Privacy Statement

Laura Grant of 20 Kill Abbey, Deansgrange, Blackrock, Co. Dublin is trading as Lovely Things which is a business name registered in Ireland under Irish law with Business Registration Number 668631 (also referred to us ‘we’, ‘us’ or ‘our business’ on this website). We are fully compliant with the General Data Protection Regulation (“GDPR”) and all applicable legislation made in the Republic of Ireland thereunder.

Lovely Things conducts its business via www.lovelythings.ie (the ‘Site’) hosted by Shopify which operates a multi-vendor platform and publishing medium which enables parties to sell their goods and services and purchase goods and services.

The purpose of this statement is to explain how Lovely Things uses the personal data we collect from you. This statement sets out how Lovely Things uses and processes the personal information which you give to us. We respect your privacy and are committed to protecting your personal information.

We will collect data from you via our website and any communication which you make to us. We will operate as a Data Controller (as defined in GDPR) in respect of the personal data supplied by you. We will collect personal data about you, via orders made by you through our website, contact forms, testimonials, reviews, and any other interaction which you may have with our website. We also collect personal data from records of our correspondence, telephone calls, emails, details of your visit to our website, publicly available information including social media and through use of browser cookies.

We will collect data primarily by from the information you give us. On occasion we may also receive information about you indirectly via publicly available information including on social networking sites.

What Data do we collect?

We collect personal data comprising personally identifiable information from our vendors, customers, subscribers and other visitors to our website including the following;

  • Name
  • Address
  • Email address
  • Telephone number
  • Cookies
  • Social Media Profile details
  • Feedback or reviews

We ask that you ensure that all data which you furnish to us is kept accurate and up-to-date at any stage.

It will be necessary for us to share your personal data with third parties in certain circumstances to enable us to comply with our legal and statutory obligations and to perform the contract between us. We may also need to share your personal data with sub-contractors, or third parties required to give effect to the contract to purchase any goods or services.

We may share your data with third party service providers that we engage to send emails or postal mail on our behalf in relation to marketing communications including Sensorpro. We may also utilise certain independent feedback providers via our site and your personal data may be shared in that context.

For the avoidance of doubt, we do not process any financial information. When you purchase on the Site your payment is made via Shopify who do not share your financial data with us.

We may also share your data with our professional advisors where necessary including lawyers, bankers, auditors and insurers who provide professional services necessary for the operation of the business of the business.

In the event that you post a review on our website or social media platforms, any such information will be available publicly and accordingly any personally identifiable information will be shared with any third parties who view the review or any reply thereto. We will store and process this information however will not otherwise share that information save by way of the public forum on which you will post save as expressly agreed between us.

We do not collect sensitive personal data as defined in the GDPR. We do not collect financial information. When you purchase on the Site your payment is made via Shopify who do not share your financial data with us.

How will we use your Personal Data?

We collect your data so that we can;

  • To process and issue communications to you and to answer any enquiries from you.
  • To enable you and us to manage your account and any order for the provision of goods and services.
  • To enable us to provide our goods and services and to provide you with suggestions and advice on products, services and how to obtain the most from using our website.
  • To engage with you and respond to any requests which you may have.
  • To improve our level of service
  • For general marketing purposes which are in the legitimate interest of our business or based on your consent.
  • To contact you with special offers on other products and services which may be of interest to you.
  • Record keeping for the proper and necessary administration of our business.
  • Protecting and asserting the legal rights of any party including in particular our customers and vendors.

Basis of processing Data

We will process data on your behalf and will ensure that your data is processed in a lawful, clear and transparent manner at all times for a specific and legitimate purpose in compliance with GDPR.

We rely on the following legal basis for the processing of data.

  • To process and issue communications to you and to answer any enquiries from you.
  • Processing necessary for the performance of a contract
  • Processing necessary for the compliance with a legal or statutory obligation.
  • With your consent for one or more specific and legitimate purposes.
  • Processing necessary for the purposes of the legitimate interest pursued by the Controller or a third party except where such interest is overridden by your fundamental rights and freedoms.

Where we rely on the legitimate interest of our business for the processing of the personal data, we will take all reasonable measure to ensure that your interests are protected. The legitimate interests of our business in this context include direct marketing, prevention of fraud and information system security.

