This policy covers the processing of all personal information by From The Heart website.
Information we may collect about you
We may collect and process the following information about you:
Information you give us. You may give us information by filling in forms on our site or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you register to use our site, search for a product, place an order on our site, enter a competition, promotion or survey, and when you report a problem with our site. The information you give us may include your
financial and credit card information
your marketing preferences
details of any transactions between you and us
The following information may be collected, but will be anonymised and will not contain any information from which you can be identified:
Technical information, including the Internet protocol (IP) address of your computer, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and
Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.
Use of your personal information
We use your personal information in the following ways:
To comply with legal obligations
We will use your personal information to comply with our legal obligations:
to keep a record relating the exercise of any of your rights relating to our processing of your personal information
to handle and resolve any complaints we receive relating to the services and products we provide.
to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
We will email you to process your order and afterwards to introduce you to the benefits of our loyalty programme. Only Diva's Closet will use your email address. We will never pass on your email address or personal information to a third party for marketing purposes. We will provide your email address to delivery services for the sole purpose of sending you tracking notifications for your delivery.
Where you have provided consent
We may use the information you have provided to us to email you about our products and offers.
Where necessary for us to carry out our contracts
We will use your personal information where this is necessary for us to carry out our contract with you
to process, fulfil and complete your orders, purchases and other transactions entered into with us and deliver your order and deliver your order.
to process your payment card or bank details when taking payment for your orders or when providing a refund.
to run our competitions and promotions that you enter from time to time and to distribute prizes.
to screen orders for possible fraud
Disclosure of your information
We may disclose your information to our third party service providers and subcontractors for the purposes of providing services to us or directly to you on our behalf, including the operation and maintenance of our site. Our Suppliers can be categorised as follows
Payment processors and financial services providers
Delivery and courier service providers
Service providers for email marketing campaigns
When we use Suppliers, we only disclose to them any personal information that is necessary for them to provide their services.
We may also disclose your information to other third parties as required such as
To comply with any legal or regulatory obligation or request, including by the police, courts, tribunals or regulators.
How we use your personal information
Personal information you provide is used by us only for the following purposes:
To improve your shopping experience at our website
To process your order
With your permission, to notify you of products or special offers that may be of interest to you
To screen orders for possible fraud
Transfer of information outside of the E.U
Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.
If you are located in EU countries and choose to provide information to us, please note that we transfer the data, including Personal Data, to Canada and process it there.
Links to other websites
Personal information retention periods
We will not hold your personal information in an identifiable format for any longer than is necessary for the purposes for which we collected it. For certain purposes we retain your personal information indefinitely (e.g. for marketing messages) whilst for others we retain it for a period of 7 years after the information is no longer required for business reasons so that we can deal with any legal proceedings that could arise.
You request the information to be deleted (where applicable) and we do not need to hold it for any lawful reason.
We issue or defend a legal claim or other proceedings during the period we retain your personal information, in which case we will retain your personal information until those proceedings have concluded and no further appeals are possible and the matter is closed.
Where we store your information
All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the Internet may not be completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to prevent unauthorised access.
Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
No personally identifiable information is stored in these cookies.
Changes to this policy
The Data Protection Act (the "Act") has various provisions which ensure that any person who has access to your personal information must comply with strict rules.
The Act provides the following principles, which we follow at all times:
We will process your data fairly and lawfully.
We will obtain your data only for specified and lawful purposes, and shall not use it for any other purpose.
We will ensure that personal data held shall be adequate, relevant and not excessive in relation to the purpose for which it is held.
We will ensure that personal data shall be accurate and, where necessary, kept up to date.
We will ensure that personal data shall not be kept for longer than is necessary for that purpose.
We will ensure that personal data shall be processed in accordance with your rights under the Act.
We will take appropriate technical and organisational measures to protect any personal data from any destruction, damage or loss.
We will not transfer your personal data outside the European Economic Area unless that country or territory ensures an adequate level of protection.
The Data Protection Act gives you the right to access and check information held about you and to update it or remove it. Should you wish we can provide you with all the information that we hold about you. To request this information please contact us via the information at the bottom of the page. We may ask you for more information to prove your identity.
We control and operate our site from the UK (regardless of where hosting servers are located). All matters relating to the site are governed by the laws of England and Wales, without reference to conflict or choice of law principles. You agree that jurisdiction and venue for any legal proceeding relating to the site shall be the courts of England and Wales. We do not warrant or imply that the Site or materials on it are appropriate for use outside of the EU. If you are located outside of the EU, you are solely responsible for compliance with any applicable local laws.
If for any reason any part of this policy is found to void or unenforceable, it will be deemed severed from the remainder of the policy, which will continue in full force and effect.
Alternatively you can use our "Contact Us" page.