATION WE COLLECT
You can browse our website without being asked to provide any personal information, but we require a certain amount of information from you in order to fulfill an order, or answer any queries.
We ask for the minimum required information to allow us to do that: name, address, delivery address, email and telephone number.
We ask for your payment card details when you place any order, but we do not store this information. All payments are processed through a third party company, Stripe, Inc. and the only information provided to us is the last 4 digits of your payment card.
We use web analytics tools when you browse our website that may record things like your IP address, browser type, browser plug-ins, operating system, time zone settings etc.
If you place an order on our website, we record details of the transaction, including the products you have bought from us.
We do not knowingly record any information that is categorised as sensitive under the GDPR.
HOW DO WE USE INFORMATION
We use this information to provide you with the products and services we offer and to make your experience of our website more enjoyable.
We do this on the basis that it is necessary to fulfill our contract with you or to meet our legitimate business interests.
Contractual necessity includes identifying you, responding to any inquiries, and providing products and services (including processing your orders and refunds).
Legitimate interest includes the prevention of fraud, website security, personalising your website experience, keeping you informed of events and promotions.
Where we are required to collect personal data by law, or under the terms of the contract between us and you do not provide us with that data when requested, we may not be able to perform the contract (for example, to deliver goods or services to you). If you don’t provide us with the requested data, we may have to cancel a product or service you have ordered.
We will only use your personal data for a purpose it was collected for or a reasonably compatible purpose if necessary. For more information on this please email us at email@example.com
In addition, we may be required by law (legal compliance) to process your personal data.
SHARING YOUR PERSONAL DATA
We have to share your personal data with a number of third parties to allow us to provide our goods and services.
In order to process and fulfill your order by necessity we share your data with Stripe Inc. (our payment service provider), Royal Mail (who deliver the order to you), and our email service provider (who send out the order confirmation email).
Before we share your personal data with any third party for their own marketing purposes we will get your express consent, as set out below.
When you provide us with personal information to complete a transaction, place an order, arrange for delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific purpose only.
If we ask for your personal information for a secondary reason, like marketing, we will ask you directly for your express consent. If after you opt-in, you change your mind, you may withdraw your consent for us to contact you at any time by emailing firstname.lastname@example.org
CONTROLLING YOUR PERSONAL INFORMATION
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.
Under data protection laws you have rights in relation to your personal data that include the right to request access, correction, erasure, restriction, transfer, to object to processing, to portability of data and (where the lawful ground of processing is consent) to withdraw consent.
If you would like to access any of these rights, or register a complaint, or you simply want more information contact us at email@example.com
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive or refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you.
Please refer to the Information Commissioner’s Office (www.ico.org.uk) for further information.
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical and electronic procedures to safeguard and secure the information we collect online.
We keep your information on our databases until you ask us to delete it or for as long as it is relevant.
Cookies may be set by the website you are visiting ('first party cookies') or they may be set by other websites who run content on the page you are viewing ('third party cookies').
Our website uses the following functional and required cookies: Crumb, RecentRedirect, CART, hasCart, SiteUserInfo, SiteUserSecureAuthToken, squarespace-popup-overlay, and squarespace-announcement-bar.
Our website uses the following Analytics and Performace cookies: ss_cid, ss_cvr, ss_cvisit, ss_cvt, ss_cpvisit, and ss_cookieAllowed.
You can email firstname.lastname@example.org if you would like to find out more about these cookies.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website or placing an order.
LINKS TO OTHER WEBSITES
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
Lois Avery may change this policy from time to time by updating this page. You should check this page regularly to ensure that you are happy with any changes.
We are registered with the Information Commissioner's Office, Registration No: ZA208913