Privacy policy

Privacy policy

This policy explains what personal data we collect when you visit our website or buy from us, why we use it and the rights you have. It is written for the UK GDPR and the Data Protection Act 2018.

Who is responsible for your data

The data controller for Heather & Grace is LN Marketing, a company registered in France (company number 893068395), 19 rue du Musée, 13001 Marseille, France. You can contact us about your data at support@heatherandgrace.co.uk.

What we collect

  • Order details: your name, delivery and billing address, email address, phone number if you give it, the items you buy and your order history.
  • Payment: payments are handled by our payment providers. We do not see or store your full card number.
  • Messages: what you send us through the contact form or by email.
  • Browsing data: your device, browser, IP address and the pages you view, collected through cookies and similar tools.

Why we use it, and on what legal basis

  • To process, deliver and support your order, including exchanges and refunds (to perform our contract with you).
  • To keep accounting and tax records (to meet our legal obligations).
  • To keep the website secure, prevent fraud and improve the shop (our legitimate interests).
  • To send you emails about offers, only if you have agreed, and to measure our advertising through cookies, only with your consent where it is required. You can withdraw your consent at any time.

Who we share it with

We share your data only with the providers who help us run the shop: our e-commerce platform Shopify, payment providers, delivery companies, our email service and, with your consent, advertising and analytics partners such as Meta. They may only use your data to provide their service to us. We never sell your data.

International transfers

Some of these providers are based outside the UK. When your data is transferred, it is protected by appropriate safeguards, such as the UK International Data Transfer Agreement or standard contractual clauses.

How long we keep it

We keep order data for as long as we need it for your order and for the period required by accounting and tax law. Marketing data is kept until you unsubscribe or withdraw your consent.

Cookies

We use cookies that are needed for the shop to work (your basket and checkout) and, with your consent, cookies for analytics and advertising. You can change your choices at any time from the Your privacy choices page or in your browser settings.

Your rights

You have the right to access your data, to correct it, to have it deleted, to restrict or object to its use, to receive it in a portable format and to withdraw your consent. To use any of these rights, contact us at support@heatherandgrace.co.uk. We reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes

We may update this policy. The latest version is always on this page.