Privacy Policy
1. INTRODUCTION
At Lace & Favour, we are committed to protecting your privacy and ensuring that your personal information is handled securely, responsibly and transparently.
This Privacy Policy explains how we collect, use, store, share and protect your personal information when you visit our website, create an account, place an order, subscribe to our marketing communications or otherwise interact with us.
We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025.
Our website is available at www.laceandfavour.com.
By using our website, you can learn about how we handle your personal information through this Privacy Policy. Where consent is required for particular activities, such as certain marketing communications or non-essential cookies, we will request it separately.
2. WHO WE ARE
Lace & Favour is responsible for determining how and why personal information is processed in connection with our business activities.
For the purposes of applicable data protection legislation, we act as the data controller for the personal information described in this Privacy Policy, except where otherwise stated.
Our contact details are:
Lace & Favour
Unit D1 Swallow Business Park
Diamond Drive
Lower Dicker
Hailsham
BN27 4EL
United Kingdom
Email: sales@laceandfavour.com
Website: www.laceandfavour.com
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.
3. PERSONAL INFORMATION WE COLLECT
We collect and process different types of personal information depending on how you interact with our website and services.
3.1 Information you provide directly
When you place an order, contact us or interact with our services, we may collect:
Your full name.
Billing and delivery addresses.
Email address.
Telephone number.
Order details and purchase history.
Payment and transaction information.
Products added to your shopping basket or saved for later.
Product reviews, feedback and customer service correspondence.
Marketing preferences and communication choices.
Information you provide when entering competitions, promotions or surveys.
We only request personal information that is reasonably necessary for the relevant purpose.
3.2 Payment information
When you make a purchase, payment information is processed to complete your transaction.
Depending on the payment method selected, this may include payment card information, billing details, transaction references and payment confirmation information.
Payments may be processed by authorised third-party payment providers.
Where payments are handled by these providers, they may collect and process your payment details directly in accordance with their own privacy policies and security requirements.
3.3 Information collected automatically
When you visit our website, we may automatically collect certain technical and browsing information, including:
Your IP address.
Browser type and version.
Device type and operating system.
Device identifiers.
Website pages viewed.
Products viewed or searched for.
Referring websites.
Date and time of visits.
Interactions with website features.
Cookie identifiers and similar tracking information.
Information relating to website performance, security and potential fraudulent activity.
This information helps us operate, secure and improve our website and understand how visitors interact with our services.
3.4 Information received from third parties
We may receive personal information from third parties where appropriate and permitted by law.
These may include:
Payment processing providers.
Delivery and logistics companies.
Website hosting and technology providers.
Analytics providers.
Advertising and marketing platforms.
Fraud prevention and security services.
Social media platforms.
Customer service and communication providers.
The information received depends on the services involved and may include transaction confirmations, delivery updates, technical identifiers, marketing interactions or security-related information.
We use this information only where we have an appropriate lawful basis.
4. HOW WE USE YOUR PERSONAL INFORMATION
We use personal information to operate our business, fulfil orders, provide customer support, improve our services and protect our website.
4.1 Processing and fulfilling orders
We use your information to:
Process and confirm purchases.
Arrange payment transactions.
Deliver products to your chosen address.
Provide order confirmations and delivery updates.
Manage returns, refunds and exchanges.
Respond to questions relating to your purchases.
Maintain appropriate transaction and accounting records.
Lawful basis: Performance of a contract and, where applicable, compliance with legal obligations.
4.2 Customer service and communications
We use your contact information and relevant order details to:
Respond to enquiries.
Provide assistance with orders.
Resolve complaints.
Process returns and refunds.
Communicate important service information.
Provide support relating to products and purchases.
Lawful basis: Performance of a contract or our legitimate interests in providing effective customer service, depending on the circumstances.
4.3 Website operation and improvement
We may use technical and browsing information to:
Maintain website functionality.
Identify and resolve technical problems.
Improve website navigation and usability.
Understand website performance.
Analyse how visitors interact with our products and services.
Improve our online shopping experience.
Lawful basis: Our legitimate interests in operating and improving our website or consent where required for particular analytics technologies.
4.4 Fraud prevention and security
We process relevant personal information to:
Detect and prevent fraudulent transactions.
Identify suspicious website activity.
Protect customer accounts.
Prevent spam and automated abuse.
Maintain website and payment security.
Investigate potential security incidents.
