We may collect the following information when you visit our website, place an order, create an account, contact us or subscribe to marketing:

• Your name, billing and delivery address, email address and telephone number.
• Your account details and preferences.
• Information about your orders, payments, deliveries, returns and refunds.
• Messages or enquiries you send to us.
• Technical information such as your IP address, browser, device and how you use our website.
• Your marketing preferences and cookie choices.

Payments are processed securely by third-party payment providers. We do not store your full payment card details.

We use your personal information to:

• Process payments, fulfil and deliver orders, and manage returns or refunds. Our lawful basis is that this is necessary to perform our contract with you.
• Send order confirmations, delivery updates and respond to customer service queries. Our lawful basis is performance of our contract with you and our legitimate interest in providing customer service.
• Operate, secure and improve our website, prevent fraud and maintain customer accounts. Our lawful basis is our legitimate interest in operating and protecting our business.
• Maintain tax, accounting and other records required by law. Our lawful basis is compliance with a legal obligation.
• Send marketing emails where you have chosen to receive them. Our lawful basis is your consent, which you can withdraw at any time by using the unsubscribe link in an email or contacting us.
• Measure website and marketing performance where you have consented to the relevant cookies or similar technologies.

You must provide the information reasonably required to process and deliver an order. If you do not provide it, we may be unable to complete your purchase.

We may share personal information where necessary with trusted service providers, including:

• Payment providers, including PayPal, Klarna and Stripe.
• Delivery and fulfilment providers.
• Website hosting, WordPress and WooCommerce service providers.
• Email, customer service, analytics and advertising providers where applicable.
• Professional advisers, insurers, regulators or public authorities where required.

We do not sell your personal information.

Some service providers may process personal information outside the UK. Where this happens, we require appropriate protections to be used in accordance with UK data protection law.

We use appropriate technical and organisational measures to protect your information against unauthorised access, loss, misuse or disclosure.

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to fulfil orders, respond to enquiries, maintain accounts and comply with tax, accounting and legal obligations. When information is no longer required, it will be deleted or securely anonymised.

We use cookies and similar technologies to operate our website, remember your preferences, understand how the website is used and measure our marketing.

Cookies that are strictly necessary for the operation of the website may be used without consent. Analytics, advertising and other non-essential cookies will only be used where you have given consent.

You can accept, reject or change your choices through our Privacy Preference Centre. Withdrawing consent will not affect the lawfulness of any processing carried out before consent was withdrawn.

Depending on the circumstances, you may have the right to:

• Request access to the personal information we hold about you.
• Request that inaccurate or incomplete information is corrected.
• Request deletion of your information.
• Request that use of your information is restricted.
• Request a copy of certain information in a portable format.
• Withdraw consent where we rely on consent.

You also have the right to object to our use of your personal information where we rely on legitimate interests, and you can object to direct marketing at any time.

To exercise your rights, contact us at info@demurelashes.co.uk. We may need to verify your identity before responding.

If you are concerned about how we use your information, please contact us first so that we can try to resolve the matter. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

The data controller is Lyndsey Marie Mann, trading as Demure Lashes, of 73 Hen Gei Llechi, Y Felinheli, LL56 4PE. You can contact us at info@demurelashes.co.uk.