Privacy policy

Introduction

This Privacy Policy explains how theeasternloomx.shop collects, uses, shares, stores and otherwise processes personal information when you visit our website, purchase products, contact customer service or otherwise interact with us.

For privacy enquiries:

Email: info@theeasternloomx.shop

The UK's data-protection framework includes the UK GDPR and Data Protection Act 2018, as amended by subsequent legislation including the Data (Use and Access) Act 2025. The ICO explains that the 2025 Act updates existing data-protection law rather than replacing it, with changes phased in through June 2026.

1. Personal Information We May Collect

Depending on how you use our services, we may process information including:

Identity Information

This may include your name and other information reasonably necessary to identify you in connection with an order or request.

Contact Information

This may include:

• Email address;
• Telephone number;
• Billing details; and
• Delivery information.

Order Information

This may include:

• Products purchased;
• Order number;
• Purchase amount;
• Transaction date;
• Order status;
• Delivery status;
• Returns;
• Refunds; and
• Customer-service history.

Payment-Related Information

Payment transactions may be processed by Shopify-supported providers or other authorised payment processors.

We may receive transaction information necessary to determine whether a payment has been authorised, completed, reversed or refunded.

Customers should not send complete payment-card numbers or security codes to us by email.

Technical Information

When you browse our website, technical information may be generated or collected, including:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Referring pages;
• Website interactions;
• Pages visited; and
• Date and time information.

Communications

If you contact us, we may retain your message, our response and information necessary to resolve your enquiry.

2. How We Collect Information

Information may be collected:

• Directly from you;
• During checkout;
• When you contact us;
• Through website technologies;
• Through Shopify;
• Through payment processors;
• Through fulfilment providers;
• Through delivery providers; and
• Through security or fraud-prevention services.

3. Why We Process Personal Information

We may process information to:

• Operate theeasternloomx.shop;
• Process purchases;
• Verify payments;
• Fulfil orders;
• Arrange delivery;
• Communicate order updates;
• Provide customer service;
• Manage cancellations;
• Process returns;
• Issue refunds;
• Protect accounts and transactions;
• Detect or prevent fraud;
• Maintain website security;
• Meet legal obligations;
• Maintain business records;
• Resolve disputes;
• Establish or defend legal claims;
• Analyse website performance;
• Improve our services; and
• Provide marketing where legally permitted.

4. Lawful Bases

Depending on the particular activity, we may rely on lawful bases including:

Contract: where processing is necessary to take steps requested by you or to fulfil our agreement with you.

Legal obligation: where processing is necessary to comply with applicable law.

Legitimate interests: where processing is reasonably necessary for legitimate business purposes and those interests are not overridden by applicable individual rights.

Consent: where applicable law requires consent and valid consent has been provided.

Where processing is based on consent, consent may be withdrawn subject to applicable law.

5. Shopify

Our online store uses Shopify ecommerce services.

Shopify may process information in connection with hosting, ecommerce functionality, checkout, security, transaction support and related services.

Shopify provides merchants with policy tools but states that merchants remain responsible for the policies they publish and their compliance obligations.

6. Payment Providers

Payments may be handled by independent payment processors.

Payment providers may collect and process payment information in accordance with their own legal responsibilities and privacy practices.

We receive only the information reasonably necessary for us to manage the transaction and customer relationship.

7. Fulfilment and Delivery Providers

We may share information necessary to prepare and deliver orders with fulfilment providers, warehouses and carriers.

This may include your name, delivery information, contact information and relevant order details.

8. Other Service Providers

We may use service providers for purposes including:

• Website infrastructure;
• Customer service;
• Security;
• Fraud prevention;
• Analytics;
• Email communications;
• Marketing where permitted;
• Accounting; and
• Professional advice.

Information will be shared only where reasonably necessary for the relevant service.

9. Legal Disclosures

We may disclose information where reasonably necessary to:

• Comply with applicable law;
• Respond to lawful requests;
• Cooperate with courts or regulators;
• Investigate fraud;
• Protect website security;
• Protect customers or third parties; or
• Establish, exercise or defend legal claims.

10. International Processing

Some providers may process information outside the United Kingdom.

Where UK data-protection law requires safeguards for an international transfer, an appropriate lawful transfer mechanism will be used.

11. Cookies and Similar Technologies

theeasternloomx.shop may use cookies, pixels, local storage and similar technologies for purposes including:

• Essential website operation;
• Shopping-cart functionality;
• Authentication;
• Security;
• Fraud prevention;
• Remembering preferences;
• Analytics; and
• Marketing where permitted.

Appropriate consent or privacy controls will be provided where required by applicable law.

12. Marketing Communications

Where legally permitted, customers may receive marketing communications relating to products, promotions or our services.

You can unsubscribe from applicable marketing emails using the unsubscribe option included in those messages or by contacting:

info@theeasternloomx.shop

Unsubscribing from marketing does not prevent necessary transactional communications concerning orders, payments, delivery, returns, refunds or security.

13. Data Retention

We retain personal information only for as long as reasonably necessary for legitimate business, contractual and legal purposes.

Factors affecting retention may include:

• Transaction requirements;
• Accounting requirements;
• Tax requirements;
• Customer-service needs;
• Fraud prevention;
• Disputes;
• Applicable limitation periods; and
• Legal obligations.

Where information is no longer required, we will take reasonable steps to delete, anonymise or otherwise appropriately dispose of it.

14. Information Security

We use reasonable administrative, organisational and technical measures intended to reduce the risk of:

• Unauthorised access;
• Accidental loss;
• Unauthorised disclosure;
• Destruction;
• Alteration; and
• Misuse.

No internet transmission or electronic-storage system can be guaranteed to be completely secure.

15. Your Data-Protection Rights

Depending on applicable circumstances, individuals may have rights concerning:

• Access;
• Rectification;
• Erasure;
• Restriction;
• Objection;
• Data portability;
• Withdrawal of consent; and
• Certain automated decision-making activities.

These rights may be subject to legal conditions and exceptions.

16. Exercising Your Rights

To submit a privacy or data-protection request:

Email: info@theeasternloomx.shop

Please provide sufficient information to allow us to understand your request.

We may take reasonable steps to verify identity before releasing personal information.

17. Privacy Complaints

Customers may submit privacy complaints by contacting:

info@theeasternloomx.shop

The Data (Use and Access) Act 2025 introduced updated requirements relating to organisations' handling of data-protection complaints.

We will assess complaints in accordance with applicable requirements.

Individuals may also have the right to complain to the UK Information Commissioner's Office.

18. Children's Information

We do not intentionally seek unnecessary personal information from children.

Where applicable laws impose additional responsibilities in relation to children's information, we will take those requirements into account.

19. Business Transfers

If our business or relevant assets are reorganised, sold, transferred or merged, relevant personal information may be included in that transaction where legally permitted.

Applicable data-protection requirements will continue to apply.

20. External Websites

Our website may contain links to independent third-party websites.

Those third parties are responsible for their own privacy practices.

Customers should review applicable third-party privacy information before providing personal information to external services.

21. Changes to This Privacy Policy

We may update this Privacy Policy when reasonably necessary because of:

• Legal changes;
• Regulatory guidance;
• Technology changes;
• Changes to Shopify services;
• Changes in service providers; or
• Changes to our business practices.

The latest version will be published on theeasternloomx.shop.

22. Contact Us

For privacy enquiries, data-protection requests or complaints:

theeasternloomx.shop
Email: info@theeasternloomx.shop