Berkshire, England

Privacy Policy

Introduction
This privacy notice provides you with details of how we collect and process your personal data through your use of our site www.elizabethascot.co.uk including any information you may provide through our site when you purchase a product or service, sign up to our newsletter or take part in a prize draw or competition.
MSF Partners Ltd, trading as Elizabeth Ascot is the data controller and we are responsible for your personal data (referred to as “we”, “us” or “our” in this privacy n​otice).
It is Elizabeth Ascot’s policy to respect your privacy regarding any information we may collect from you or which you may provide to us, in the circumstances set out below.
This policy is effective as of 5 August 2023. We review our privacy practices on an ongoing basis, and as such we may change this privacy policy from time to time. Please check this page frequently to ensure you are familiar with its current content. 

ACTIVITY TYPES OF PERSONAL DATA COLLECTED
When you sign-up to: 
Receive free content, including eBooks, news and offers; 
Email address; 
First name; 
Last name; 
When you purchase our products directly from us  Name; 
Email address; 
Shipping address; 
Phone number; 
Any Personal Data which you provide to us in the free text box of the form; 
Payment method choice (payment details are held by our payment processor, not us) 
When you complete the Contact form  Name; 
Email address; 
Phone number; 
Any Personal Data which you provide to us in the free text box of the form; 
Further, we may process certain types of personal data about you as follows: 
Identity Data may include your date of birth and gender. 
Profile Data may include your username and password, purchases or orders, your interests, preferences, feedback and survey responses. 
Transaction Data may include details of purchases made by you. 
Usage Data may include information about how you use our website, products and services. 
Marketing and Communications Data may include your preferences in receiving marketing communications from us and our third parties and your communication preferences. 

1.  How we collect your personal data

We collect data about you through a variety of different methods including:
Direct interactions:
You may provide data by filling in forms on our site (or otherwise) or by communicating with us by post, phone, email or otherwise, including when you: 

Automated technologies or interactions: 
As you use our site, we may automatically collect Technical Data about your equipment, browsing actions and usage patterns. We collect this data by using cookies, server logs and similar technologies. We may also receive Technical Data about you if you visit other websites that use our cookies. 
Please see our cookie policy for further details. 

Third parties or publicly available sources: 
We may receive personal data about you from various third parties and public sources as set out below: 

Data that we collect automatically 
We automatically collect certain information when you visit our Website – such as the type of browser and operating system you are using, and the domain name of your Internet service provider. We do not link this information with any Personal Data.   
We may also collect data automatically through our use of cookies on the Website. Please see our cookie policy  to find out about the types of cookies we set and why, and how you can adjust your settings to disable cookies. 

2. Use of your Personal Data 

We will only use your Personal Data when the law allows us to. 
Most commonly, we use your Personal Data to: 

3. Sharing of your Personal Data 

We take your privacy seriously and will not share your Personal Data with others, except as permitted by applicable law or as set out below:   We share Personal Data as necessary with third parties who provide services or functions on our behalf and who require the information to provide those specific services to us. These third parties may include social media advertising platforms such as Facebook, Instagram, TikTok and Google Adwords for the purpose of custom audience generation and the development of targeting criteria for other audiences. Please note that we have appropriate data privacy safeguards in place with third parties with whom we share Personal Data as described above and who are providing services or functions on our behalf.
We may have to share your personal data with the parties set out below for the purposes set out in the table in section 1 above: 

We require all third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the law. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions. 

4. Marketing communications

You will receive marketing communications from us if you have:

We will get your express opt-in consent before we share your personal data with any third party for their marketing purposes. You can ask us or third parties to stop sending you marketing messages at any time by emailing office@elizabethascot.co.uk OR by clicking “Update your preferences” at the bottom of any marketing emails sent to you. Where you opt-out of receiving our marketing communications, this will not apply to personal data provided to us as a result of a product/service purchase, warranty registration, product/service experience or other transactions. 

5. Keeping your Personal Data secure

We have implemented security policies and technical measures to safeguard the Personal Data we collect. We maintain physical, electronic and procedural safeguards that comply with applicable law, including the GDPR, to safeguard Personal Data from accidental loss, destruction or damage and unauthorised access, use and disclosure.
In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know such data. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.