Privacy Policy

This privacy policy tells you how Grace & May Home uses your personal data when you visit our website, interact with us, and buy products from us. It also tells you about your privacy rights and how the law protects you. This policy was last updated in May 2023 and refers to the General Data Protection Regulations (EU) 2016/679 (GDPR). Grace & May Home is the data controller responsible for this website and any handling of personal data.

​​

Personal data

Personal data, or personal information, means any information about an individual from which that person can be identified. We collect a variety of information about our customers and visitors to the Grace & May Home website. This personal data falls into several categories;

​​

• Identity Data - includes title, first name, last name, username or similar identifier and an encrypted version of your login/password.

• Contact Data - includes billing address, delivery address, email address and telephone numbers.

• Financial Data - includes payment card details (handled by our payment provider).

• Transaction Data - includes details about payments to and from you and other details of products and services you have purchased from us.

 

We do not collect any details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data.

​

You should note that if you choose not to share personal data with us, then we will be unable to complete any goods transaction with you.

 

Personal data collection

We use different methods to collect data from and about you. This includes personal data you provide when you:

 

• sign up to receive the Grace & May Home newsletter

• make enquiries or request information be sent to you

• engage with us on social media

• enter any competition

• purchase any of our products or services

• contact us or

• leave comments or reviews on our products or services.

​​

How we use your personal data

We use your personal data where it is necessary for our legitimate interests (or those of a third party) and your own interests (eg to provide you with a product that you have purchased from our website). Your fundamental rights do not override those interests.

​

Communications

We may use some of your data to form a picture of what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you and tell you about them. This is what we call direct marketing. We may carry out direct marketing by text, email or post. For example, you may receive the Grace & May Home newsletter, review requests or promotional materials.

​​

On our website, we always try hard to make it really clear what we are doing and you have a right at any time to change your mind. If you no longer wish to receive communications from us, you can opt out at any time by emailing us on hello@graceandmayhome.co.uk.

 

Cookies

Cookies are a tool which we (and everyone else who operates online) uses for advertising. Cookies collect information about how visitors use graceandmayhome.co.uk. These cookies do not collect any information that identifies a visitor. All information these cookies collect is used to improve how Grace & May Home works as a business.

​

When you use the Grace & May Home website, your device or browser may be sent cookies from third parties, for example when using embedded content and social network links. Please note that Grace & May Home has no access to or control over cookies used by these companies or third-party websites. We suggest you check the third-party websites for more information about their cookies and how to manage them.

​

Data security

We promise to look after your personal data that you share with us. This includes it being secure to stop it from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

​

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

 

Data retention

We will only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

 

Under UK law, it is necessary for us to keep basic information about our customers for six years after they stop being customers for tax purposes. In some circumstances you can ask us to delete your data; see below for further information.

​

Your legal rights

If General Data Protection Regulations apply to you because you are in the European Union, you have rights under data protection laws in relation to your personal data. If you wish to exercise any of these rights, please contact us directly on hello@graceandmayhome.co.uk along with ‘Subject Access Request’ in the subject header. We may need to charge a small fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

​

How to contact us

If you have any questions about this privacy policy, or would like to exercise any of your rights, please email us at hello@graceandmayhome.co.uk.

​​

​