Privacy Policy
Last Updated: April 2025
This Privacy Policy explains how Elarose Limited (“we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you interact with our website or services. We are committed to safeguarding your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Elarose Limited
Registered in the United Kingdom
Email: info@elarose.co.uk
We act as the Data Controller of your personal data, meaning we determine how and why your data is processed.
2. Data We Collect
We may collect and process the following types of personal data:
Name
Email address
Phone number
Billing and shipping address
Payment details (processed via third-party providers such as Stripe or PayPal)
Login credentials (if you create an account)
User preferences and survey responses
Technical data such as IP address, browser type, and usage data via cookies or similar tracking technologies
3. How We Collect Your Data
We collect your data when you:
Fill out forms (e.g. newsletter sign-ups, checkout pages)
Register for an account
Use our website (through cookies and tracking tools)
Contact us directly via email or customer service forms
4. How We Use Your Data
We use your data for the following purposes:
To process and deliver your orders
To provide customer service and respond to enquiries
To send you marketing communications (only if you opt in)
To personalise your experience
To analyse website usage and improve our services
5. Legal Bases for Processing
Under the UK GDPR, we rely on the following lawful bases for processing your personal data:
Performance of a contract – e.g. when you make a purchase
Consent – e.g. for receiving newsletters or non-essential cookies
Legal obligation – e.g. for maintaining transaction records
Legitimate interests – e.g. website security or improving our services (only where your rights do not override our interests)
6. Sharing Your Data
We may share your personal data with trusted third parties for the purposes outlined above, including:
Email marketing platforms (e.g. Mailchimp)
Payment processors (e.g. Stripe, PayPal)
Delivery and logistics providers
Analytics tools (e.g. Google Analytics)
All third-party service providers are required to comply with applicable data protection laws and only process your data as instructed by us.
7. Cookies and Tracking
Our website uses cookies and similar technologies to enhance your browsing experience and gather analytics. You will be given the option to accept or manage cookies when you visit our site.
For more information, please refer to our separate [Cookie Policy].
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes we collected it for:
Order-related data: kept securely in our database for up to 5 years to comply with tax, accounting, and warranty obligations
Marketing preferences: retained until you withdraw consent or unsubscribe
9. Data Security
We take appropriate technical and organisational measures to protect your data, including:
SSL encryption
Secure servers
Password protection and access controls
We limit access to your personal data to those employees, agents, and service providers who have a business need to know.
10. Your Rights
Under the UK GDPR, you have the following rights:
Right to access – request a copy of your personal data
Right to rectification – correct any inaccurate or incomplete data
Right to erasure – request deletion of your data in certain circumstances
Right to restrict processing – limit how your data is used
Right to data portability – request to move your data to another provider
Right to object – to processing for direct marketing or legitimate interests
Right to withdraw consent – where processing is based on consent
To exercise any of these rights, please contact us at info@elarose.co.uk.
11. International Transfers
Your personal data may be transferred and processed outside the UK (e.g. by third-party providers). When this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent legal mechanisms.
12. How to Complain
If you are unhappy with how we handle your data, you can contact us directly at info@elarose.co.uk.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
https://ico.org.uk/make-a-complaint
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any significant changes will be posted on our website. Please check back periodically to stay informed.