What’s this about?
This page explains what types of personal data we may collect from you when you visit our site or buy from us. It also explains how we will handle and store your data.
In this document, when we say “we” or “us” that is referring to the business “Emma May”.
Personal data can mean things such as your name, address, email address, IP address, and any activity on our website. Some of these will be things you provide when you interact with us (name, address etc.) others may be collected automatically (IP address, browser type etc.).
Why are you collecting any personal data?
In order to provide you with a great service we will occasionally need some personal data.
This may be in the form of your email address if you join a newsletter we offer or ask to be notified about a product, or your online name if you connect with us on social media. If you place an order with us, we will need certain personal information such as your name, address and telephone number in order to fulfil our contractual obligations.
If the law requires us to, we may also need to collect and process data, for example if the police asked us for information relating to fraud or other criminal activity.
In certain circumstances we may collect your data in other ways which may reasonably be expected as part of running our business, and which does not impact on your rights, freedom, or interests.
When and what data will you collect?
When you visit our website we may collect information gathered by cookies in your browser. This may give us details of your visit, where you came from (e.g. if you clicked a link elsewhere to end up on our website), what you looked at, or what you searched for.
When you make a purchase with us we may collect your name, contact details, gender, date of birth, billing and delivery addresses, order details and receipts. When you place an order with us over the phone we will also take your payment details solely in order to process your payment.
When you engage with us on social media we may collect your comments and reviews.
When you enter competitions or prize draws further data may be collected for the purposes of the competition.
When you give a third party permission to share information they hold about you with us.
How do you use my data?
We only use your data to provide you with services and to improve our business. This may be in the form of:
- Processing your order, including payment and shipping. This may include sharing limited amounts of your data with third parties such as the delivery service or payment portal. Without doing this we would be unable to fulfil your order.
- If you choose to use one of the Klarna payment methods, passing on your personal data (contact and order details) to Klarna, in order for Klarna to assess whether you qualify for their payment methods and to tailor those payment methods for you. Your personal data transferred is processed in line with .
- To respond to your queries, refund requests, and complaints. We may keep a record of any information you provide and our communications with you in order to inform any future communication.
- Contacting you to let you know about an item you were interested in, or a promotion, or competition.
- To keep a record of your loyalty rewards if you have elected to join our loyalty programme.
- To protect our business and your account with us from fraud or other illegal activities.
- To send you communications required by law or to inform you of significant changes to our terms and conditions.
- To administer any of our competitions or prize draws which you have entered.
- To comply with a legal obligation made to us by law enforcement.
- To asses how users interact with our website in order to improve it.
How do you protect my data that you hold?
We secure all parts of our website that handle personal data with https technology. You can check this by making sure there is a padlock in the address bar at the top of your browser.
We use software services provided by a company who fully comply with GDPR regulations and are designated as a data processor with Emma May remaining the data controller.
Access to your personal data is password protected.
We only retain data for as long as necessary for the purpose it was collected. At the end of this period your data will be deleted/destroyed, or anonymised so that it can be used in a non-identifiable way for business data analysis.
Who do you share my data with?
We may occasionally share limited portions of your data with trusted third parties. The main examples of this are that we must share your address with our delivery courier (usually Royal Mail) in order to send your order to you, or if you choose to use one of the Klarna payment methods we must share your contact and order details with them.
When we do this, we only share the data necessary for them to perform their service and they may only use your data for the exact purposes we specify in our contract with them.
We may also be required to share your data with the police, or other enforcement or regulatory bodies for the purposes of fraud/illegal activity prevention and/or upon receipt of a valid request to do so.
What are my rights regarding data you hold about me?
You have the right at any time to request access to any data we hold on you.
You can request that we correct any personal data that we hold that is incorrect.
You can request that we stop using your personal data for direct marketing.
Where you have given your consent for us to hold your personal data, you can withdraw that consent at any time.
You can request that we delete or remove any of your data when there is no longer any reason for us to continue holding it.
Where we are processing your personal data on the basis of legitimate business interest (such as information regarding your visit to our website), you can ask us to stop.
If you have any questions or wish to withdraw your consent please write to us at the details on our Contact Us page.
If you are concerned about how we are handling your data or have a complaint you can contact the Information Commissioner’s Office.
What if I’m from outside the UK/EU?
For all non-UK customers, by using our services you expressly consent to us collecting and handling personal data in order for us to provide you with services and run our business. In the ordinary course of providing our services we may need to transmit your data between countries and this may include storage of your data in the UK. By using our services, you agree to this use for normal business purposes.
We are committed to keeping your personal data secure and will take all reasonable precautions to protect it against loss or misuse.
If you have any questions, or you wish to withdraw your consent for us to hold your personal data please write to us at the details on our Contact Us page. We will respond to you within 30 days.
Changes to this policy
From time to time we may make changes to this policy. When significant changes are made, we will notify you by prominently posting a notice of changes or contacting you directly. However, please periodically review this page to learn how Emma May is processing your data.