Privacy policy
Privacy Policy
Rosewood & Co respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and share your personal information when you visit rosewoodandco.com, make a purchase, contact us or otherwise interact with our services.
This policy is intended to explain our practices in accordance with applicable United Kingdom data protection and privacy laws.
Who We Are
For the purposes of applicable data protection law, Rosewood & Co is responsible for the personal information described in this Privacy Policy where we determine how and why that information is used.
Rosewood & Co
60 Kendal Grn
Kendal LA9 5PT
United Kingdom
Email: info@rosewoodandco.com
Personal Information We Collect
The personal information we collect depends on how you interact with our website and services. It may include:
- Contact information: such as your name, email address, telephone number, billing address and delivery address.
- Order information: including products purchased, order value, order history, returns and refund information.
- Payment information: information required to process your payment. Payment card details are normally processed directly by our authorised payment providers and are not stored by Rosewood & Co in full.
- Account information: such as login details and account preferences if you create a customer account.
- Communications: information you provide when contacting us regarding an order, product, return or other enquiry.
- Technical information: such as IP address, browser type, device information, operating system and information about how you interact with our website.
- Marketing preferences: including whether you have agreed to receive promotional communications or chosen to unsubscribe from them.
- Cookie and usage information: information collected through cookies and similar technologies, subject to your choices where consent is required.
How We Collect Personal Information
We may collect personal information:
- Directly from you when you place an order, create an account, contact us, submit a form or subscribe to marketing communications
- Automatically when you browse or interact with our website
- From service providers that assist us in operating our store and fulfilling orders
- From payment providers, delivery providers and other parties involved in completing a transaction
- From advertising, analytics or technology partners where permitted by applicable law and your privacy choices
How We Use Your Personal Information
We may use your personal information to:
- Process and fulfil your orders
- Process payments, refunds and returns
- Deliver products to you
- Provide order confirmations and delivery updates
- Respond to questions and customer service requests
- Manage customer accounts
- Prevent fraud, misuse and security threats
- Maintain and improve our website and services
- Understand how customers use our website
- Meet our accounting, tax, legal and regulatory obligations
- Send marketing communications where permitted by law
- Protect our rights, customers and business
Lawful Bases for Processing
Depending on the circumstances, we may process your personal information on one or more of the following lawful bases:
- Contract: where processing is necessary to provide products or services you have requested, including processing and delivering your order.
- Legal obligation: where we need to process information to comply with legal or regulatory requirements.
- Legitimate interests: where processing is reasonably necessary for our business interests or those of another party, provided those interests do not override your rights and freedoms. This may include fraud prevention, website security, customer service and improving our operations.
- Consent: where you have given us permission to process your information for a particular purpose. Where we rely on consent, you may withdraw it at any time.
Order and Payment Processing
When you place an order, we use the information you provide to process your purchase, receive payment, arrange delivery, communicate with you about your order and provide customer support.
Payments are processed through authorised third-party payment providers. These providers may collect and process payment information in accordance with their own privacy and security practices.
Rosewood & Co does not intentionally store complete payment card numbers or card security codes on its own systems.
How We Share Personal Information
We may share personal information with trusted third parties where necessary to operate our business and provide our services. These may include:
- Our ecommerce platform and website service providers
- Payment processors and payment service providers
- Shipping, courier and fulfilment providers
- IT, hosting, security and technical service providers
- Analytics and advertising providers, where permitted
- Email and customer communication providers
- Professional advisers such as accountants, legal advisers and insurers
- Government authorities, regulators or law enforcement agencies where required by law
We only share personal information where there is an appropriate reason to do so and seek to limit the information disclosed to what is reasonably necessary for the relevant purpose.
We do not sell your personal information in the ordinary meaning of selling customer data for money.
Shopify
Our online store is hosted using Shopify. Shopify provides the ecommerce technology that enables us to operate our website, manage orders and provide our online store services.
As part of providing these services, Shopify may process certain personal information relating to visitors and customers. Shopify processes information in accordance with its applicable privacy and data protection practices.
Cookies and Similar Technologies
Our website may use cookies and similar technologies to operate essential website functions, remember preferences, understand website usage, improve performance and, where applicable, support advertising and marketing activities.
Some cookies are necessary for the website to function, such as cookies used for shopping baskets, checkout functionality, security and other services you specifically request.
Where required by law, non-essential cookies and similar technologies will only be used after you have provided the appropriate consent.
You may be able to manage your cookie preferences through the cookie settings available on our website or through your browser settings.
Marketing Communications
We may send you promotional emails or other electronic marketing communications where you have consented to receive them or where another lawful marketing exception applies.
Where permitted by applicable law, we may contact existing customers about products or services similar to those they previously purchased or expressed an interest in, provided the applicable requirements are met and an opportunity to opt out is provided.
You may unsubscribe from marketing communications at any time by using the unsubscribe option included in the communication or by contacting us at info@rosewoodandco.com.
Unsubscribing from marketing messages will not prevent us from sending service-related communications that are necessary for your orders or account.
International Transfers
Some of the service providers we use may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is made in accordance with applicable data protection law. Depending on the destination and circumstances, these measures may include an applicable adequacy decision or appropriate contractual and organisational safeguards.
How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing our services and meeting legal, accounting, tax, fraud prevention and reporting requirements.
The period for which we retain information may depend on factors including:
- The type of information involved
- How long we need it to provide our services
- Whether we have an ongoing relationship with you
- Legal or regulatory retention requirements
- The need to establish, exercise or defend legal claims
- Fraud prevention and security considerations
When personal information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.
How We Protect Your Information
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, misuse, loss or destruction.
However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.
Your Data Protection Rights
Depending on the circumstances and applicable law, you may have rights in relation to your personal information, including the right to:
- Access personal information we hold about you
- Correct inaccurate or incomplete personal information
- Request deletion of your personal information in certain circumstances
- Request restriction of certain processing activities
- Object to certain processing, including direct marketing
- Request data portability in certain circumstances
- Withdraw consent where we rely on your consent
- Raise concerns about how your personal information is being processed
These rights are not absolute and may be subject to exemptions or limitations under applicable law.
To exercise a privacy right, please contact us at info@rosewoodandco.com. We may need to request information from you to confirm your identity before completing certain requests.
Your Right to Object
You have the right to object to our use of your personal information in certain circumstances, including where we process information for direct marketing purposes.
If you object to the use of your information for direct marketing, we will stop using your information for that purpose.
Complaints
If you have a concern about how we collect or use your personal information, please contact us first so that we can try to resolve the matter.
You also have the right to raise a complaint with the Information Commissioner's Office, the United Kingdom's independent data protection regulator.
Children's Privacy
Our website and products are intended for a general retail audience and are not specifically directed at children.
We do not knowingly seek to collect personal information from children where parental or guardian involvement would be required by applicable law. If you believe a child has provided personal information to us inappropriately, please contact us so that we can review the matter.
Third-Party Links
Our website may contain links to websites or services operated by third parties. We are not responsible for the privacy practices, content or security of third-party websites.
We recommend reviewing the privacy policy of any third-party website before providing personal information to it.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, business practices, technology or legal obligations.
When we make changes, we may update the "Last updated" date shown at the beginning of this policy. We encourage you to review this page periodically.
Contact Us
If you have questions about this Privacy Policy, how we handle personal information or your data protection rights, please contact us:
Rosewood & Co
60 Kendal Grn
Kendal LA9 5PT
United Kingdom
Email: info@rosewoodandco.com
Customer Service Hours: Monday to Friday, 9:00 to 17:00 UK time
Response time: Within 12 working hours