Privacy Policy

1. Information We Collect

Information You Provide to Us

• Account Information: Name, email address, postal address, phone number when you create an account
• Order Information: Billing and shipping addresses, payment information, order history
• Communication: Messages you send us through contact forms, emails, or social media
• Customization Data: Text, design preferences for personalized products
• Marketing Preferences: Email subscription choices and communication preferences

Information We Collect Automatically

• Website Usage: Pages visited, time spent, links clicked
• Device Information: Browser type, operating system, IP address
• Cookies: Essential and analytical cookies to improve your experience
• Shopping Behavior: Products viewed, cart contents, purchase patterns

2. How We Use Your Information

We use your information to provide our services and enhance your experience:

• Order Processing: Fulfill orders, process payments, arrange delivery
• Customer Service: Respond to inquiries, provide support, handle returns
• Product Customization: Create personalized products according to your specifications
• Marketing Communications: Send promotional emails (with your consent)
• Website Improvement: Analyze usage patterns to enhance user experience
• Legal Compliance: Meet regulatory requirements and prevent fraud

3. Legal Basis for Processing

Under GDPR, we process your personal data based on:

• Contract Performance: Processing orders and providing customer service
• Legitimate Interest: Website analytics, fraud prevention, business operations
• Consent: Marketing communications and non-essential cookies
• Legal Obligation: Tax records, accounting requirements

4. Information Sharing

We only share your information when necessary:

• Service Providers: Payment processors, shipping companies, email services
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In case of merger, acquisition, or sale of assets

We never sell your personal information to third parties for their marketing purposes.

5. International Transfers

Some of our service providers may be located outside the UK/EU. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for countries with sufficient data protection
• Other appropriate safeguards as required by law

6. Your Rights

Under UK Data Protection laws and GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit how we process your data
• Object: Opt out of processing based on legitimate interests
• Withdraw Consent: Revoke consent for marketing communications

To exercise these rights, contact us at privacy@glitzandtreats.com

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of sensitive data during transmission and storage
• Regular security assessments and updates
• Access controls limiting who can view your information
• Staff training on data protection practices

8. Data Retention

We retain your information for as long as necessary to:

• Provide our services and fulfill orders
• Comply with legal obligations (e.g., tax records for 7 years)
• Resolve disputes and enforce agreements

Marketing data is retained until you unsubscribe or request deletion.

9. Cookies

We use cookies to enhance your browsing experience:

• Essential Cookies: Necessary for website functionality
• Analytics Cookies: Help us understand how you use our site
• Marketing Cookies: Used for targeted advertising (with your consent)

You can manage cookie preferences through your browser settings.

10. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.