Who controls your information
The Lacestry Collection is the controller for information handled through this website. Contact us at hello@thelacestrycollection.com for privacy questions, rights requests, our current postal contact details or complaints.
Information we collect
We collect account details, contact information, delivery addresses, order contents, correspondence, reviews and marketing preferences. We also receive limited technical information needed to operate and secure the website. Stripe handles full payment-card details; we receive payment references, status and order totals rather than your full card number.
Why we use it
- To take payment, fulfil orders, provide customer service and manage returns under our contract with you.
- To prevent fraud, secure accounts, maintain records and improve our service where we have a legitimate interest.
- To meet tax, accounting, consumer-protection and other legal obligations.
- To send marketing only where you have consented. You can unsubscribe at any time.
International transfers
Some providers may process information outside the UK. Where UK data-protection law requires it, we rely on an adequacy regulation or approved contractual safeguards and relevant supplementary measures.
How long we keep it
Order and transaction records are generally retained for up to six years after the relevant accounting period where required for legal and tax records. Account information is kept while an account is active and then only as needed for legal claims, fraud prevention or required records. Failed or abandoned checkout, email-delivery and security records are removed or minimised when no longer operationally necessary.
Cookies and local storage
Essential secure cookies keep signed-in customers and administrators authenticated. The browser stores your shopping bag locally so it remains available between visits. Stripe may use essential payment technology during checkout. We do not currently use non-essential advertising cookies through this website.
Your rights
Depending on the circumstances, you can ask for access, correction, deletion, restriction, portability or an objection to processing, and can withdraw consent. Email us to make a request. You can also complain to the UK Information Commissioner's Office at ico.org.uk.
Security and children
We use access controls, signed sessions, email verification, transport encryption and operational safeguards. No internet service can promise absolute security. This shop is not directed at children under 13 and we do not knowingly collect their information.
Changes
We may update this notice as our services or legal duties change. The date at the top shows the latest version.