Privacy Policy for Aromatherapy by Holly
Last reviewed: October 2024
At Aromatherapy by Holly, we are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard your personal information in compliance with the General Data Protection Regulation (GDPR).
1. Information We Collect
We collect personal data that you provide directly to us, including:
- Personal Identification Information: Name, email address, phone number, and billing/shipping address.
- Payment Information: Credit/debit card details (processed securely via third-party payment processors).
- Account Information: Username and password (if you create an account).
- Order Information: Purchase history, preferences, and feedback.
2. How We Use Your Information
We use your personal information for the following purposes:
- To Process Transactions: To process your orders, manage payments, and deliver products.
- Customer Service: To respond to inquiries, manage your account, and provide customer support.
- Marketing Communications: To send you newsletters, promotional offers, and updates (with your consent).
- Website Improvement: To analyze user behavior and improve our website and services.
3. Legal Basis for Processing Personal Data
We process your personal data based on the following legal grounds:
- Consent: Where you have provided consent to receive marketing communications.
- Contractual Necessity: To fufill a contract with you (e.g., processing your order).
- Legal Obligation: To comply with legal requirements.
- Legitimate Interests: To improve our services and ensure user satisfaction.
4. Data Sharing and Disclosure
We do not sell or rent your personal data. We may share your information with:
- Compliance with Laws: When required by law or to protect our rights or the rights of others.
5. International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure that any such transfers comply with GDPR, utilizing appropriate safeguards (e.g., standard contractual clauses).
6. Data Retention
We retain your personal data only as long as necessary to fufill the purposes for which we collected it, including legal, accounting, or reporting requirements.
7. Your Rights
Under GDPR, you have the following rights:
- Right to Access: Request a copy of your personal data.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data under certain conditions.
- Right to Restrict Processing: Request that we limit the processing of your data.
- Right to Data Portability: Request transfer of your data to another organization.
- Right to Object: Object to processing based on legitimate interests.
To exercise your rights, please contact us at holly@aromatherapybyholly.co.uk
8. Security of Your Information
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes via email or through a notice on our website. Your continued use of the website after any changes indicates your acceptance of the new policy.
10. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Aromatherapy by Holly
Email: holly@aromatherapybyholly.co.uk