Privacy Policy

1) INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE DATA CONTROLLER

1.1 We are delighted that you are visiting our website and thank you for your interest. Below, we provide information on how your personal data is processed when you use our website. Personal data refers to any data that can be used to identify you personally.

1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is:

eleanorandrose.co.uk

📧 support@eleanorandrose.co.uk

🌐 eleanorandrose.co.uk

The data controller is the natural or legal person who determines the purposes and means of the processing of personal data.

1.3 For security reasons (e.g. to protect orders or enquiries), this website uses SSL/TLS encryption. You can recognise a secure connection by the prefix https:// and the padlock symbol in your browser.

2) DATA COLLECTION WHEN VISITING OUR WEBSITE

During a simple visit (without registration or placing an order), only the technical data transmitted by your browser is collected (‘server log files’):

● Website visited

● Date and time of access

● Amount of data transferred

● Source/referrer

● Browser used

● Operating system

● IP address (possibly anonymised)

Legal basis: Art. 6(1)(f) GDPR – legitimate interest in the stability and security of the website.

3) COOKIES

We use cookies to optimise your experience (e.g. saving your basket).

  • Session cookies: deleted when you close your browser.
  • Persistent/third-party cookies: enable us to recognise your browser at a later date.

If personal data is processed, the legal basis is:

  • Art. 6(1)(b) GDPR (performance of the contract)
  • or Art. 6(1)(f) GDPR (legitimate interest: proper functioning of the website).

You can configure your browser to manage or refuse cookies (see help for Chrome, Safari, Firefox, Edge, Opera). Refusal may limit certain features.

4) CONTACT

If you contact us (via form/email), the data provided is used solely to respond to your enquiry and manage technical follow-up.

  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest) or Art. 6(1)(b) GDPR (performance of a contract).
  • Data deletion after final processing, unless required by law.

5) CUSTOMER ACCOUNT & CONTRACT PERFORMANCE

When you create an account or place an order, we collect the necessary personal data (name, address, email, etc.).

  • Legal basis: Art. 6(1)(b) GDPR.
  • Deletion: after performance of the contract and expiry of statutory retention periods (tax/accounting).
  • You may request the deletion of your account at any time: support@eleanorandrose.co.uk

6) DIRECT MARKETING

6.1 Newsletter

Subscription via double opt-in (confirmation by email).

  • Legal basis: Article 6(1)(a) GDPR (consent).
  • Data deleted immediately upon unsubscribing (link at the bottom of each email or request to support@eleanorandrose.co.uk
6.2 Existing customers

If you have previously made a purchase on our website, we may send you similar offers by email.