Privacy policy

At London Gifts (accessible from https://giftsoflondon.uk), we are committed to protecting the privacy and security of our customers in the United Kingdom. This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from our store.
This policy is in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. London Gifts and Souvenirs acts as the data controller for the personal information described in this policy.

1. PERSONAL INFORMATION WE COLLECT

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. This is collected on the lawful basis of our legitimate interests in operating and improving the Site.
Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including:
Identification: Name, billing address, shipping address, and phone number.
Payment Information: Credit card numbers (processed securely via encrypted gateways) and email address.
Device Data: Log files, web beacons, tags, and pixels.
We collect this Order Information on the lawful basis of contractual necessity (to fulfil your order) and our legitimate interests (fraud prevention and site improvement).

2. HOW DO WE USE YOUR PERSONAL INFORMATION?

We use the Order Information that we collect generally to fulfil any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). We also use this Order Information to:
Communicate with you regarding your order;
Screen our orders for potential risk or fraud (legitimate interest);
Provide you with information or advertising relating to our products or services, where you have consented or we have a legitimate interest to do so.
Where we rely on your consent to send marketing communications, you have the right to withdraw that consent at any time by contacting us or using the unsubscribe link in any marketing email.

3. SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with third parties to help us use your Personal Information, as described above. All third parties with whom we share your data are required to handle it in compliance with applicable data protection law. We share your data with:

Shopify: We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy
Google Analytics: We use Google Analytics to help us understand how our customers use the Site. Google Analytics data is anonymised where possible and processed under a Data Processing Agreement compliant with UK GDPR.

Legal Compliance: We may share your Personal Information to comply with applicable UK laws and regulations, to respond to a court order, regulatory request, or other lawful request for information we receive, including from UK law enforcement or regulatory authorities such as the ICO.

We do not transfer your personal data outside of the United Kingdom or European Economic Area except where appropriate safeguards are in place (such as Standard Contractual Clauses or an adequacy decision).

4. BEHAVIOURAL ADVERTISING & OPT-OUT

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. We will only do so where we have a lawful basis, such as your consent or our legitimate interests.
You can opt out of targeted advertising by visiting the Your Online Choices portal at: https://www.youronlinechoices.com/uk/
You may also manage cookie preferences directly on our Site via our Cookie Consent tool.

5. YOUR RIGHTS UNDER UK GDPR

As a UK resident, you have the following rights in relation to the personal data we hold about you:
Right of Access: You may request a copy of the personal data we hold about you (Subject Access Request).
Right to Rectification: You may ask us to correct inaccurate or incomplete personal data.
Right to Erasure: You may ask us to delete your personal data in certain circumstances (‘the right to be forgotten’).
Right to Restriction: You may ask us to restrict the processing of your data in certain circumstances.

Right to Data Portability: You may request that we transfer your personal data to you or a third party in a commonly used, machine-readable format.
Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.

Rights related to automated decision-making: You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

To exercise any of these rights, please contact us using the details below. We will respond within one calendar month.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection issues, at www.ico.org.uk or by calling 0303 123 1113.

6. DATA SECURITY

We use industry-standard security measures, including TLS (Transport Layer Security) encryption, to protect your data during the checkout process. Your payment details are never stored on our servers. We have implemented appropriate technical and organisational measures to safeguard your personal data against unauthorised access, loss, or disclosure, in line with our obligations under the UK GDPR.

7. DATA RETENTION

When you place an order through the Site, we will maintain your Order Information for as long as necessary to fulfil the purposes outlined in this policy, including for the purposes of satisfying any legal, accounting, or reporting requirements. Under UK law, we are typically required to retain financial records for a minimum of six years.
When your personal data is no longer required, we will securely delete or anonymise it. You may request deletion of your data at any time (subject to any legal obligations we have to retain it) by contacting us using the details below.

8. COOKIES

We use cookies and similar tracking technologies to enhance your experience on our Site. You can control the use of cookies through your browser settings or our Cookie Consent tool. For further information about the cookies we use, please see our Cookie Policy available on the Site.

9. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time in order to reflect changes to our practices or for other operational, legal, or regulatory reasons, including changes in UK data protection law. We will notify you of material changes by posting the updated policy on our Site with a revised effective date. We encourage you to review this policy periodically.