Privacy Policy.

About us.

Welcome to Shapes: handmade ceramic ornaments, for elegant nomads. www.shapes.boutique (the “Website”) is owned and operated by Anna Parellada LTD,  company number 10896991 and company address at 29 Highbury Park N5 1TH, London (Any time we use the terms “Shapes”, “we”, “us” or “our” in this Privacy Policy, we’re referring to Anna Parellada LTD.) We process personal data as a Data Controller, as defined in the Data Protection Act 2018 and the General Data Protection Regulation (“GDPR”).

About this Privacy Policy.

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from our Website. Personal data, or personal information, means any information about an individual from which that person can be identified. (It does not include data where the identity has been removed, i.e. anonymous data.) By visiting the Website or purchasing something from us (our “Services”), you are deemed to have accepted and consented to the practices described in this Privacy Policy. (Your use of the Website is also subject to our Terms & Conditions, Returns & Exchanges policy and Shipping & Delivery policy.)

Third party websites.

If you follow a link to a third-party website, please note that third-party websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Keeping your data accurate.

It’s important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Types of data we collect.

We collect information about you when you visit our Website (including technical information and information about your visit), correspond with us, place an order on our website (an “Order”) or register for an Account. We also receive data about you from third parties. The types of data we collect are described in more detail below.

Correspondence information.

If you correspond with us by phone, email or otherwise, we collect your name, contact information (such as your phone number, email address or mailing address, as applicable) and any other personal information you provide in your correspondence. We use this data to respond to communications from you and provide you with information you request from us. Each of these uses is in our legitimate interest, which we rely on as our lawful basis to use the information.
Order information. If you place an Order, we will collect your name, email address and payment information, including your credit or debit card information, billing address and shipping address. We use this data to communicate with you about your Order, collect payment for your Order and ship your Order to you. Each of these uses is in our legitimate interest, which we rely on as our lawful basis to use the information.

Account information.

If you register for an Account, we will collect your name, email address and login details. Account holders can store multiple payment methods, billing addresses and shipping addresses and we collect all payment information and addresses you store. We also collect Account holders’ purchase history. We use this data to administer your Account and provide you with an improved order and checkout experience. Each of these uses is in our legitimate interest, which we rely on as our lawful basis to use the information.

Technical information.

Each time you visit our Website, we automatically collect certain technical information, your IP address, browser type and version, time zone setting, location, network data, browser plug-in types and versions, languages, operating system and platform. We use this information to ensure our Website is presented in the most effective manner for you and for your device, for system administration, for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes, as part of our efforts to keep the Website safe and secure, and to evaluate, provide, protect and improve our Website. Because we collect this information in the aggregate, it does not identify any individual and is not considered personal data.

Information about your visit.

Each time you visit our Website, we automatically collect certain information about your visit, including the full URL clickstream to, through and from the Website (including date and time), pages you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page. We use this information as statistical data about your browsing actions and patterns, to evaluate, provide, protect and improve our Website and our Services (including evaluating and improving our marketing and developing new products and services). Because we collect this information in the aggregate, it does not identify any individual and is not considered personal data.

Data we receive from third parties.

We use Squarespace to host our Website and Stripe to process payments. Squarespace automatically collects information about you when you visit our Website and Stripe automatically collects information about you when you place an Order. For more information on how these companies handle your personal data, please refer to their privacy policies.

Marketing.

We will not send you any unsolicited marketing or spam and will take all reasonable steps to ensure that we fully protect your rights and comply with our obligations under applicable privacy, communication and data protection laws. If you have an Account, we will only contact you by email or SMS and only with information about products similar to those you previously purchased, enquired about or otherwise indicated interest in. If you do not have an Account, we will only contact you if you have expressly consented to our doing so and only by email or SMS. You can opt out of marketing messages from us at any time by following the link to unsubscribe or opt out on any marketing message sent to you. You can also do so by contacting us at any time.

Data security.

All of your personal information is protected and we have put in place appropriate physical, electronic, and management procedures to safeguard and secure the data we collect. Your information is only stored on secure cloud databases, internal servers or third party softwares and is only accessible by those who have authorised access rights. All of your payment information is encrypted using SSL technology. Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted through our Website. Any transmission is at your own risk.

How long we store your data.

We only keep your personal information for as long as it’s necessary for our original legitimate purpose for collecting it and for as long as we have your permission to keep it (unless we have an overriding purpose for keeping it). If you have an Account, the personal information associated with your Account is automatically deleted when you delete your Account. If you would like us to delete your data in full, please contact us using the contact details below. However, please note that we may still have a legitimate purpose to keep certain data, even after you’ve requested deletion or deleted your Account (for example, keeping purchase information as necessary for accounting or tax purposes).

