Privacy policy
This Privacy Policy explains how enviousdesignsa.shop collects, uses, stores, shares and otherwise processes personal information when individuals visit our website, make purchases, contact us, interact with our services or otherwise communicate with us.
We take the privacy of customers and website visitors seriously and aim to process personal information fairly, transparently and in accordance with applicable United Kingdom data-protection requirements.
For privacy enquiries or data-protection complaints, contact:
Email: info@enviousdesignsa.shop
Personal Information We May Collect
Depending on how you interact with enviousdesignsa.shop, we may collect information including:
Identity and Contact Information
This may include:
- Name;
- Email address;
- Telephone number where provided;
- Billing details;
- Delivery details; and
- Other information supplied when contacting us.
Order and Transaction Information
This may include:
- Products purchased;
- Order number;
- Order date;
- Order value;
- Currency;
- Shipping status;
- Returns;
- Refunds;
- Customer-service communications; and
- Limited payment-related transaction information.
Full payment-card information may be processed directly by Shopify, payment gateways, banks or payment-service providers rather than stored directly by us.
Device and Technical Information
When you use our website, certain information may be collected automatically, such as:
- IP address;
- Browser type;
- Device type;
- Operating system;
- Website activity;
- Referral information;
- Session information;
- Cookie identifiers; and
- Similar technical information.
Communications
We may retain communications sent to or received from customers, including:
- Customer-service enquiries;
- Return requests;
- Refund enquiries;
- Product questions;
- Complaints; and
- Privacy requests.
How We Use Personal Information
We may process personal information for purposes including:
- Processing and fulfilling orders;
- Confirming purchases;
- Processing payments;
- Arranging shipping and delivery;
- Providing tracking information;
- Managing cancellations;
- Processing returns and refunds;
- Responding to customer enquiries;
- Preventing fraud and misuse;
- Maintaining website security;
- Operating customer accounts;
- Improving website functionality;
- Analysing store performance;
- Maintaining business and accounting records;
- Complying with legal obligations;
- Establishing, exercising or defending legal claims; and
- Conducting marketing where legally permitted.
Lawful Bases for Processing
Depending on the purpose, we may rely on lawful bases including:
- Contract, where processing is necessary to take steps requested by a customer or fulfil a purchase contract;
- Legal obligation, where information must be processed to comply with applicable law;
- Legitimate interests, where processing is reasonably necessary for legitimate business purposes and those interests are not overridden by the individual's rights;
- Consent, where consent is required and has been validly obtained; and
- Other lawful bases where applicable.
The ICO confirms that organisations must identify an appropriate lawful basis when handling personal information.
Shopify and Ecommerce Service Providers
Our website may operate using Shopify ecommerce technology.
Shopify and other service providers may process information necessary to provide website hosting, checkout, payment, fraud-prevention, analytics, security and related ecommerce services.
We may also share necessary information with:
- Payment processors;
- Fulfilment providers;
- Warehousing providers;
- Delivery carriers;
- Logistics providers;
- Technology providers;
- Analytics providers;
- Fraud-prevention providers;
- Customer-service providers;
- Professional advisers; and
- Government, regulatory or law-enforcement bodies where disclosure is legally required.
We do not disclose personal information simply for unrelated purposes without an appropriate lawful basis.
Payment Information
Payment details are generally submitted through payment systems provided by Shopify or other authorised payment-service providers.
We may receive information confirming payment status, transaction identifiers, payment method type and other information necessary to administer an order, but sensitive payment credentials may be handled directly by the relevant payment provider.
Cookies and Similar Technologies
Our website may use cookies and similar storage or access technologies to:
- Keep the website functioning;
- Remember customer preferences;
- Maintain shopping-cart functionality;
- Provide checkout functionality;
- Secure the website;
- Prevent fraud;
- Measure website performance;
- Analyse website usage; and
- Support advertising or marketing where appropriate.
UK privacy rules require appropriate information about cookies and, subject to applicable exceptions, consent for non-essential cookies or similar technologies.
Where required, customers may be presented with cookie controls allowing them to manage applicable preferences.
Blocking certain strictly necessary technologies may prevent parts of the website from functioning correctly.
Marketing Communications
Where legally permitted, we may use contact information to communicate about products, services, promotions or store updates.
Where consent is required, marketing will be sent on the basis of valid consent.
Customers may unsubscribe from promotional communications using an available unsubscribe mechanism or by contacting:
An unsubscribe request does not prevent us from sending transactional or service messages that are necessary for an existing order or customer relationship.
Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate legal, accounting, fraud-prevention, contractual and business requirements.
Different categories of information may be retained for different periods.
When information is no longer reasonably required, we may delete, anonymise or securely dispose of it, subject to applicable legal obligations.
International Data Transfers
Some ecommerce, payment, fulfilment, analytics or technology providers may process information outside the United Kingdom.
Where personal information is transferred internationally, appropriate safeguards will be used where required by applicable data-protection law.
Data Security
We use reasonable technical and organisational measures designed to protect personal information against:
- Unauthorised access;
- Unlawful disclosure;
- Accidental loss;
- Destruction;
- Alteration; and
- Misuse.
No internet-based system can be guaranteed to be completely secure. Customers should also take appropriate precautions to protect passwords, devices and account information.
Children's Privacy
Our website is intended for general ecommerce use and is not designed specifically to collect personal information from young children.
We do not knowingly seek to collect personal information from children in circumstances where doing so would be unlawful.
If you believe personal information concerning a child has been provided to us inappropriately, contact:
Your Data-Protection Rights
Depending on the circumstances and applicable law, individuals may have rights concerning their personal information, including rights relating to:
- Access;
- Rectification;
- Erasure;
- Restriction of processing;
- Objection to certain processing;
- Data portability;
- Withdrawal of consent where processing depends on consent; and
- Certain automated decision-making activities.
These rights may be subject to legal conditions, limitations and exemptions. The ICO confirms that UK data-protection law provides rights including erasure, restriction, portability and objection in qualifying circumstances.
To exercise a privacy right, contact:
We may request reasonable information to verify identity before responding to a request.
Data-Protection Complaints
Individuals may raise a complaint concerning how we collect or use personal information by contacting:
We will maintain a process for dealing with data-protection complaints.
Current ICO guidance requires organisations to provide a method for making data-protection complaints, acknowledge receipt within 30 days, take appropriate steps to respond and investigate without undue delay, keep complainants appropriately informed and communicate the outcome without undue delay.
Individuals may also have the right to raise concerns with the Information Commissioner's Office where appropriate.
Third-Party Websites
Our website may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices of independent third-party websites.
Customers should review the relevant third party's privacy information before providing personal information to them.
Changes to This Privacy Policy
We may update this Privacy Policy where reasonably necessary to reflect:
- Changes in our services;
- Changes in technology;
- Changes in service providers;
- Changes in data-processing activities; or
- Changes in applicable legal requirements.
The updated version will be published on enviousdesignsa.shop with an appropriate updated date.
Contact
For privacy questions, data-rights requests or complaints, contact:
Email: info@enviousdesignsa.shop
- Choosing a selection results in a full page refresh.