Privacy policy

Privacy Statement

I am all about empowerment and I take your rights very seriously. I care about your privacy and will take care of your data. This Privacy Policy (written to comply with GDPR ‘General Data Protection Regulation) describes how your personal information is collected, used, and shared when you visit or make a purchase from lush-eclectic.myshopify.com (my site). I Marta Hutt am a Registered Data Controller with the Information Commissioner’s Office.

Your personal information which I collect 

When you make a purchase or attempt to make a purchase through the Site, I collect certain information from you that I need to process your order. This includes your name, billing address, shipping address, payment information (we will only ever see the last 4 digits of your card), email address, and phone number. You may also choose to contact me directly to provide me with additional personal information for example for a custom order or commission. I refer to this information as “Order Information”.  

When you visit the Site, I automatically collect certain information about your device, including your (IP) address which provides me with information about your browser and operating system whih allows me to display my store in the most user-friendly way. I also collect some of the cookies that are installed on your device.Cookies can be used by websites to make a user's experience more efficient. I refer to this automatically-collected information as “Device Information”. 

I collect Device Information using the following technologies: 

• “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org. 

When I talk about “Personal Information” in this Privacy Policy, I am talking both about Device Information and Order Information.

 

How do I use your personal information? 

I use the Order Information that I collect to fulfill any orders placed through the Site. Once I have personally prepared your order and it has been taken to the Post Office, or collected by courier, I provide you with a notification via shopify and for international orders, a tracking number. 

Additionally, I use this Order Information to: 

• Communicate with you; 
• Screen orders for potential risk or fraud
• Provide you with information or advertising relating to my products or services (when in line with the preferences you have shared with me)
• To create bespoke artwork for commission orders 

Sharing you personal Information 

Information about my customers is important to my business. I share your personal information with third parties for very limited reasons and in limited circumstances, as follows:

• Shopify. I use Shopify to power my online store--you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
• Service providers. I engage certain trusted third parties to perform functions and provide services to my shop, such as delivery companies. I will share your personal information with these third parties, but only to the extent necessary to perform these services.
• Mailchimp: If you have opted into email marketing we use Mailchimp to store your data and send you marketing emails. Mailchimp is GDPR compliant and your data is password protected.
• Compliance with laws. I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.

Behavioural advertising 

• Mailing list. You can choose to stay tuned with upcoming promotions, sample sales, new artwork and a peek into my behind the scenes world of Lush Eclectic Art. 

If you want to see what I’m up to / working on or what promos I might have coming up etc, you can visit Instagram & Facebook, click to follow Lush Eclectic and stay tuned on there.

When you opt in, I use your Personal Information to provide you with targeted advertisements or marketing communications I believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work. 

I am all about choice and freedom, so you can unsubscribe from my mailing list at any time. Find more information at Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/. 

Do not track 

Please note that shopify does not alter the Site’s data collection and use practices when they see a Do Not Track signal from your browser. 

Your rights 

If you are a European resident, you have the right to access personal information I hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact me through the contact information below. 

• Access. You may have the right to access and receive a copy of the personal information I hold about you by contacting me using the contact information below.
• Change, restrict, delete. You may also have rights to change, restrict my use of, or delete your personal information. Absent exceptional circumstances (like where I am required to store data for legal reasons) I will generally delete your personal information upon request.
• Object. You can object to (i) my processing of some of your information based on my legitimate interests. In such cases, I will delete your personal information unless I have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.
• Complain. If you reside in the EU and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.

Data retention 

When you place an order through the Site, I will maintain your Order Information for my records unless and until you ask me to delete this information. I retain your personal information only for as long as necessary to provide you with my services and as described in my Privacy Policy. However, I may also be required to retain this information to comply with my legal and regulatory obligations, to resolve disputes, and to enforce my agreements. I generally keep your data for the following time period: 4 years.

Changes 

I may update this privacy policy from time to time in order to reflect, for example, changes to my practices or for other operational, legal or regulatory reasons. 

Contact me 

I am always happy to hear from my customers. For more information about my privacy practices, if you have questions, or if you would like to make a complaint, please contact me by e‑mail at marta@lusheclectic.com