Privacy Policy

PRIVACY POLICY

Harlow & Ivy operates this store and website, including all related information, content, features, tools, products and Services, to provide you, the customer, with a personalised shopping experience (the “Services”). Harlow & Ivy is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase or other transaction through the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing or using the Services, you confirm that you have read and understand this Privacy Policy and the collection, use and disclosure of your information as described herein.

Personal Information We Collect or Process

When we use the term “personal information”, we mean information that identifies, relates to, describes, or can reasonably be linked to you or another individual. Personal information does not include information that has been anonymised or de-identified such that it cannot reasonably be linked to an identifiable individual.

Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information, including inferences drawn from such personal information:

Contact information, including your name, address, billing address, shipping address, telephone number and email address.
Financial information, including credit card, debit card and financial account numbers, payment card details, transaction data, payment method, payment confirmation and other payment information.
Account information, including your username, password, security questions, preferences and settings.
Transaction information, including items you view, add to your cart, add to your wishlist, purchase, return, exchange or cancel, as well as your transaction history.
Communications with us, including information you provide when contacting customer support or otherwise communicating with us.
Device information, including information about your device, browser or network connection, your IP address and other unique identifiers.
Usage information, including information about how and when you interact with or navigate through the Services.

Sources of Personal Information

We may collect personal information from the following sources:

Directly from you, including when you create an account, visit or use the Services, communicate with us or otherwise provide personal information;
Automatically through the Services, including from your device when you use our Services or visit our websites, and through cookies and similar technologies;
From our service providers, including when we engage them to enable certain technologies and when they collect or process personal information on our behalf;
From our partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us or which Services you use, we may use personal information for the following purposes:

Providing, Customising and Improving the Services

We use your personal information to provide the Services, including to perform our contract with you, process payments, fulfil orders, remember your preferences and interests, send account-related notifications, process purchases, returns, exchanges or other transactions, create, maintain and manage your account, arrange shipping, facilitate returns and exchanges, enable reviews, and create a personalised shopping experience, such as recommending products related to your purchases. This may include using personal information to better customise and improve the Services.

Marketing and Advertising

We use your personal information for marketing and promotional purposes, such as sending marketing, advertising and promotional communications via email, SMS or post, and displaying online advertisements for products or Services on the Services or other websites, including based on items you have previously purchased, added to your cart or interacted with on the Services.

Security and Fraud Prevention

We use personal information to verify accounts, provide a secure shopping and payment experience, detect, investigate and take action against fraudulent, illegal, unsafe or malicious activity, protect public safety and secure our Services. If you choose to register an account, you are responsible for keeping your login credentials secure. We strongly recommend that you do not share your username, password or access details with anyone.

Communicating With You

We use your personal information to provide customer support, respond to enquiries, deliver effective Services and maintain our business relationship with you.

Legal Reasons

We use personal information to comply with applicable laws, respond to lawful requests from law enforcement or government authorities, participate in civil discovery, actual or potential litigation or other legal proceedings, and enforce or investigate potential violations of our Terms or policies.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes in accordance with this Privacy Policy, including:

With Shopify, vendors and service providers that perform Services on our behalf (such as IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping);
With business and marketing partners to provide marketing Services and advertising. These partners will use your information in accordance with their own privacy policies. Depending on where you live, you may have the right to request that we do not share information for targeted advertising;
When you direct us, request it, or otherwise consent to the disclosure of information, such as for shipping products or through social media integrations;
With our affiliates or within our corporate group;
In connection with a business transaction, such as a merger or insolvency, to comply with legal obligations, enforce our policies, or protect and defend the rights of Harlow & Ivy, our users or others.

Relationship With Shopify

The Services are hosted by Shopify, which collects and processes personal information relating to your access to and use of the Services in order to provide and improve the Services. Information you submit through the Services may be transferred to and shared with Shopify and third parties located in other countries. For more information about how Shopify uses your personal information and your rights, please refer to Shopify’s customer Privacy Policy.

Third-Party Websites and Links

The Services may contain links to websites or platforms operated by third parties. We are not responsible for the privacy or security practices of such third-party sites, nor for the accuracy or reliability of their content. Information shared in public or semi-public areas, including on third-party social media platforms, may be visible to others without restriction.

Children’s Data

The Services are not intended for use by children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you are a parent or guardian and believe a child has provided us with personal information, please contact us to request deletion. As of the effective date of this Privacy Policy, we do not knowingly “sell” or “share” personal information of individuals under 16, as defined by applicable law.

Security and Retention of Information

No security measures are perfect or impenetrable, and we cannot guarantee absolute security. Information transmitted to us may not be secure during transmission. We recommend that you do not use unsecured channels to communicate sensitive or confidential information.

We retain personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including to maintain your account, provide Services, comply with legal obligations, resolve disputes and enforce our agreements and policies.

Your Rights and Choices

Depending on your location, you may have some or all of the following rights regarding your personal information:

Right of access – to request access to personal information we hold about you;
Right to deletion – to request deletion of personal information;
Right to correction – to request correction of inaccurate personal information;
Right to data portability – to receive a copy of your personal information or request transfer to a third party;
Managing communication preferences – you may opt out of marketing emails at any time using the unsubscribe option. Non-promotional communications may still be sent.

If you reside in the UK or the European Economic Area (EEA), you may also have additional GDPR rights, including the right to object to processing, restrict processing, and withdraw consent where processing is based on consent.

We will not discriminate against you for exercising your rights. We may need to verify your identity before responding to a request, as permitted by law. You may appoint an authorised agent to submit requests on your behalf, subject to verification.

Complaints

If you have concerns about how we process personal information, please contact us using the details below. You may also have the right to lodge a complaint with your local data protection authority. For the EEA, a list of supervisory authorities is available via the European Data Protection Board.

International Transfers

Your personal information may be transferred, stored and processed outside your country of residence. Where personal information is transferred outside the UK or EEA, we rely on recognised transfer mechanisms such as standard contractual clauses, unless the destination country has been deemed to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. Updates will be posted on this page and the “Last updated” date will be revised as required by law.