PRIVACY
Who we are
This website is operated by Etta Loves Ltd, a company registered in England and Wales under company number 10137348. Our registered address is 101 New Cavendish Street, London W1W 6XH.
We take your privacy seriously. This policy explains what personal data we collect when you visit www.ettaloves.com, why we collect it, how we use it, who we share it with, and what your rights are. It applies to both UK and EU customers. We process your data in accordance with the UK GDPR and the Data Protection Act 2018 and, where applicable, EU GDPR.
For any data privacy queries, please contact us at help@ettaloves.com.
What data we collect and why
Order and account data
When you place an order we collect your name, delivery address, email address, and phone number. We use this to fulfil your order, arrange shipping, send order confirmations, and respond to any queries you have. The legal basis for this processing is contract: we need this information to send you what you have bought.
Payment data
Payment details are handled directly by our payment processor and are not stored on our systems. We do not hold your credit or debit card details at any point.
Marketing emails
If you have purchased from us, we may send you emails about our products and offers under the UK PECR soft opt-in, unless you have opted out. If you have signed up to our mailing list without purchasing, we will only contact you where you have given explicit consent. The legal basis for this processing is legitimate interests for existing customers, or consent for newsletter subscribers. You can unsubscribe at any time via the link in any of our emails, or by emailing help@ettaloves.com.
Website and browsing data
When you visit our site we automatically collect information including your IP address, browser type, device, and the pages you visit. We use this to improve our website, detect fraud, and understand how customers browse and interact with our store. The legal basis is legitimate interests.
Advertising and analytics
With your consent (via our cookie banner), we use cookies and tracking tools to measure the performance of our advertising on platforms including Meta (Facebook and Instagram) and to analyse site usage. You can manage or withdraw your consent at any time via the cookie settings on our site.
Who we share your data with
We do not sell your personal data. We share it only with trusted third parties who help us operate our business, and only to the extent necessary.
Our e-commerce platform
Our store is powered by Shopify. Your order and account data is stored and processed by Shopify Inc. You can read their privacy policy at shopify.com/legal/privacy.
Email marketing
We use Klaviyo to manage our email list and send marketing communications. Your email address and purchase behaviour may be shared with Klaviyo for this purpose. You can read their privacy policy at klaviyo.com/privacy/policy.
Advertising platforms
We use Meta (Facebook and Instagram) to run and measure advertising campaigns. With your consent, data about your visit and purchases may be shared with Meta via cookies and pixels. You can read Meta's privacy policy at facebook.com/business/gdpr.
Order fulfilment and delivery
To dispatch your order, we share your name, address, and order details with our fulfilment centre and the courier responsible for delivery. This data is used solely to get your order to you.
Legal and tax compliance
We may share limited order data with tax authorities or compliance intermediaries where required by law, for example for VAT reporting purposes on orders shipped to the EU. We may also disclose data where required to do so by law, court order, or regulatory authority.
International data transfers
Some of our third-party providers are based outside the UK, including in the USA. Where we transfer data internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements, including reliance on Standard Contractual Clauses or equivalent mechanisms.
How long we keep your data
We keep order and transaction records (including your name, address, and purchase details) for 7 years as required by HMRC and UK tax law. After that period, they are securely deleted.
Marketing data is kept until you unsubscribe or request deletion, or after 3 years of inactivity (no opens or purchases), whichever comes first.
Website analytics data is retained for up to 26 months. Fraud and security logs are kept for 12 months.
Cookies
We use cookies and similar tracking technologies on our website. Some are essential for the site to work; others are used for analytics and advertising and require your consent. You can manage your preferences at any time via our cookie banner. Withdrawing consent for non-essential cookies will not affect your ability to shop with us.
Your rights
Under UK GDPR (and EU GDPR where applicable) you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data where we no longer have a lawful reason to hold it
- Restrict or object to certain types of processing
- Receive your data in a portable format
- Withdraw consent at any time where processing is based on consent
- Object to direct marketing at any time
To exercise any of these rights, please email help@ettaloves.com. We will respond within one calendar month and may need to verify your identity before acting on a request.
If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. EU customers may also contact the data protection authority in their country of residence.
Security
Our website is hosted on Shopify, which is PCI DSS compliant for payment processing. We take appropriate technical and organisational measures to protect your data. In the event of a data breach likely to affect your rights, we will notify the ICO within 72 hours and contact you directly where required.
Children
Our products are designed for babies and purchased by adults. Our website is not directed at children under 13 and we do not knowingly collect personal data from children.
Changes to this policy
We may update this policy from time to time. The effective date at the top of this page will always reflect the most recent version. For significant changes we will notify customers by email.
Contact us
Etta Loves Ltd
101 New Cavendish Street, London W1W 6XH
help@ettaloves.com