Privacy policy

Ella's Whimsical Home is the data controller for the personal information described in this Privacy Policy.

If you have any questions about how we use your personal information, you can contact us at: hello@ellaswhimsicalhome.co.uk.

We only collect information that we need to operate Ella's and provide the services you choose to use.

Depending on how you interact with us, this may include:

When you place an order

We may collect information such as:

• your name;
• email address;
• delivery and billing details;
• order details and purchase history;
• payment and transaction information;
• information needed to provide delivery and customer support.

Payment information is processed through our payment providers and is not stored directly by the Ella's website.

When you create an account

If you create an Ella's account, we may collect:

• your name;
• email address;
• account authentication information;
• information relating to your account and sessions.

You may create an account using an email address and password or, where available, through Google sign-in.

When you join our newsletter

If you subscribe to our newsletter, we collect your:

• name, where provided;
• email address;
• subscription preferences.

We use this information to send you the emails you have chosen to receive.

When you browse our website

We may receive limited technical and session information needed for the website to function securely and correctly.

This can include information associated with your browser, device, session and website activity.

At present, Ella's does not use Google Analytics, Meta Pixel, Hotjar, Microsoft Clarity or similar analytics, advertising or behavioural tracking tools. We also do not currently use third-party advertising cookies or tracking technologies.

We use personal information for the following purposes:

To process and fulfil your orders

We use your information to:

• process your purchase;
• arrange delivery;
• provide order confirmations and updates;
• process returns, refunds and replacements;
• respond to questions about your order.

To provide your Ella's account

If you choose to create an account, we use your information to:

• authenticate your account;
• keep you signed in;
• maintain your account;
• provide account-related features.

To send our newsletter

If you subscribe to our newsletter, we use your email address to send the communications you have requested. You can unsubscribe at any time using the unsubscribe option included in our emails or by contacting us.

To communicate with you

We may use your contact information to respond to enquiries, provide customer support and communicate with you about your orders or account.

To keep the website secure

We process certain technical and session information to help maintain the security, reliability and proper functioning of our website and services.

To meet our legal obligations

We may process and retain information where this is necessary to comply with legal, accounting, tax or regulatory requirements.

Where applicable data protection law applies, we rely on the following lawful bases depending on the circumstances:

Contract

We use information where it is necessary to provide something you have requested from us, such as processing an order or providing an account.

Legal obligation

We may need to use or retain certain information to comply with legal, tax, accounting or regulatory requirements.

Consent

Where we ask you to subscribe to our newsletter or where consent is otherwise required by law, we rely on your consent. You can withdraw consent at any time.

Legitimate interests

We may use information where this is reasonably necessary for legitimate interests such as maintaining website security, preventing misuse and ensuring the reliability of our services, provided those interests do not override your rights and freedoms.

We do not sell your personal information. We share information only where it is necessary to operate Ella's, provide a service you have requested, comply with the law or protect the security of our website.

Our current service providers include:

Shopify

Shopify provides our ecommerce infrastructure and processes information relating to:

• our product catalogue;
• shopping baskets and checkout;
• orders;
• payments;
• customer information;
• newsletter subscriptions.

Lovable Cloud / Supabase

Our website uses Lovable Cloud and Supabase for account authentication, sessions and backend functionality. This may involve processing information such as your email address, authentication details and session information.

Google

We use Google services for:

• optional Google sign-in for customer accounts;
• loading Google Fonts used by the website.

If you choose to sign in using Google, Google will process information in accordance with its own privacy practices.

Lovable Email

Lovable Email is used to send certain emails from the Ella's domain, including the welcome email associated with newsletter subscription. Emails are sent using: notify.ellaswhimsicalhome.co.uk.

Cloudflare

Cloudflare provides DNS, network security and website protection services. Cloudflare may process technical information such as IP addresses and network information as part of providing these services.

We do not keep personal information for longer than is reasonably necessary for the purpose for which it was collected. The length of time depends on the type of information and why we need it.

For example:

• order and transaction information may need to be retained for accounting, tax and legal purposes;
• account information is retained while your account remains active, subject to applicable legal requirements;
• newsletter information is retained while you remain subscribed, unless we need to retain limited information to record your unsubscribe request;
• customer service communications may be retained for as long as reasonably necessary to deal with your enquiry and any related issue.

Where there is no longer a legitimate or legal reason to keep personal information, we will delete it or anonymise it where appropriate.

Where applicable data protection law applies, you may have rights including:

• the right to be informed about how your personal information is used;
• the right to request access to your personal information;
• the right to request correction of inaccurate or incomplete information;
• the right to request deletion of your information in certain circumstances;
• the right to request restriction of processing in certain circumstances;
• the right to object to certain processing;
• the right to data portability in certain circumstances;
• the right to withdraw consent where we rely on consent.

These rights are not absolute and may not apply in every circumstance.

If you would like to exercise a data protection right, please contact: hello@ellaswhimsicalhome.co.uk. We may need to verify your identity before responding to a request.

Ella's uses cookies and similar technologies that help the website function correctly, keep accounts secure and support features such as shopping baskets, checkout and authentication.

At present, we do not use third-party advertising cookies or behavioural tracking technologies. We also do not currently use analytics services such as Google Analytics, Meta Pixel, Hotjar or Microsoft Clarity.

Some of the services that support our website, such as Shopify, Supabase and Cloudflare, may use cookies or similar technologies as part of providing their services.

We aim to keep our use of cookies limited to what is necessary for the website and services you choose to use. Where consent is required for a cookie or similar technology, we will ask for it before using that technology. You can also manage cookies through your browser settings.

If you have a question about how we use your personal information, please get in touch.

hello@ellaswhimsicalhome.co.uk

Every email is read personally, and we aim to reply within 24 hours.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), if you believe your personal information has not been handled in accordance with applicable data protection law. You can find information about the ICO and how to make a complaint on its website: https://ico.org.uk/