Privacy Notice

We’d like to share with you this Privacy Notice.

This explains how we, Lulu B Limited, a company registered in England and Wales company number 4539798 and registered office at 17 Hertford Avenue, London, SW14 8EF (PLEASE DON'T RETURN ITEMS TO THIS ADDRESS) may collect, use and share your personal data when visiting our wonderful site available at https://www.lulub.co.uk (we call it our ‘Website’ in this Privacy Notice).

For the sake of ease, and so we don’t have to repeat all of our legal details repeatedly throughout our Privacy Notice, we refer to ourselves as “Lulu B” but don’t worry, we give full details again at the bottom of this Privacy Notice under ‘How to Contact Us’.

Here at Lulu B, we are committed to protecting and respecting your privacy.  For this reason, we would ask you very kindly to please read the following carefully. It is important that you know that this Privacy Notice also applies to you when you sign up to receive email communications from us.

Although we know the legal parts can be boring, everything we have included here is required under a law that protects your personal data. We have tried to keep the contents as clear as possible with as much transparency on how we use your data. If you have any questions at all (for example, you may not understand some of the clauses in this Privacy Notice) you must let us know – we’d be glad to hear from you if you have any questions at all – just send an email to lulu@lulub.co.uk.

Please note, that on occasions we may have to make some changes to this Privacy Notice, but rest assured any changes we may make to our Privacy Notice will be posted on this page and, where appropriate (e.g if it is a substantial change), we will notify you that we’ve made a change in an email to you!

---

CONTENTS

So you can navigate around this Privacy Notice as quickly as possible or according to your needs, please see below the topics that we cover.

• What information do we collect about you
• What do we do with information we collect about you
• Where do we store our information about you
• Your rights
• How to contact us

Here at Lulu B, we collect and process information all about your good self! See below for the following data we collect and process about you. For the purposes of this Privacy Notice, we are going to refer to this as ‘your information’: information that you submit online via the Website; any correspondence you send to us; details of your visits to the Website and the resources that you access (which may include, among other things, traffic data and communication data); and details of transactions you carry out or orders you place through the Website.
We are very aware that your information may be confidential and we will protect the confidentiality of your information in accordance with our normal procedures and legal requirements.
Although you are not required to provide us with any information, you should know that if you do not provide certain key information, we may not be able to provide you with all of our products and services. For example, if you do not provide us with your payment information, we will not be able to sell you our jewellery.

See further below.

---

WHAT WE DO WITH INFORMATION WE COLLECT ABOUT YOU

Use of information.

So, you may be wondering what we do with your information? Well, we use your information in the following ways:

At Lulu B we will never sell your e-mail address to another company and we only retain it so we can send you our own newsletters.
To ensure that the Website’s content is presented as effectively as possible for you; for our internal purposes, such as quality control, Website performance, system administration and to evaluate use of the Website, so that we can provide you with enhanced services; to notify you about changes to our services; to provide you with information about products that you request from us, or which we feel may interest you (where necessary, after obtaining your consent); to personalise the marketing communications we send you; to carry out our obligations arising from any contracts with you and for billing and delivery purposes; and to enable you to participate in the features of the Website, when you choose to do so.
We will not keep your personal data for longer than is necessary for the purposes for which we collect it unless we believe that the law or other regulation requires us to preserve it (for example, because of a request by a tax authority or in connection with any anticipated litigation).
When it is no longer necessary to retain your data, we will delete the personal data that we hold about you from our systems.

Marketing

If you are an existing customer or if you have made a sales enquiry, we may contact you by email / telephone / post with information about products which are similar to those we previously provided to you, unless you have indicated that you do not want to hear from us.
Otherwise, we may contact you by email or telephone only if you consent.
If you do not want us to use your information in this way, please tick the relevant boxes during the order process when we collect your information.  You also may ask us at any time not to use your information for marketing purposes by contacting us at lulu@lulub.co.uk or setting your preferences on our Website.

