1. Information We CollectWe may collect the following types of personal data:
- Identity Data: Name, email address, and contact details (e.g., phone number).
- Transaction Data: Details about payments and purchases made.
- Technical Data: IP address, browser type, and website usage data (via cookies or similar technologies).
- Communication Data: Details provided when contacting us or subscribing to our newsletter.
2. Legal Basis for Processing Your DataUnder GDPR, we process your personal data on the following legal bases:
- Contractual Necessity: To process and fulfill orders or provide services you have requested.
- Consent: When you subscribe to our newsletter or agree to cookies.
- Legitimate Interests: To improve our website, prevent fraud, and provide a better customer experience.
- Compliance with Legal Obligations: To fulfill tax or regulatory requirements.
3. How We Use Your DataWe use your personal data to:
- Process and deliver your orders.
- Communicate with you about your order, promotions, or updates.
- Personalize your website experience and improve our services.
- Ensure legal and regulatory compliance.
4. Sharing Your InformationWe may share your data with:
- Service Providers: Third-party vendors (e.g., payment processors, shipping providers) bound by contracts to ensure data protection.
- Legal Authorities: When required by law or to protect our legal rights.
We will never sell your personal data to third parties.
5. International Data TransfersIf your personal data is transferred outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place, such as:
- Binding Corporate Rules (BCRs).
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Adequacy decisions for countries with equivalent data protection laws.
6. Cookies and Tracking TechnologiesWe use cookies and similar technologies to:
- Analyze website traffic and usage.
- Provide a personalized shopping experience.
You can manage or disable cookies through your browser settings. For more details, see our
Cookie Policy.7. Your Rights Under GDPRAs a data subject, you have the following rights:
- Access: Request access to the personal data we hold about you.
- Rectification: Correct inaccurate or incomplete data.
- Erasure ("Right to Be Forgotten"): Request deletion of your personal data.
- Restriction: Limit the processing of your personal data.
- Portability: Request transfer of your data to another service provider.
- Objection: Object to processing based on legitimate interests or for direct marketing purposes.
- Withdrawal of Consent: Withdraw consent where processing is based on consent.
To exercise these rights, contact us at
vera@lazyglow.co.uk.
8. Data RetentionWe retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations.
9. Data SecurityWe implement appropriate technical and organizational measures to protect your data from unauthorized access, alteration, or disclosure.
10. Children's PrivacyOur website is not intended for individuals under 13 years old, and we do not knowingly collect data from children.
11. Changes to This PolicyWe may update this Privacy Policy to reflect changes in our practices or legal requirements. Updates will be posted on this page with the revised effective date.
12. Contact UsFor questions, concerns, or to exercise your rights under GDPR, please contact us at:
Lazy GlowEmail: vera@lazyglow.co.uk
Additionally, you have the right to lodge a complaint with your local data protection authority if you believe your data has been mishandled.