Disclosure to third parties.

We disclose data to third parties such as Squarespace in hosting our Website, Stripe in processing payments, and shipping providers in shipping Orders. The only other circumstances under which we would share your personal data are: if the third party is a member of our group (which means any subsidiaries or ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006); in the event that we sell or buy any business or assets (in which case we may disclose your personal data to the prospective seller or buyer of such business or assets); if we or substantially all of our assets are acquired by a third party (in which case personal data will be one of the transferred assets and the purchaser will be permitted to use the data for the purposes for which it was originally collected by us); or if we’re under a duty to disclose or share your personal data in order to comply with any legal obligation, enforce or apply our Terms or other agreements, or to protect the rights, property, or safety of our customers, us or others (including exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction).

International transfers.

Because we send and receive personal information to and from third parties that are based outside the UK, the data we collect from you is processed at destinations outside the UK. By submitting your personal data, you agree to this processing. We will take all steps reasonably necessary to ensure that your data is treated as securely as it would be within the UK.  You can obtain more details of the protection given to your personal data when it is processed outside the UK by contacting us using the contact details below.

Cookies.

Cookies are small pieces of data that websites store on a device. Cookies can improve your browsing experience on our Website because they help our Website remember your preferences and understand how you use different features.
Types of cookies we use. The types of cookies we use are controlled by our website host, Squarespace. Some of the cookies we use are necessary cookies because they allow you to navigate and use key features on our Website. Others, while not necessary to your browsing experience, are extremely helpful to us in understanding how visitors interact with our Website. Before any non-essential cookies are placed on your device, you will be shown a message notifying you about our use of cookies. Non-essential cookies are only placed on your device when you acknowledge this message. For the full list of cookies Squarespace enables, please click here.

Disabling cookies.

By default, most internet browsers accept cookies, but you can choose to enable or disable some or all cookies via the settings on your internet browser. Most internet browsers also enable you to choose whether you wish to disable all cookies or only third party cookies. If you use your browser settings to block all cookies (including essential cookies), you may not be able to access all or parts of our Website. For further details, please consult the help menu in your internet browser.

Lawful bases for processing data.

We will ensure that your personal data is processed lawfully, fairly, and transparently and that it will only be processed if at least one of the lawful bases for processing under the GDPR applies. Each of the following is a lawful basis for processing your data: you have given your clear consent to us processing your personal data for a specific purpose; processing is necessary for the performance of a contract we’ve entered into with you (or for us to take steps at your request prior to entering into a contract with you); processing is necessary for our compliance with the law; processing is necessary to protect someone’s life; processing is necessary for us to perform a task in the public interest; processing is necessary for our legitimate interests or the legitimate interests of a third party (except where there is an overriding reason to protect your personal data).

Your rights.

The following is a list of your rights under relevant data protection and privacy laws. You have the right to: object to or withdraw your consent to our processing your personal data (although we may still be entitled to process your personal data if we have another legitimate reason for doing so, such as to comply with a legal obligation); be informed of what data we hold and the purposes for processing the data; be forgotten and, in some circumstances, have your data erased (although this is not an absolute right and there may be circumstances where you ask us to erase your personal data but we are legally entitled to retain it); correct or supplement any information we hold about you that is incorrect or incomplete; restrict processing of the information we hold about you (for example, so that inaccuracies may be corrected—but again, there may be circumstances where you ask us to restrict processing of your personal data but we are legally entitled to refuse that request); obtain your data in a portable manner and reuse the information we hold about you; challenge any data we use for the purposes of automated decision-making and profiling (in certain circumstances—as above, there may be circumstances where you ask us to restrict our processing of your personal data but we are legally entitled to refuse that request); complain to a supervisory authority if you think any of your rights have been infringed by us; ask us not to process your personal data for marketing purposes; opt out of social media cookies and third-party cookies; exercise any of your rights under the GDPR without paying unnecessary fees (unless your request is clearly unfounded, repetitive or excessive). How to exercise your rights. You can make a request regarding any  of the above rights by contacting us using the contact details below.

Changes to this Privacy Policy.

Any changes we may make to this Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates. You will be deemed to have accepted the terms of the updated Privacy Policy on your first use of the Website following the alterations.

Contact.

Questions, comments and requests regarding this Privacy Policy are welcomed and should be sent to us by email at hola.shapes@gmail.com.