The Lavender House respects your privacy and is committed to protecting your personal data.
We are thoughtful about the personal information we ask you to provide and the personal information that we collect about you through the operation of our services. We store personal information for only as long as we have a reason to keep it. We aim for full transparency on how we gather, use and share your personal information.
The Lavender House is an online shop, physical workshop and business that attends markets and pop up events. We make the majority of our products ourselves but also curate a small collection of items.
The Lavender House “we / us / our “ means the companies listed in the previous sentences. The Lavender House is a “data controller” for the purposes of the Data Protection Act 1998 and the European Unions (EU) General Data Protection Regulation (GDPR) (.ie. implementing appropriate technical and organisational measures to ensure and demonstrate that any data processing is performed in compliance with the GDPR).
The law requires us to tell you about your rights and our obligations to you in regards to the processing and control of your personal data. We do this in our policy, however if you would like to research this further you can by read the information provided at http://www.knowyourprivacyrights.org
Below we explain how we collect, use, and share information about you, along with the choices that you have with respect to that information.
Information We Collect
We only collect information about you if we have a reason to do so — for example, to provide our Services, to communicate with you, or to make our Services better.
- Basic account information: You may choose to register your details with The Lavender House. We will ask for basic information from you in order to set up an account. You will need an account if you want to receive marketing information from us, receive a newsletter, to make checkout easier, or to join a membership scheme. We do not ask for any other information that isn’t relevant to the registration of an account. Mailchimp is the provider of our email mailing list system and is the data processor and processes personal data on behalf of The Lavender House (i.e. is responsible for and controls the processing of your personal information). They are fully GDPR compliant and hold data for The Lavender House.
- Contacting us: When you contact us, either via the contact form on our website or directly, we may collect, use and store the following kinds of data about you: Name, email address and contact telephone number. When you communicate with us via email, we store a copy of the communications.
Information We Collect Automatically
- Log information: Like most online service providers, we collect information that web browsers, mobile devices, and servers typically make available, including the browser type, IP address, unique device identifiers, language preference, referring site, the date and time of access information.
- Usage information: We collect information about your usage of our Services. We also collect information about what happens when you use our Services (including, but not limited to, page views, searches, features enabled for your website, interactions, gender and age. We use this information to, for example, provide our Services to you, get insights on how people use our Services so we can make our Services better, and understand and make predictions about user retention.
- Location information: We may determine the approximate location of your device from your IP address. We collect and use this information to calculate how many people visit our Services from certain geographic regions.
How and Why We Use Information
- We use information about you for the purposes listed below:
- To market our Services and measure, gauge, and improve the effectiveness of our marketing.
- To protect our Services, our users, and the public. For example, by detecting security incidents; detecting and protecting against malicious, deceptive, fraudulent, or illegal activity; fighting spam; complying with our legal obligations; and protecting the rights and property of The Lavender House, which may result in us, for example, declining a transaction or terminating Services.
- To customise the user experience. For example, to personalise your experience by serving you relevant notifications and advertisements for our Services, recommending content through our Reader post suggestions, and providing new essays and stories through our blog for your reading pleasure.
- To communicate with you. For example, by emailing you to ask for your feedback, share tips for getting the most out of our products, or keep you up to date on The Lavender House.
Legal Bases for Collecting and Using Information
In the European Union our legal grounds for processing information about you under EU data protection laws, is that our use of your information is based on the grounds that:
(1) The use is necessary in order to fulfill our commitments to you under the applicable terms of service or other agreements with you or is necessary to administer your account — for example, in order to enable access to our website on your device or charge you
(2) The use is necessary for compliance with a legal obligation; or
(3) The use is necessary in order to protect your vital interests or those of another person; or
(4) We have a legitimate interest in using your information — for example, to provide and update our Services; to improve our Services so that we can offer you an even better user experience; to safeguard our Services; to communicate with you; to measure, gauge, and improve the effectiveness of our advertising; and to understand our user retention and attrition; to monitor and prevent any problems with our Services; and to personalise your experience; or
(5) You have given us your consent.
How We Share Information
We share information about you in limited circumstances, and with appropriate safeguards on your privacy. These are spelled out below,
- Third-party vendors: We may share information about you with third-party vendors who need the information in order to provide their services to us. This includes vendors that help us provide our Services to you (like Stripe, which powers WooCommerce Payments, payment providers that process your credit and debit card information, fraud prevention services that allow us to analyse fraudulent payment transactions, postal and email delivery services that help us stay in touch with you and email support services that help us communicate with you.
- Legal and regulatory requirements: We may disclose information about you in response to a court order, or for any other governmental, legal or regulatory requirement.
- To protect rights, property, and others: We may disclose information about you when we believe in good faith that disclosure is reasonably necessary to protect the property or rights of The Lavender House, third parties, or the public at large. For example, if we have a good faith belief that there is an imminent danger of death or serious physical injury.
- Aggregated or de-identified information: We may share information that has been aggregated or de-identified, so that it can no longer reasonably be used to identify you. For instance, we may publish statistics about the use of our Services, or share a review for example.
Access to your personal data is strictly limited to the people that have a business need to know it. We do not transfer your personal data outside the European Economic Area. While no online service is 100% secure, we work very hard to protect information about you against unauthorised access, use, alteration, or destruction, and take reasonable measures to do so. We monitor our Services for potential vulnerabilities and attacks.
You have several choices available when it comes to information about you:
- Limit the information that you provide: If you have an account with us, you can choose not to provide the optional account information, profile information, and transaction and billing information.
- Limit access to information on your mobile device: Your mobile device operating system should provide you with the option to discontinue our ability to collect stored information or location information via our mobile apps.
- Opt out of marketing communications: You may opt out of receiving promotional communications from us. Just follow the instructions in those communications or let us know. If you opt out of promotional communications, we may still send you other communications, like those about your account and legal notices.
- Close your account: While we’d be very sad to see you go, you can close your account if you no longer want to use our Services. Please keep in mind that we may continue to retain your information after closing your account, as described elsewhere in this policy.
European General Data Protection Regulation (GDPR)
`Under the scope of the GDPR, data protection laws give you certain rights with respect to your personal data, subject to any exemptions provided by the law, including the rights to:
- Request access to your personal data;
- Request correction or deletion of your personal data;
- Object to our use and processing of your personal data;
- Request that we limit our use and processing of your personal data; and
- Request portability of your personal data.
- You will not have to pay a fee to access your personal data, however we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.
You have the right to make a complaint at any time to the information commissioners office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would however appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
Contacting Us About These Rights
You can usually access, correct, or delete your personal data within your account settings and tools that we offer, but if you aren’t able to, or you’d like to contact us please do so at firstname.lastname@example.org
When you contact us about one of your rights under this section, we’ll need to verify that you are the right person before we disclose or delete anything. For example, if you are a user, we will need you to contact us from the email address associated with your account.
How to Reach Us
Dated: 17th March 2021