Privacy policy
1. INTRODUCTION
This privacy notice provides you with details of how we collect and process your personal data through your use of our site www.pureluxuries.com, including when you sign up to receive marketing communications by email and/or SMS.
By providing us with your data, you warrant to us that you are over 13 years of age. If you are under 13, you must obtain parental permission to use our website.
Pure Luxuries London LTD is the data controller and we are responsible for your personal data (referred to as “we”, “us” or “our” in this privacy notice).
We have appointed a Data Protection Officer who is in charge of privacy-related matters for us. If you have any questions about this privacy notice, please contact the Data Protection Officer using the details set out below:
Helen Kennedy, Pure Luxuries London Ltd, 6-1-1 Alston House, White Cross Business Park, Lancaster, LA1 4XF
Email address: helen@pureluxuries.com
It is very important that the information we hold about you is accurate and up to date. Please let us know if at any time your personal information changes by emailing us at info@pureluxuries.com.
2. WHAT DATA DO WE COLLECT ABOUT YOU, FOR WHAT PURPOSE AND ON WHAT GROUND WE PROCESS IT
Personal data means any information capable of identifying an individual. It does not include anonymised data.
We may process the following categories of personal data about you:
Communication Data
This includes any communication that you send to us whether that be through the contact form on our website, email, SMS/text message, social media messaging, social media posting or any other communication that you send us.
We process this data for the purposes of communicating with you, providing customer support, record keeping, and for the establishment, pursuance, or defence of legal claims.
Our lawful ground for this processing is our legitimate interests, namely to respond to communications sent to us, to keep records, and to establish, pursue, or defend legal claims.
Customer Data
This includes data relating to any purchases of goods and/or services such as your name, title, billing address, delivery address, email address, phone number, contact details, purchase details, and payment confirmation details (we do not store full card details).
We process this data to supply the goods and/or services you have purchased, to keep records of such transactions, and for fraud prevention purposes.
Our lawful ground for this processing is the performance of a contract between you and us and/or taking steps at your request to enter into such a contract.
User Data
This includes data about how you use our website and online services together with any data that you post for publication on our website or through other online services.
We process this data to operate our website, ensure relevant content is provided to you, maintain website security, create backups, and administer our business.
Our lawful ground for this processing is our legitimate interests, namely to properly administer our website and business.
Technical Data
This includes data about your use of our website and online services such as your IP address, browser type, device information, time zone settings, page views, navigation paths, and other technology on the devices you use to access our website.
The source of this data is our analytics and tracking systems.
We process this data to analyse website usage, administer and protect our business and website, deliver relevant content and advertisements, and measure advertising effectiveness.
Our lawful ground for this processing is our legitimate interests to grow and protect our business.
Marketing Data
This includes your preferences in receiving marketing communications from us by email and/or SMS, your communication preferences, and information related to how you interact with our marketing messages.
We process this data to:
- Send marketing communications by email and/or SMS
- Deliver personalised offers, promotions, and reminders
- Measure and understand the effectiveness of our marketing
Our lawful ground for this processing is either your consent or our legitimate interests to grow our business, depending on how and when the data was collected.
SMS Marketing Data (Specific)
Where you choose to opt in to SMS marketing, we collect and process:
- Your mobile phone number
- Consent status and timestamp
- Message interaction data (such as delivery and link clicks)
We use this data to send you marketing messages, order updates where applicable, reminders, and exclusive offers by SMS.
We do not sell or rent your mobile number to third parties and we only use it in accordance with this privacy notice and applicable laws.
Sensitive Data
We do not collect any Sensitive Data about you. Sensitive data includes information about race or ethnicity, religious or philosophical beliefs, health data, biometric data, or criminal convictions.
We will only use your personal data for the purpose it was collected for or a reasonably compatible purpose. If we need to use your data for an unrelated purpose, we will notify you and explain the legal basis.
We do not carry out automated decision-making or automated profiling that produces legal or similarly significant effects.
3. MARKETING COMMUNICATIONS (EMAIL & SMS)
Our lawful basis for processing your personal data to send marketing communications by email and/or SMS is either your consent or our legitimate interests (namely to grow our business).
Under the Privacy and Electronic Communications Regulations (PECR), we may send you marketing communications if:
- You have made a purchase or requested information from us, or
- You have explicitly opted in to receive marketing communications
You can withdraw your consent or opt out at any time:
- Email: by clicking the unsubscribe link in any email
- SMS: by replying STOP to any SMS message
- Or by emailing us at info@pureluxuries.com
Opting out of marketing communications will not affect transactional messages related to orders or customer service.
4. DISCLOSURES OF YOUR PERSONAL DATA
We may share your personal data with:
- Other companies within our group
- Service providers who provide IT, system administration, and marketing services
- Professional advisers (lawyers, auditors, insurers)
- Government or regulatory authorities where required by law
- Fraud prevention agencies
- Third parties involved in a sale, transfer, or merger of our business
All third parties are required to respect the security of your personal data and process it only in accordance with our instructions and the law.
5. INTERNATIONAL TRANSFERS
Some of our service providers are based outside the UK or EEA. Where this is the case, we ensure appropriate safeguards are in place, such as:
- Adequacy decisions
- Standard contractual clauses
- Approved certification mechanisms
6. DATA SECURITY
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, or disclosed without authorisation.
We limit access to your data to employees and partners who have a legitimate business need.
7. DATA RETENTION
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements.
Marketing data (including SMS subscription data) is retained until you withdraw consent or opt out.
8. YOUR LEGAL RIGHTS
You have rights under UK GDPR including the right to access, correct, erase, restrict, object to processing, data portability, and to withdraw consent at any time.
To exercise your rights, please email info@pureluxuries.com.
9. THIRD-PARTY LINKS
Our website may include links to third-party websites. We are not responsible for their privacy practices and encourage you to read their privacy notices.
10. COOKIES
For information about the cookies we use and how to manage them, please see our cookie policy.