Lawful basis: Our legitimate interests in protecting our business, customers and website, and compliance with legal obligations where applicable.
4.5 Marketing and promotional communications
Where permitted by law, we may use your information to send communications about:
New products and collections.
Special offers and promotions.
Product recommendations.
News and updates from Lace & Favour.
Relevant products or services that may interest you.
We will only send electronic marketing communications where we have an appropriate legal basis and comply with applicable direct marketing rules.
This may include obtaining your consent or relying on an applicable existing-customer marketing exemption where its conditions are satisfied.
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link included in our emails or by contacting sales@laceandfavour.com.
Unsubscribing from marketing communications will not prevent us from sending essential transactional or service-related messages concerning your orders.
5. OUR LAWFUL BASES FOR PROCESSING PERSONAL INFORMATION
Under the UK GDPR, we must have a lawful basis for processing personal information.
Depending on the circumstances, we rely on the following lawful bases.
Performance of a contract
Where processing is necessary to fulfil an order, provide a requested service or take steps before entering into a contract with you.
Legal obligation
Where we are required to process or retain information to comply with applicable laws, including tax, accounting, consumer protection and other legal requirements.
Legitimate interests
Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
Our legitimate interests may include:
Operating and improving our website.
Providing customer support.
Protecting against fraud and security threats.
Maintaining business records.
Understanding and improving our services.
Protecting our legal rights.
Where we rely on legitimate interests, we assess whether the processing is necessary and proportionate and consider its potential impact on individuals.
Consent
Where required, we obtain your consent before processing personal information for particular purposes.
This may include certain marketing activities and the use of non-essential cookies or similar tracking technologies.
You can withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
6. COOKIES AND SIMILAR TECHNOLOGIES
Our website uses cookies and similar technologies to provide essential functionality, improve website performance, understand visitor behaviour and, where applicable, support advertising activities.
Cookies are small text files stored on your device when you visit a website.
We may use the following categories of cookies and similar technologies.
Strictly necessary cookies
These support essential website functions, including:
Shopping basket functionality.
Checkout processes.
Website security.
Fraud prevention.
Session management.
Remembering privacy and cookie preferences.
Where these technologies qualify for an exemption under applicable law, consent is not required.
Analytics cookies
These help us understand how visitors use our website, including which pages are visited and how users navigate the site.
We use this information to improve website performance and the customer experience.
Where consent is required, these technologies will only be used after you have provided it.
Functional cookies
These help remember certain preferences and provide enhanced website functionality.
Depending on their purpose and whether an applicable exemption is available, we may request your consent before using them.
Advertising and marketing cookies
Where used, these technologies may help us:
Measure advertising performance.
Understand interactions with advertisements.
Display relevant advertising.
Support remarketing campaigns.
Limit repeated advertising.
We obtain consent where required before using these technologies.
Managing your cookie preferences
You can manage your cookie preferences using the cookie controls available on our website.
You can also configure your browser to block or delete cookies.
Please note that disabling certain cookies may affect website functionality, including shopping basket and checkout features.
For further information, please refer to our Cookie Policy.
7. CLOUDFLARE TURNSTILE
We use Cloudflare Turnstile, a website security service provided by Cloudflare, Inc., to help protect our website against spam, automated bots, fraudulent activity and other malicious behaviour.
Cloudflare Turnstile helps distinguish legitimate website visitors from automated traffic by analysing technical information relating to your device, browser and connection.
This information may include:
Your IP address.
Browser type and configuration.
Device and operating system information.
Browser and connection security signals.
Technical information used to assess whether a website interaction is genuine.
Cloudflare processes this information to identify automated activity, prevent abuse and help maintain the security of our website.
Turnstile is designed to perform these security checks without requiring visitors to complete traditional CAPTCHA challenges in most circumstances.
We use Cloudflare Turnstile to protect our website, customers and business against spam, fraud and malicious automated activity.
Lawful basis: Our legitimate interests under Article 6(1)(f) of the UK GDPR in maintaining website security and preventing fraud and abuse.
Cloudflare may process relevant information in accordance with its applicable privacy policies and data protection commitments.
Where applicable, information may be processed outside the United Kingdom, subject to appropriate data protection safeguards.
For further information about how Cloudflare processes personal information through Turnstile, please see the Cloudflare Turnstile Privacy Policy:
https://www.cloudflare.com/en-gb/turnstile-privacy-policy/
8. WEBSITE ANALYTICS
We may use website analytics services to understand how visitors interact with our website and identify opportunities to improve our products, services and online shopping experience.