We would like to send marketing information to you about the products and services which we think will be of relevance to you. We will rely on our legitimate interests as a business to process your data for direct marketing purposes. We consider it to be a legitimate interest of our business in promoting its services, products and in the administration operation of our business. Any such processing will not be carried out where such interest is overridden by your rights and freedoms. We will always give you an option to unsubscribe from our marketing list in our emails to us or please contact dataprotection@lovelythings.ie if you wish to unsubscribe from our marketing list. You have a right to object to our processing your data for direct marketing purposes at any stage.

We will only rely on consent as the basis for processing in limited circumstances. In particular, we will rely on your consent for the processing of cookies and for your subscription to our newsletter. Where consent is utilised as the basis for processing, such consent can be withdrawn at any time. In that event, we will cease processing your data, unless there is a separate basis upon which we can rely to process your data, such as same being necessary for the performance of the contract between us or necessary for us to comply with our legal and statutory obligations.

How do we store your data?

We will ensure the appropriate, technical and organisational measures are put in place commensurate with the level of security required for the data held on your behalf. We will use all appropriate and reasonable measure to ensure integrity and confidentiality of the personal as maintained at all times.

Sharing of Personal Data

It will be necessary for us to share your personal data with third parties in certain circumstances to enable us to comply with our legal and statutory obligations and to perform the contract between us. We may also need to share your personal data with sub-contractors, or third parties required to give effect to the contract to purchase any goods or services.

We may share your data with third party service providers that we engage to send emails or postal mail on our behalf in relation to marketing communications including Sensorpro. We may also utilise certain independent feedback providers via our site and your personal data may be shared in that context.

For the avoidance of doubt, we do not process any financial information. When you purchase on the Site your payment is made via Shopify who do not share your financial data with us.

We may also share your data with our professional advisors where necessary including lawyers, bankers, auditors and insurers who provide professional services necessary for the operation of the business of the business.

In the event that you post a review on our website or social media platforms, any such information will be available publicly and accordingly any personally identifiable information will be shared with any third parties who view the review or any reply thereto. We will store and process this information however will not otherwise share that information save by way of the public forum on which you will post save as expressly agreed between us.

Transfers of data outside of the European Economic Area (EEA)

We do not propose to transfer personal data to any parties not resident within the EEA save in the event that it is necessary for completion of the contract between us.

Data Retention

We will keep your data for no longer than necessary for the purpose for which the data was provided taking into account the basis for processing the data. In particular, we may retain certain administrative records in compliance with our own legal obligations regarding the performance of the contract between us for a period of up to 7 years following completion of the order. In the event that there is any notice of a potential claim against us, we shall be entitled to retain any such personal data until the claim is resolved.

Your Rights

You have the following rights under the GDPR, in certain circumstances and subject to certain exemptions, in relation to your personal data:

  • Right to access data – you have the right to request a copy of the personal data that we hold about you together with other information about our processing of that personal data.
  • Right to rectification – you have the right to request that any inaccurate data that is held about you is corrected or if we have incomplete information you may request that we request that we update the information such that it is complete.
  • Right to erasure – you have the right to request us to delete personal data that we hold about you. This is sometimes referred to as a right to be forgotten.
  • Right to restrict processing or object to processing – you have the right to request that we no longer process your personal data for particular purposes or object to our processing of your personal data for a particular purpose
  • Right to data portability – you have the right to request us to provide you or a third party with a copy of your personal data in a structured commonly used readable format.
  • Right to object to processing – you have the right to object to processing of data under certain conditions.

If we were processing personal data on the basis of your consent, you may withdraw consent at any time. This does not affect the lawfulness of processing which should take place prior to its withdrawal.

You can object to the processing of your personal data for direct marketing purposes at any stage. If you wish to exercise any of the rights set out above, please contact Laura Grant at dataprotection@lovelythings.ie

If you are unhappy with how we process your personal data we ask that you contact us so that we can rectify the situation. You may lodge a complaint with the Supervisory Authority. The Irish Supervisory Authority is the Data Protection Commission www.dataprotection.ie

Requirement to Process Personal Data

If you do not provide us with the appropriate data, we will not be able to sell our products or services to you.

Automated decision-making and profiling

We do not use personal data for the purposes of automated decision-making or profiling.

Changes to this Privacy Notice

Our privacy notice may change from time to time. Please check back frequently to see if there are updates or changes to our Privacy Statement which have been implemented. If you do not agree to these changes or any of the terms of this statement, please do not continue to use this Site to submit personal information.

Date: 13 March 2021