What information do we collect?

We collect personal information which you provide to us. Some information is collected automatically when you visit our website.

We collect personal information which you provide to us when you register an account on this website, purchase a product from this website, visit this website, or contact us.

The personal information we collect depends on the context of your interactions with us, the choices you make and the products and features you use. The personal information we collect may include the following:

• Personal information provided by you: including names, phone numbers, email addresses, shipping addresses, contact preferences, billing addresses, contact or authentication data, and other similar information.

• Payment data: we may collect data necessary to process your payment if you make a purchase, including your credit card number and associated security code. All payment data is stored by Stripe or PayPal.

Some information is automatically collected when you visit or use our website. This information does not reveal your specific identity but may include information about your device and usage, such as your IP address, browser and device, language preferences, referring URLs, location, information about how and when you use our website, and other technical information. This information is needed to maintain the security and operation of our website, and for our internal analytics and reporting purposes.

We also collect information through cookies and similar technologies.

The information we collect includes:

• Log and usage data: this is service-related, diagnostic, usage and performance information which is automatically collected when you access or use our website. Depending on how you interact with us, this may include your IP address, device information, browser type and settings, and information about your activity on our website.

• Device data: depending on the device used, this may include information such as your IP address, location, browser type, and operating system.

• Location data: depending on the type and settings of your device, this may include information such as your location when you accessed our website.

How do we use your information?

We process your information for legitimate business interests, to fulfil our contract with you, to comply with our legal obligations, and/or with your consent.

We use the personal information collected via our website for a variety of business purposes. We process your personal information for legitimate business interests, to enter into or perform a contract with you, for compliance with our legal obligations, and/or with your consent.

We use the information we collect or receive to:

• Facilitate account creation: if you choose to link your account with us to a third-party account, we use the information you allowed us to collect from those third parties to facilitate account creation for the performance of the contract.

• Request feedback: we may use your information to request feedback and to contact you about the use of our website.

• Send administrative information to you: we may use your personal information to send you product information and/or information about changes to our terms, conditions, and policies.

• Protect our services: we may use your information as part of our efforts to keep our website safe and secure.

• Fulfil and manage your orders: we may use your information to manage your orders, payments, returns, and exchanges made through the website.

• Respond to user enquiries: we may use your information to respond to your enquiries and solve any potential issues you might have with the use of our services.

• Send you marketing and promotional communications: we and/or our third-party marketing partners may use the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt-out of our marketing emails at any time.

Will your information be shared with anyone?

We only share your information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfil business obligations.

We may process or share your data that we hold based on the following legal bases:

• Consent: we may process your data if you have given us specific consent to use your personal information for a specific purpose.

• Legitimate interests: we may process your data when it is reasonably necessary to achieve our legitimate business interests.

• Performance of a contract: where we have entered into a contract with you, we may process your personal information to fulfil the terms of our contract.

• Legal obligations: we may disclose your information where we are legally required to do so.

More specifically, we may need to process your data or share your personal information in the following situations:

• Third-party service providers: we may share your data with third-party vendors or service providers who perform services for us on our behalf and require access to such information to do that work. Examples include: payment processing, email delivery, hosting services, and marketing efforts. We may allow selected third parties to collect data on our behalf about how you interact with our website. This information may be used to analyse and track data, determine the popularity of certain content, pages, or features, and better understand online activity.

Who will your information be shared with?

We only share information with the following third parties.

We only share and disclose your information with the following third parties:

• Google Fonts: content optimisation.

• Apple Pay, PayPal, Stripe: invoicing and billing.

• Squarespace: website hosting.

• Google Analytics: website and mobile analytics.

• Mailchimp: email marketing.

• Royal Mail, Parcel2Go, UPS, FedEx: shipping and order fulfilment.

Do we use cookies and other tracking technologies?

We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies such as web beacons and pixels to access or store information.

Some cookies are required for technical reasons in order for our website to operate. Other cookies enable us to track and target the interests of our users to enhance their experience. Third parties serve cookies through our website for analytics and other purposes.

You have the right to decide whether to accept or reject cookies. Essential cookies cannot be rejected as they are strictly necessary to provide you with services.

If you choose to reject cookies, you may still use our website though your access to some functionality and areas of our website may be restricted.

We may use other technologies such as web beacons to recognise when someone has visited our website or opened an email including them. This allows us to monitor the traffic pattern of users, to improve site performance, and to measure the success of email marketing campaigns.

How long do we keep your information?

We keep your information for as long as necessary to fulfil the purposes outlined in this privacy policy unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information.

How do we keep your information safe?

We aim to protect your personal information through a system of organisational and technical security measures.

We have implemented appropriate technical and organisational security measures designed to protect the security of any personal information we process. Although we will do our best to protect your personal information, transmission of personal information to and from our website is at your own risk. You should only access our website within a secure environment.

What are your privacy rights?

In some regions you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time.

In some regions (such as the European Economic Area and the United Kingdom) you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information; (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; and (iv) if applicable, to data portability. In certain circumstances, you may also have the right to object to the processing of your personal information. To make such a request, please use the contact details provided below. We will consider and act upon any request in accordance with applicable data protection laws.

If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. Please note that this will not affect that lawfulness of the processing before its withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

If you have questions or comments about your privacy rights, you may email us at natasha@platosfire.co.uk.

If you would at any time like to review or change the information in your account, or terminate your account, you can log into your account settings and update your user account.

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove and reject cookies. If you choose to remove or reject cookies, this may affect certain features or services of our website.

You can unsubscribe from our email marketing list at any time by clicking on the unsubscribe link in the emails which we send or by contacting us using the details provided below. You will then be removed from the email marketing list, however we may still communicate with you to send you service-related emails that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.

Do California residents have specific privacy rights?

If you are a resident of California you are granted specific rights regarding access to your personal information.

California Civil Code Section 1798.83 permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

Do we make updates to this policy?

We will update this policy as necessary to stay compliant with relevant laws.

We may update this privacy policy from time to time. The updated version will be indicated by an updated ‘Revised’ date and the updated version will be effective as soon as it is accessible.

How can you contact us about this policy?

If you have questions or comments about this policy, you may email us at natasha@platosfire.co.uk.

How can you review, update, or delete the data we collect from you?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it in some circumstances. To request to review, update, or delete your personal information, please email natasah@platosfire.co.uk.