Legal
Privacy policy
Template — review with a legal adviser before launch. Last updated: [date].
Who we are
Ember n Frost ("we", "us") operates embernfrost.com. We are the data controller for personal data collected through this site. [Registered business address — to be added]. [Company registration number — to be added].
Data we collect
- Contact details (name, email, phone, delivery address) when you order or contact us
- Order and payment information (payments are processed by our payment provider; we do not store full card details)
- Technical data such as IP address and browsing data via cookies
- Newsletter preferences
How we use it
To process and deliver orders (including sharing necessary details with our fulfilment partners), respond to enquiries, send marketing where you have consented, and meet legal obligations.
Lawful bases
Contract, legitimate interests, consent (marketing and optional cookies) and legal obligation, as applicable under UK GDPR and the EU GDPR.
Sharing
[List of processors: e.g. payment provider, fulfilment partners, email provider, hosting — to be completed.]
International transfers
[Details of any transfers outside the UK/EEA and safeguards — to be completed.]
Retention
[Retention periods — to be completed.]
Your rights
You may request access, correction, erasure, restriction, portability or object to processing, and withdraw consent at any time. You can complain to the Information Commissioner’s Office (ico.org.uk).
Contact
Email info@embernfrost.com.