Privacy policy
Last updated: May 5, 2025
This Privacy Policy describes how Grace & Whimsy (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from https://graceandwhimsy.com (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.
Please read this Privacy Policy carefully.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law.
How We Collect and Use Your Personal Information
To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.
In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.
What Personal Information We Collect
The types of personal information we obtain about you depends on how you interact with our Site and use our Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes or can be associated with you. The following sections describe the categories and specific types of personal information we collect.
Information We Collect Directly from You
Information that you directly submit to us through our Services may include:
- Contact details including your name, address, phone number, and email.
- Order information including your name, billing address, shipping address, payment confirmation, email address, and phone number.
- Account information including your username, password, security questions and other information used for account security purposes.
- Customer support information including the information you choose to include in communications with us, for example, when sending a message through the Services.
Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features.
Information We Collect about Your Usage
We may also automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address and other information regarding your interaction with the Services.
Information We Obtain from Third Parties
We may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:
- Companies who support our Site and Services, such as Shopify.
- Our payment processors, who collect payment information (including American Express, Apple Pay, Google Pay, Maestro, Mastercard, Shop Pay, and Visa) to process your payment in order to fulfill your orders and provide products or services.
- When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we, or third parties we work with, may automatically collect certain information using tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.
Any information we obtain from third parties will be treated in accordance with this Privacy Policy. Also see the section below, Third Party Websites and Links.
How We Use Your Personal Information
Providing Products and Services. We use your personal information to provide you with the Services in order to perform our contract with you, including processing payments, fulfilling clothing orders, and arranging shipping to UK customers.
Marketing and Advertising. We may use your personal information to send you marketing communications about our clothing collections and promotions where you have opted in or where we have a legitimate interest to do so. You may opt out at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.
Security and Fraud Prevention. We use personal information to detect, investigate, and prevent illegal or fraudulent activity, chargebacks, and other misuse of our Services.
Communicating with You and Service Improvement. We use your information to respond to your enquiries, provide customer support, send order confirmations and shipping updates, and to improve your overall shopping experience.
Legal Compliance. We may use your personal information to comply with applicable UK laws and regulations, including those relating to consumer rights, distance selling, and data protection under the UK GDPR and the Data Protection Act 2018.
Legal Basis for Processing (UK GDPR)
If you are located in the United Kingdom, we process your personal information on the following legal bases:
- Contract performance: Processing necessary to fulfil your order and deliver our Services.
- Legitimate interests: Processing for fraud prevention, security, and improving our Services, where these interests are not overridden by your rights.
- Legal obligation: Processing required to comply with applicable UK law.
- Consent: Where you have given us explicit consent, for example to receive marketing communications.
Cookies
We use Cookies to support and improve our Services, including to remember your preferences, analyse site traffic, and personalise your experience. You may control cookie settings through your browser settings at any time. For more details, please visit: https://www.shopify.com/legal/cookies.
How We Disclose Personal Information
We may disclose personal information to the following categories of recipients where necessary to operate our business and provide the Services:
- Fulfilment and logistics partners: To process and ship your clothing orders from our warehouse in Zhejiang, China to your UK delivery address.
- Shipping carriers: Including YunExpress, 4PX, and Royal Mail, to deliver your orders.
- Payment processors: To securely process your payments.
- Technology and platform providers: Such as Shopify, who support the operation of our Site.
- Professional advisers: Such as lawyers and accountants, where required.
- Regulatory authorities: Where required by law.
We do not sell your personal information to third parties. We do not use or disclose sensitive personal information without your consent or for the purposes of inferring characteristics about you.
Third Party Websites and Links
Our Site may include links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.
Children's Data
Our Services are not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete such information.
Security and Retention of Your Information
We apply appropriate technical and organisational measures to safeguard your personal information against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure and we cannot guarantee absolute security.
We retain your personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. For example, we may retain order information for up to 7 years for accounting and legal compliance purposes.
Your Rights
Under UK data protection law, you have the following rights in relation to your personal information:
- Right of access: You may request a copy of the personal information we hold about you.
- Right to rectification: You may request that we correct inaccurate or incomplete information.
- Right to erasure: You may request that we delete your personal information in certain circumstances.
- Right to restriction: You may request that we restrict the processing of your information in certain circumstances.
- Right to data portability: You may request that we provide your information in a structured, commonly used, machine-readable format.
- Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us using the details in the Contact section below. We will respond to your request within one month, as required by UK GDPR.
Complaints
If you are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the UK's supervisory authority:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Helpline: 0303 123 1113
We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO.
International Transfers
As our warehouse and certain service providers are located outside the United Kingdom (including in China), your personal information may be transferred to or stored in countries outside the UK. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved under UK data protection law, to protect your information in accordance with this Privacy Policy.
Contact
Business Information:
- Website Name: Grace & Whimsy
- Operated By: LOOMISS LTD
- Company Registration Number: 17176290
- D-U-N-S Number: 234775050
- Registered Office (Administrative Only): 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom
Contact Details:
- E-mail: info@graceandwhimsy.com
- Phone: +44 20 37691239
Opening hours: Monday to Friday: 09:00 – 18:00 (GMT). Customer service will respond within 24 hours on business days.