STORE POLICY – PRIVACY AND COOKIES
Ilona Tambor (“we”, “us”, “our”) operates the website ilonatambor.com (the “Site”). This policy explains how we collect, use, store, and share personal data when you visit the Site, place an order, or otherwise interact with us, in accordance with the UK GDPR, EU GDPR, and applicable data protection laws.
PERSONAL INFORMATION WE COLLECT
When you visit the Site or make a purchase, we collect certain information about you.
Information you provide directly may include your name, billing and delivery address, email address, telephone number, payment information (processed securely by third-party payment providers), order history, and correspondence with us.
Information collected automatically when you browse the Site may include your IP address, browser type, device information, pages viewed, interactions with the Site, and referring websites or search terms. This information is collected using cookies, pixels, log files, and similar technologies.
HOW WE USE YOUR PERSONAL INFORMATION
We use personal information to process and fulfil orders, arrange shipping and delivery, communicate with you about your order, provide customer support, prevent fraud, ensure site security, analyse and improve the Site, and send marketing communications where consent has been given.
LEGAL BASIS FOR PROCESSING
We process personal data on the following legal grounds.
Performance of a contract, to process orders, take payment, and deliver products.
Legitimate interests, to improve our services, prevent fraud, and analyse website performance.
Consent, for marketing communications and non-essential cookies.
Legal obligation, where required for tax, accounting, or regulatory purposes.
SHARING YOUR PERSONAL INFORMATION
We only share personal data where necessary and in line with this policy.
Shipping and courier services
To fulfil and deliver your order, we share limited personal information with courier and logistics providers. This information may include your name, delivery address, email address, and telephone number.
This information is shared solely for the purpose of order fulfilment, delivery notifications, customs clearance where applicable, and handling delivery-related issues.
Courier companies process this data in accordance with their own privacy policies and applicable data protection laws. They are not authorised to use your personal data for marketing or any other unrelated purposes.
The legal basis for this processing is performance of a contract, as delivery cannot be completed without sharing this information.
Our delivery partners may include Royal Mail, UPS, DHL, FedEx, or other regional and international carriers, depending on the destination of your order.
Service providers
We may also share personal data with trusted third-party service providers who help us operate our business, such as website hosting providers, e-commerce platforms, payment processors, analytics providers, and marketing service providers. These providers only receive the information necessary to perform their services.
INTERNATIONAL DATA TRANSFERS
Some service providers may be located outside the United Kingdom or European Economic Area. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or other lawful transfer mechanisms.
DATA RETENTION
We retain personal information only for as long as necessary to fulfil orders, provide services, comply with legal and accounting obligations, resolve disputes, and enforce our agreements. When personal data is no longer required, it is securely deleted or anonymised.
COOKIES AND TRACKING TECHNOLOGIES
Cookies are small text files stored on your device when you visit a website. We also use similar technologies such as pixels and web beacons.
We use the following categories of cookies.
Strictly necessary cookies, which are required for the Site to function properly, including shopping cart and checkout functionality.
Functional cookies, which enable enhanced functionality and personalisation.
Performance and analytics cookies, which help us understand how visitors use the Site and improve performance.
Marketing and advertising cookies, which are used to deliver relevant advertising and measure the effectiveness of marketing campaigns.
Except for strictly necessary cookies, cookies are not placed on your device unless you have given explicit consent through our cookie banner.
You may accept all cookies, reject non-essential cookies, or choose individual cookie categories. You may withdraw or change your consent at any time through the cookie settings on the Site or through your browser settings.
MARKETING COMMUNICATIONS
If you subscribe to marketing communications, we will only send you emails where you have given consent. You can unsubscribe at any time by using the unsubscribe link in our emails or by contacting us directly.
YOUR RIGHTS
If you are located in the United Kingdom or European Union, you have the right to access your personal data, correct inaccurate or incomplete data, request deletion of your data, restrict processing, object to certain types of processing, request data portability, withdraw consent where processing is based on consent, and lodge a complaint with your local data protection authority.
To exercise your rights, please contact us using the details below.
DATA SECURITY
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.
CHANGES TO THIS POLICY
We may update this policy from time to time to reflect changes in our practices or legal requirements.
CONTACT DETAILS
If you have any questions about this policy or how personal data is handled, please contact us.