Privacy Policy
Last updated March 05, 2023
The details of the Privacy Policy which follows relates to our website harbourandmay.com.
We are committed to protecting your privacy and to gaining and maintaining the confidence and trust of all visitors to our website. We will only use the information that we collect about you lawfully in accordance with the EU General Data Protection Regulation (GDPR). In this Privacy Policy we’ve provided detailed information on when and why we collect your personal information. We explain how we use it, what third-party service providers we might share your information with and under what circumstances, and how we keep it secure.
If there are any questions regarding this Privacy Policy you may contact us using the information below:
Harbour & May
Keepers Cottage
Sennowe Park
Guist
Dereham
Norfolk
NR20 5PB
Email harbourandmay@gmail.com
Phone: 07592 659809
If you are unsure about any of the personal and account information we are holding in your name, please contact us using the contact details listed above. We will update your private records if required.
It’s likely that we’ll need to review this Privacy Notice from time to time. We’ll notify you of any significant changes.
Why do we collect information from you?
We collect information about you for the following reasons:
-
to process your order
-
to help you check out in a quick, user-friendly way when you have an account with us
-
to provide you with the best possible service, including a personalised browsing experience, tailored to your preferences.
-
to improve our website based on analysis of sales data
What personal data do we collect?
When you place an order with us, the information we will collect includes:
-
Full name,
-
IP Address,
-
billing and delivery address,
-
telephone number,
-
A record of your order
-
e-mail address
-
credit/debit card details (all sensitive details are inaccessible even to us from moment of purchase and are securely encrypted)
This information is necessary for us to process your payment and deliver your order to you.
If you create an account with us, we will collect the following information:
-
Full Name
-
e-mail address
-
Telephone number
-
Billing and Shipping addresses
-
A record of your orders
You can quickly and easily log into your account and change or edit any of your personal data by clicking on “My Account” either in the header or the footer of our website.
If you’d like to delete your account please contact us and we will remove your account together with all personal information it contains.
The legal basis for collecting your data when you set up an account is based on your consent.
When you visit our website, we also might collect the following information:
-
IP address
-
Information regarding what pages are accessed and when.
-
Information related to the device used, such as web browser type, operating system and device type.
-
Demographic information
-
General product preferences and interests based on your browsing history on our website
We gather this information to analyse our site’s performance and look for areas for improvement. This data also allows us to give you customised product recommendations based on best-sellers and product views.
If you contact us with a query unrelated to a previous order, we might ask for your name and contact details to be able to get in touch with you and we will keep this data until no longer than necessary to help with your query.
We will never collect any sensitive information about you without your explicit consent.
Supplier Enquires
If you contact us with supplier queries, you might be contacted back using contact details you provided us with.
The legal bases we rely on to collect information
Data Protection laws set out several different reasons for which a company may collect and process your personal data. These are:
Consent
In certain circumstances, we will only process your personal data with your clear consent.
You can create an account on our website only if you wish to do so. Not having an account doesn’t prevent you from placing an order with us.
Contract
When placing an order with us, we will require certain personal data like your name and address to be able to deliver your order so that we comply with our obligations under the sale contract. These details will be then passed on to our carrier company to deliver the goods to you.
We will use your e-mail address to provide you with updates regarding your order, such as order confirmation, despatch & tracking information.
We will also collect your phone number to be able to contact you in case of any problems with your order.
Legal compliance
If the law requires us to, we may need to collect and process your data if fraud or other financial crime is suspected.
Legitimate interest
In certain situations, we will use your data to pursue our legitimate interests in a way which might reasonably be expected as part of running an e-commerce business. We will process personal data for the following legitimate interests:
-
where the processing of our customers’ browsing and purchasing history enables us to enhance, modify, personalise or otherwise improve our services and communications for the benefit of our customers.
-
to identify and prevent fraud and keep our services safe and secure
-
to better understand how people interact with our website
-
to improve our product selection and service based on your post-purchase feedback
-
to notify you within 24 hours if you left items in your basket
For example:
We will use your purchase history to tailor our products recommendations to best suit your interests both on our website and occasionally in our newsletters (but only if you’ve signed up to our mailing list).
We will combine your browsing and purchasing data with all other customers’ data to analyse and identify shopping trends and areas for our improvement.
A short time after you’ve purchased a gift from us, we will send you a request to review your shopping experience with us as well as products you’ve purchased to help other customers make more informed choices when shopping with us.
Who has access to your information?
Your personal data security is our priority. We will not sell trade or transfer your personal information to any third parties under any circumstances. We will not share your information with third parties for marketing purposes.
What data we might share with third party service providers?
In order to be able to fulfil your order, and provide you with the best possible service, we may need to share your personal data with third party service providers for the following reasons:
-
In order to process your payment securely, and to check for potential fraud your personal data will be shared with our payment providers.
-
In order to give you the opportunity to review the quality of our service and products your email and order details (products you ordered) will be shared with Reviews.co.uk to request your feedback. Feedback is optional and can also be given anonymously.
Feedback Requests
It is our legitimate interest to learn whether you enjoyed using our website and what you think about the products you’ve purchased. Sometime after you’ve received your order we will contact you through our third party service provider Reviews.co.uk to ask to share your feedback with us. These messages do not include any promotional content and are not part of our marketing newsletter. If you wish to leave us feedback, it is visible on xxxxwebsite as well as in the footer of our website:xxxxxxx . If you wish to leave any product reviews, these will then appear on those products’ pages.
When sharing your feedback you can either stay anonymous or give your first name or nickname. No other details will be shared.
Security of your data
When you shop at Harbour & May and share some of your personal data with us, you can rest assured that we take every step to make sure we handle it securely.
Our website uses end to end “https” technology across the entire site. Access to your data is password-protected and any sensitive information is encrypted and protected with 256 Bit encryption via TLS (Transport Layer Security).
For example, all order information is encrypted and transmitted via Transport Layer Security (TLS/SSL) technology directly from your browser to our secure servers. It is only accessible by those who are authorized to access such systems, and only then to carry out tasks allowed in the contract, legal consent or legitimate interests as mentioned above.
Another example is, all supplied credit or debit card information is encrypted and transmitted via Transport Layer Security (TLS/SSL) technology directly from your browser to our payment gateway provider’s server only to be accessible by those who are authorized to access such systems and who are required to keep the information confidential. We do not ever see this information and the information never gets transmitted, seen or stored via our servers.
Use of cookies
'Cookies' are small pieces of information sent by a website to your computer and stored on your hard drive to allow that website to recognise you when you visit, to save your preferences & give you relevant content. Cookies do not collect personally identifiable information such as your name, address or payment details, but may be used to link your actions to your personal information, for example to link you adding a product to your basket & account so you can then check out.
Data Retention
We will retain your personal data only for as long as is necessary and only for the purpose for which it was obtained.
Your rights
You are entitled to view, amend, or delete the personal information that we store on you. Email your request to harbourandmay@gmail.com
If you have an account on our site, you can access your personal data by clicking on “My Account” in the website’s header, where you can update your personal data. To delete your account and all data it contains, please send a request to this effect.
Review of this Policy
We keep this Policy under regular review. This Policy was last updated on 5th May 2023