Sharing your information

With whom do we share your information?

We may share your information with other organisations, here are the organisations that we could share your information with: if we sell or buy any business or assets (as we may share your data with the prospective seller or buyer); with business partners, suppliers, sub-contractors for the performance of any contract we enter with them or you (e.g. suppliers who process payments on our Website); and if we have to share your information to comply with legal or regulatory requirements, or if we have to enforce or apply our Terms or any other agreements or to protect our rights, property or our customers, etc.  This may involve exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
We do not send any personal information that we collect about you on the Website to any social media sites that you link to your account, e.g. Facebook, nor do we share that information with such sites.  We do not collect any personal information about you from those sites.
If you pay for a product over this Website, we use PayPal, Inc (“PayPal”) to process your payment. PayPal operates as a secure server to process your payment details. They encrypt your credit or debit card information and authorise payment directly. This means that your credit card or debit card details are never revealed to us. Please read the PayPal privacy policy here to see what security measures they have in place and how they treat your information.

What is our legal basis for using your information?

The law says that we need a lawful reason to process your information. It also says that we need to tell you what legal bases we rely on to use your personal information, we’ve listed these below so you can see exactly how we lawfully process your data:
Performance of a contract – The use of your personal information may be necessary to perform a contract that you have with us. For example, when you buy a necklace from us, we need to use your personal information to process your order, send you your wonderful product, and respond to any requests you may have. We also need to use your personal information to enable you to use some parts of the Website, and to notify you about changes to our services.
Consent – We will rely on your consent to, in certain cases, send you marketing communications. You may withdraw your consent at any time.
Legitimate interests – We have a legitimate interest in using your information in the other ways described in this Privacy Notice, for example to improve and personalise our products, services, and the Website, and to conduct certain marketing and market research activities.

Automated decision-making

We may make automated decisions about you based on your personal information in the following circumstances: to select personalised offers, discounts or recommendations to send you based on your shopping history, Website browsing history, and other information you provide to us.

---

Security

All your information is stored on secure servers.  Any payment transactions will be stored on PayPal’s hosting service.  Any actions you perform on the Website which are related to your account will be encrypted.  If you have a username, password or other login details which enable you to access certain parts of the Website, you must not allow any other person to use them and must treat them as confidential!  If you believe or suspect that someone else knows your login details you must contact us at lulu@lulub.co.uk as soon as possible.
Unfortunately, the transmission of information via the Internet is never completely secure.  Although we will apply our normal procedures and comply with legal requirements to protect your information, we cannot guarantee the security of your information transmitted to the Website and any transmission is at your own risk.  Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
The Website may from time to time contain links to and from other websites (for example, when you link to post a purchase to Facebook or Instagram).  If you follow a link to any of those sites, please note that those sites need to have their own privacy policies and that we do not accept any responsibility or liability for those sites or for their privacy policies.  Please check those privacy policies before you submit your information to those sites.

Where do we transfer your information?

Sometimes your personal data may be transferred outside of the European Economic Area (“EEA”) to the types of organisations we described in the section above called ‘Sharing your information’. Just so you know the EEA are the Member States of the European Union, together with Norway, Iceland and Liechtenstein.
We want to make sure that your personal data is stored and transferred in a way which is secure. If we transfer data outside of the EEA we only do so where that country it is compliant with data protection legislation and the means of transfer provides adequate safeguards in relation to your data, for example:
By way of a data transfer agreement with a third party, incorporating the current standard contractual clauses adopted by the European Commission for the transfer of personal data by controllers in the EEA to controllers and processors in jurisdictions without adequate data protection laws; or

By transferring your data to an entity which has signed up to the EU-U.S. Privacy Shield Framework for the transfer of personal data from entities in the EU to entities in the United States of America or any equivalent agreement in respect of other jurisdictions; or

By transferring your data to a country where there has been a finding of adequacy by the European Commission in respect of that country’s levels of data protection via its legislation.