Analytics information may include:
Pages visited.
Time spent on the website.
Website navigation patterns.
Device and browser information.
Approximate geographic location.
Traffic sources.
Interactions with products and website features.
Where analytics information constitutes personal data, we process it in accordance with applicable data protection requirements.
Where consent is required for analytics cookies or similar technologies, we will obtain it before activating them.
We may use Google Analytics to help us understand website usage.
For further information about Google's privacy practices, please see Google's Privacy Policy.
9. MARKETING, ADVERTISING AND REMARKETING
We may use advertising and marketing services to promote our products and measure the effectiveness of our campaigns.
Where applicable, this may involve sharing limited personal information or technical identifiers with advertising partners.
These services may use cookies, pixels or similar technologies to understand interactions with our website and advertisements.
Subject to your choices and applicable legal requirements, we may use this information to:
Display relevant advertisements.
Measure advertising performance.
Understand the effectiveness of marketing campaigns.
Reach audiences who may be interested in our products.
Improve the relevance of our advertising.
Where required, we obtain your consent before activating advertising tracking technologies.
You can manage your cookie preferences through our website's cookie controls.
You can also manage certain advertising preferences directly through the relevant advertising platforms.
10. SHARING YOUR PERSONAL INFORMATION
We do not sell your personal information to third parties.
We may share personal information with trusted service providers and other organisations where necessary to operate our business, fulfil orders, provide services or comply with legal obligations.
These may include:
Payment providers
To securely process payments, refunds and related transactions.
Delivery and logistics providers
To arrange shipping, delivery, tracking and returns.
Website and technology providers
To host, maintain, secure and support our website and related systems.
Customer service providers
To help us manage enquiries, customer communications and support requests.
Analytics providers
To help us understand website performance and visitor interactions, subject to applicable consent requirements.
Marketing and advertising providers
To support marketing communications, advertising and campaign measurement where legally permitted.
Security and fraud prevention providers
To help detect fraudulent transactions, prevent automated abuse and protect our website.
Professional advisers
Including accountants, legal advisers and other professional service providers where necessary.
Regulatory and legal authorities
Where disclosure is required by law or reasonably necessary to establish, exercise or defend legal claims.
Where third parties process personal information on our behalf, we require appropriate contractual and security protections.
Some third parties may act as independent data controllers and process information in accordance with their own privacy policies.
We only share personal information where there is an appropriate lawful basis and a legitimate business or legal reason to do so.
11. INTERNATIONAL DATA TRANSFERS
Some of the service providers we use may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that it receives a level of protection consistent with applicable UK data protection requirements.
Depending on the circumstances, these safeguards may include:
Transfers to countries covered by applicable UK adequacy regulations.
The UK International Data Transfer Agreement.
The UK Addendum to approved EU Standard Contractual Clauses.
Other transfer mechanisms permitted by applicable data protection legislation.
Where required, we assess the risks associated with international transfers and implement appropriate safeguards.
You may contact us using the details in this Privacy Policy to request further information about the safeguards relevant to your personal information.
12. HOW LONG WE KEEP YOUR INFORMATION
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting, tax, regulatory and reporting requirements.
The appropriate retention period depends on the type of information and the purpose for which it is processed.
Order and transaction information
We retain order and transaction records for the period necessary to fulfil purchases, manage returns, maintain accounting records and comply with applicable legal requirements.
Customer account information
We retain account information while an account remains active and for an appropriate period afterwards where necessary for legitimate business or legal purposes.
Customer service correspondence
We retain customer service communications for as long as reasonably necessary to resolve enquiries, maintain appropriate records and manage potential disputes.
Marketing information
We retain marketing information while you remain subscribed or while another appropriate lawful basis applies.
If you unsubscribe, we may retain limited information necessary to record and respect your preference not to receive further marketing communications.
Website analytics and technical information
We retain analytics, technical and security information according to the relevant processing purpose, our retention arrangements and the settings of applicable service providers.
When personal information is no longer required, we securely delete or anonymise it unless continued retention is legally required.
13. HOW WE PROTECT YOUR INFORMATION
We take the security of personal information seriously and implement appropriate technical and organisational measures designed to protect it.
These measures may include:
Secure website connections.
Access controls and authentication measures.
Secure payment processing arrangements.
Website monitoring and security protections.
