Privacy policy

Privacy Policy

All Things Lovely – Privacy Policy

At All Things Lovely, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains what information we collect, how we use it, who we may share it with, and the rights you have in relation to your personal data.

Information We Collect

When you visit our website, place an order, contact us, or sign up to receive marketing, we may collect information such as:

  • Your name
  • Billing and delivery address
  • Email address
  • Telephone number
  • Order and purchase information
  • Payment-related information
  • Communications you send to us
  • Information about how you use our website, including device and browser information
  • Marketing preferences

Payment information is generally processed securely by our payment providers rather than being stored directly by us.

How We Use Your Information

We may use your personal information to:

  • Process and fulfil your orders
  • Arrange delivery of your purchases
  • Provide order updates and customer service
  • Deal with refunds, returns, complaints, or queries
  • Prevent fraud and protect our business
  • Improve our website and customer experience
  • Keep appropriate business, tax, and transaction records
  • Send marketing communications where you have agreed to receive them or where otherwise permitted by law

Under UK data protection law, businesses need a lawful basis for each purpose for which they use personal information.

Depending on the circumstances, we may rely on:

Contract – where processing is necessary to fulfil your order or provide a service you requested.

Legal obligation – where we are required to keep or use information to comply with the law.

Legitimate interests – where necessary for the reasonable operation and protection of our business, provided those interests do not override your rights.

Consent – for certain activities such as optional marketing or non-essential cookies, where consent is required.

Sharing Your Information

We only share personal information where reasonably necessary to operate our business and fulfil your order.

This may include sharing information with:

  • Shopify, which hosts our online store
  • Payment processors
  • Suppliers and fulfilment partners
  • Delivery companies and couriers, including Royal Mail and DPD
  • IT, website, analytics, and other service providers
  • Professional advisers or authorities where required by law

Because some products may be fulfilled directly by different suppliers, we may provide the relevant supplier with information such as your name, delivery address, and order details so they can dispatch your order.

We do not sell your personal information to advertisers.

Shopify

Our store is powered by Shopify.

Shopify processes certain customer and website visitor information to provide ecommerce, checkout, analytics, security, and other services to merchants. Shopify also provides privacy settings and cookie controls for stores operating in the UK.

Cookies

Our website uses cookies and similar technologies.

Some cookies are necessary for the website to operate, while others may be used for analytics, marketing, or personalisation.

For non-essential cookies, UK visitors generally need to be given information about their use and an opportunity to consent where required.

You can manage your cookie choices using the cookie banner or privacy controls available on our website.

Marketing

If you subscribe to our emails or otherwise agree to receive marketing from us, we may send you information about products, offers, new arrivals, and promotions.

You can unsubscribe at any time using the unsubscribe option in our emails or by contacting us.

Withdrawing consent will not affect the lawfulness of any processing carried out before consent was withdrawn.

How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to fulfil orders, provide customer service, meet accounting or legal requirements, and resolve disputes.

Retention periods may vary depending on the type of information and our legal obligations.

Your Data Protection Rights

Depending on the circumstances, you may have the right to:

  • Ask for a copy of the personal information we hold about you
  • Ask us to correct inaccurate information
  • Ask us to delete your personal information
  • Ask us to restrict how we use your information
  • Object to certain uses of your information
  • Request transfer of certain information
  • Withdraw consent where processing is based on consent

The ICO confirms that privacy notices should explain these rights and how customers can exercise them.

To exercise any of these rights, please contact us using the details below.

International Data Transfers

Some companies that provide services to us, including ecommerce, payment, technology, or fulfilment providers, may process information outside the UK.

Where this occurs, appropriate safeguards should be used as required by applicable data protection law.

Security

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, alteration, or disclosure.

However, no online system can guarantee complete security.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our business, suppliers, website, or legal requirements.

The latest version will always be published on our website.

Contact Us

If you have any questions about this Privacy Policy or how your information is used, please contact:

All Things Lovely
Email: [your business email address]

You also have the right to raise concerns with the Information Commissioner’s Office (ICO) if you are unhappy with how your personal information has been handled. The ICO specifically requires privacy notices to explain how people can complain.

One thing I’d also do in Shopify is check Settings → Customer privacy and make sure the UK cookie banner is switched on. Shopify says its automated privacy settings can configure a cookie banner for UK visitors, although third-party apps or manually added tracking may need additional consent handling.