---

WHERE YOU HAVE CONSENTED TO THE DATA TRANSFER

Your rights

You can access and update certain parts of your personal information by logging into your account.
Because there are laws in place in the EEA that govern how we treat your information, it’s important you know about your right. You have various rights in relation to the data which we hold about you. We have set these out below. Please do take the time to read them, they are important!

Right to object

This right enables you to object to us processing your personal data where we do so for one of the following reasons: because it is in our legitimate interests to do so (for further information please see section ‘What is our legal basis for using your information’);
to enable us to perform a task in the public interest or exercise official authority; to send you direct marketing materials; or for scientific, historical, research, or statistical purposes (which we never do at Lulu B but we thought we’d tell you about it anyway!).

Right to withdraw consent

Where we have obtained your consent to process your personal data for certain activities (for example, for marketing), you may withdraw this consent at any time and we will cease to use your data for that purpose unless we consider that there is an alternative legal basis to justify our continued processing of your data for this purpose, in which case we will inform you of this condition.

Data Subject Access Requests

You may ask us for a copy of the information we hold about you at any time, and request us to modify, update or delete such information. If we provide you with access to the information we hold about you, we will not charge you for this unless permitted by law. If you request further copies of this information from us, we may charge you a reasonable administrative cost. Where we are legally permitted to do so, we may refuse your request. If we refuse your request we will always tell you the reasons for doing so.

Right to erasure

You have the right to request that we “erase” your personal data in certain circumstances. Normally, this right exists where: the data which is your information are no longer necessary; you have withdrawn your consent to us using your data, and there is no other valid reason for us to continue; the data has been processed unlawfully; it is necessary for the data to be erased in order for us to comply with our obligations under law; or you object to the processing and we are unable to demonstrate overriding legitimate grounds for our continued processing.
We would only be entitled to refuse to comply with your request for erasure in limited circumstances and we will always tell you our reason for doing so.
When complying with a valid request for the erasure of data we will take all reasonably practicable steps to delete the relevant data.

Right to restrict processing

You have the right to request that we restrict our processing of your personal data in certain circumstances, for example if you dispute the accuracy of the personal data that we hold about you or you object to our processing of your personal data for our legitimate interests. If we have shared your personal data with third parties, we will notify them about the restricted processing unless this is impossible or involves disproportionate effort. We will, of course, notify you before lifting any restriction on processing your personal data.

Right to rectification

You have the right to request that we rectify any inaccurate or incomplete personal data that we hold about you. If we have shared this personal data with third parties, we will notify them about the rectification unless this is impossible or involves disproportionate effort. You may also request details of the third parties that we have disclosed the inaccurate or incomplete personal data to. Where we think that it is reasonable for us not to comply with your request, we will explain our reasons for this decision.

Right of data portability

If you wish, you have the right to transfer your personal data between service providers. In effect, this means that you are able to transfer the details we hold on you to another third party. To allow you to do so, we will provide you with your data in a commonly used machine-readable format so that you can transfer the data. Alternatively, we may directly transfer the data for you.

Right to complain

You also have the right to lodge a complaint with your local supervisory authority which is the Information Commissioner’s Office in the UK. You can contact them in the following ways:
Phone: 0303 123 1113
Email: casework@ico.org.uk
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
If you would like to exercise any of these rights, or withdraw your consent to the processing of your personal data (where consent is our legal basis for processing your personal data), please contact us at lulu@lulub.co.uk or write to us at the address listed below. Please note that we may keep a record of your communications to help us resolve any issues which you raise.
Please note that we may require additional information from you in order to honour your requests.
You can unsubscribe or opt-out of receiving marketing communications from us by clicking the “Unsubscribe” link at the bottom of our marketing emails.

How to contact us

If you wish to contact us with any queries or concerns, please email us at lulu@lulub.co.uk.