Herba London is part of Herba Skincare Limited and for the purpose of this Policy – is trading as Herba London. The website www.herbalondon.com is managed by Herba Skincare Limited.
In accordance with the UK Data Protection Act 2018 and the General Data Protection Regulation 2016, the data controller for any personal information we hold about you is Herba Skincare Limited of 152-154 Coles Green Road, London NW2 7HD.
Herba London and Herba Skincare Limited will collect your data when an order is placed on our website. Data is also collected when our customers sign-up for newsletters and other marketing communications.
Browsing our website (www.herbalondon.com) will also mean that your data is collected. Data will also be collected when our customers leave feedback on our products or services.
The data we collect will include details provided to us such as first and surnames, telephone number/s, shipping and billing address.
In order to improve our services, we will also review and collect data about our customers’ purchasing and shipping habits, along with the pages and products they have viewed on our website.
Herba London and Herba Skincare Limited will use our customers’ data to:
Manage the way we process orders and take payments through our payment gateways such as PayPal and Worldpay.
Manage the way we deliver goods you have purchased on our website.
Manage additional services you have opted-into such as marketing communications.
Provide access to our website for members i.e. managing wish lists and member only discounts where necessary.
Our customers should note that under the Law, Herba London and Herba Skincare Limited must have a legal basis to process the data you have supplied us with. In most cases we will process your data because we have a contract with you like the delivery of an order or to provide you with other service you have opted in for. When given the permission by you, we will also use your personal data to send you marketing communications that we believe will be of interest to you. You can opt out of these marketing communications from us at any time.
Your personal data will be mainly processed by Herba Skincare Limited – however there are instances when your personal data will be processed by others who will be acting under our instructions. This will be those contracted to deliver goods on our behalf.
There may also be the need to engage with other businesses in the effort to meet the needs of our customers, or to help us improve our services. In these cases we will share your data, however these businesses will face a rigorous evaluation process and only chosen if they meet our minimum standards of security and compliance with the UK Data Protection Act 2018 and the General Data Protection Regulation 2016.
Herba London and Herba Skincare Limited will never hold your personal data for longer than is necessary to fulfil the purposes for which you provided that personal data, unless if the law permits or requires that we retain it for longer.
The period of retention will vary, however this will depend upon the reason why your data has been provided. For example, the data used to send you marketing communications will be retained until you ask to be unsubscribed.
Under the Law you have the right to:
Know what personal data of yours we have and are processing.
Where that data came from and how we are using it.
Request that we update or correct the data we hold about you.
Request that we delete or erase your data from our systems.
Limit or oppose us processing your data
Ask us to supply the personal data we hold about you in an easy readable electronic format or transfer it direct to a third party nominated by you.
Customers can exercise the above rights at any time by emailing firstname.lastname@example.org or in writing to Herba Skincare Limited, 152-154 Coles Green Road, London NW2 7HD.
Customer to note that when exercising their rights, they will be required to provide a form of proof to ensure they are the rightful owner of the data.
As a customer – if you feel that your personal data has been used unlawfully, you can file a complaint with the supervisory authority responsible for compliance with the rules on personal data protection.
If you are in the UK, you can file a complaint with the Information Commissioner & Office. Details can be found here, along with all other information relevant to how your personal data should be managed: https://ico.org.uk/your-data-matters/