Privacy Policy

This Privacy Policy outlines how Elvington Country Store (“we,” “us,” or “our”) collects, uses, discloses, and protects your personal information in compliance with the General Data Protection Regulation (GDPR).

Information We Collect

1.1 Personal Information: We may collect personal information, such as your name, contact details, shipping address, and payment information when you interact with our website or make a purchase. This information is necessary to fulfil your orders and provide you with a personalized shopping experience.

1.2 Usage Data: We may collect non-personal information about your interaction with our website, such as your IP address, browser type, referring/exit pages, and the dates/times of your visits. This data helps us analyse trends, administer the website, and improve our services.

Legal Basis for Processing

2.1 Contractual Necessity: We process personal information to fulfil our contractual obligations, such as processing and delivering your orders, providing customer support, and handling returns or refunds.

2.2 Legitimate Interests: We may process personal information based on our legitimate interests, such as improving our website, analysing customer preferences, and sending you relevant marketing communications. We always ensure that your fundamental rights and freedoms are not overridden by our interests.

2.3 Consent: In certain cases, we may rely on your consent to process your personal information. For example, we may seek your consent to send you marketing communications or to place cookies on your device.

Use and Disclosure of Information

3.1 Internal Use: We use your personal information to process and fulfil your orders, communicate with you, provide customer support, and improve our products and services.

3.2 Third-Party Service Providers: We may share your personal information with trusted third-party service providers who assist us in delivering our products and services, such as payment processors, shipping companies, and marketing platforms. These providers are contractually obligated to protect your personal information and may only use it for the specific purposes outlined in our agreement.

3.3 Legal Compliance: We may disclose personal information if required to do so by law or in response to valid requests from governmental authorities.

Data Retention

We will retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Once the data is no longer necessary, we will securely delete or anonymize it.

Your Rights

5.1 Right to Access: You have the right to request access to the personal information we hold about you and receive a copy of that information.

5.2 Right to Rectification: If your personal information is inaccurate or incomplete, you have the right to request its rectification or update.

5.3 Right to Erasure: You may request the erasure of your personal information under certain circumstances, such as when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent.

5.4 Right to Restriction of Processing: You have the right to restrict the processing of your personal information under certain circumstances, such as when you contest its accuracy or the lawfulness of processing.

5.5 Right to Data Portability: Upon request, we will provide you with a machine-readable copy of your personal information in a structured, commonly used, and interoperable format, where technically feasible.

5.6 Right to Object: You have the right to object to the processing of your personal information based on legitimate interests or for direct marketing purposes.

Security Measures

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, destruction, or alteration. However, no data transmission over the internet or electronic storage system is completely secure, so we cannot guarantee absolute security.

Updates to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically for the most current information.

Contact Us

If you have any questions, concerns, or requests regarding our Privacy Policy or the processing of your personal information, please contact us using the contact information provided on our website.

By using our website and providing us with your personal information, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.