Fraud detection and prevention systems.
Appropriate access restrictions for personal information.
Security procedures for relevant systems and service providers.
We review our security arrangements and take reasonable steps to protect personal information against unauthorised access, disclosure, alteration, loss or destruction.
Although we take appropriate precautions, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
14. YOUR DATA PROTECTION RIGHTS
Under the UK GDPR, you have a number of rights concerning your personal information.
These rights are subject to applicable legal conditions and exemptions.
Right of access
You can request confirmation of whether we process your personal information and ask for a copy of the information we hold about you.
Right to rectification
You can ask us to correct personal information that is inaccurate or incomplete.
Right to erasure
You can request the deletion of your personal information in certain circumstances.
This right is not absolute, and we may need to retain some information to comply with legal obligations or for other lawful reasons.
Right to restrict processing
You can ask us to restrict how we process your personal information in certain circumstances.
Right to data portability
Where applicable, you can request that certain personal information be provided to you or transferred to another organisation in a structured, commonly used and machine-readable format.
Right to object
You have the right to object to processing based on legitimate interests in certain circumstances.
You also have the right to object at any time to the processing of your personal information for direct marketing purposes.
If you object to direct marketing, we will stop processing your personal information for that purpose.
Rights relating to automated decision-making
You may have rights concerning decisions made solely through automated processing, including profiling, where those decisions have legal or similarly significant effects on you.
Right to withdraw consent
Where we rely on your consent to process personal information, you can withdraw it at any time.
Withdrawing consent does not affect processing carried out lawfully before your withdrawal.
Exercising your rights
To exercise any of your data protection rights, please contact:
We may need to verify your identity before responding to certain requests.
We will respond within the timeframes required by applicable data protection legislation.
15. AUTOMATED DECISION-MAKING AND PROFILING
We may use automated systems to help identify potentially fraudulent transactions, suspicious activity or website security threats.
We may also use automated technologies to personalise website experiences or support marketing activities, where permitted by law.
16. CHILDREN'S PRIVACY
Our website is intended primarily for customers purchasing wedding accessories, footwear, jewellery and related products.
We do not knowingly seek to collect personal information directly from children where doing so would be inappropriate or unlawful.
Where we become aware that personal information has been collected from a child in circumstances that do not comply with applicable data protection requirements, we will take appropriate steps to address the matter.
Parents or guardians who believe that a child has provided personal information to us inappropriately can contact us at:
17. LINKS TO THIRD-PARTY WEBSITES
Our website may contain links to websites, services or content operated by third parties.
These websites may have their own privacy policies and data protection practices.
We are not responsible for the privacy practices of third-party websites that we do not control.
We recommend reviewing the relevant privacy policies before providing personal information to third-party services.
18. DO NOT TRACK AND PRIVACY CONTROLS
Some web browsers offer privacy settings or signals intended to communicate preferences about online tracking.
Our handling of these signals depends on the technologies used and the applicable legal requirements.
Regardless of browser settings, we will obtain consent for cookies and similar technologies where required by law.
You can manage your preferences using the cookie controls provided on our website.
19. COMPLAINTS AND CONTACTING THE ICO
If you have concerns about how we collect or use your personal information, we encourage you to contact us so that we can investigate and respond.
Email: sales@laceandfavour.com
You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
Information Commissioner's Office
Website: https://ico.org.uk
Telephone: 0303 123 1113
You can contact the ICO if you believe your personal information has been processed in a way that does not comply with applicable data protection legislation.
Where required by law, you should raise your concerns with us before escalating your complaint to the ICO.
If you are located outside the United Kingdom, you may also have rights to complain to an appropriate data protection supervisory authority in your jurisdiction.
20. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect:
Changes to our business operations.
Changes to the services and technologies we use.
Updates to applicable laws and regulations.
Changes to how we collect or process personal information.
Improvements to our privacy and security practices.
When we make changes, we will update the date shown at the beginning of this Privacy Policy.
Where required by law, we will provide additional notice or obtain consent before implementing material changes to how we process personal information.
21. CONTACT US
If you have any questions about this Privacy Policy, wish to exercise your data protection rights or would like further information about how we handle personal information, please contact us.
Lace & Favour
Unit D1 Swallow Business Park
Diamond Drive
Lower Dicker
Hailsham
BN27 4EL
United Kingdom
Email: sales@laceandfavour.com
Website: www.laceandfavour.com
