Privacy Policy

Introduction

Welcome to de Savary London. We value your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, and protect your data when you interact with our websites, services, and related platforms, as well as your rights regarding this information.

de Savary London Limited (referred to as “we,” “our,” or “us”) is the data controller, which means we determine how and why your personal information is processed under applicable data protection laws.

This policy applies to our website, located at www.desavarylondon.com, as well as any related sites, social media profiles, and our Instagram shop (collectively referred to as the “Site”) and the services you can access through them.

Please take a moment to review this policy, which explains the types of personal information we may collect, how we use it, who we share it with, and the rights you have over it.

Our Site is intended for users aged 16 and older. We do not knowingly collect personal information from children under the age of 16. If you are under 16, please refrain from using the Site.

For more details on how to contact us or for our legal information, please see the end of this policy.

Information We Collect About You

We collect personal information in a few ways:

Information You Provide: This includes details you give us directly, such as your contact information, data you submit through our Site, and any correspondence you have with us.

Information We Collect Automatically: When you use our Site, we may collect data about your device, browsing activity, traffic, and communication interactions. This helps us understand how you use the Site and improve your experience.

Information from Other Sources: We may also gather information from third-party sources, such as details you provide when setting up an account or interacting with our services.

We only collect the personal information that is necessary and relevant to the purposes for which we intend to use it.

Personal Information You Provide to Us

We collect personal information that you provide voluntarily when you interact with our Site, social media pages, or when you communicate with us by phone, email, or other means. This may include your name, title, contact details (such as phone number, email address, postal address, and social media handles), inquiry details, feedback on our products and services, and marketing preferences.

Please note that if you do not provide this information, we may not be able to effectively respond to your queries or contact you.

Information We Collect from Your Use of the Site

Each time you use the Site, we automatically collect certain technical information, including:

  1. A unique identification code for our authentication system.
  2. The IP address of your device and information about the browser software you use to access the Site.
  3. Details of your interactions with the Site, including traffic data, weblogs, and communication data. This includes where and when you click on parts of the Site and the webpages that referred you.
  4. Cookie, pixel, and beacon identification information (for more details, please refer to our Cookie Policy).

If you choose not to provide this information, certain features of the Site may not be accessible.

Information We Collect About You from Other Sources
In addition to the information you provide directly and that we collect automatically, we may obtain personal information about you from third-party sources. This could include details you’ve shared with other services or platforms that interact with us, such as account setup details or other interactions.

Use of Your Personal Information

We use your personal information for various purposes. The legal grounds for processing your data depend on the specific use and the associated privacy risks.

You will only receive marketing communications from us if you have given your consent. You can opt out of receiving marketing messages at any time. We do not share your personal information with third-party companies for their own marketing purposes.

We Use Your Personal Information in the Following Ways:
1. Where You Have Provided Consent

We may use and process your personal information when you have given us consent for the following purposes:

  • To contact you via email (as you have indicated) with marketing information, including details about our products, upcoming product launches, events, promotions, and general marketing communications (see the "Marketing" section for more information).
  • To provide e-newsletters, brochures, or other materials that you have specifically requested from us.

You have the right to withdraw your consent at any time, and we will stop using your personal information for these purposes. For more details on how to exercise your rights, please refer to the "Your Rights Over Your Personal Information" section.

2. Where Required to Comply with Our Legal Obligations

We may use your personal information to fulfil our legal obligations, including keeping records related to the rights you exercise in connection with the processing of your personal information. This ensures that we meet our legal responsibilities and provide you with the necessary rights under data protection laws.

3. Where Processing is Necessary for Us to Pursue a Legitimate Interest

We may process your personal information when it is necessary for us to pursue our legitimate business interests, provided these interests are not overridden by your rights and freedoms. These legitimate interests may include, but are not limited to, the following purposes:

Processing necessary for us to promote our business, brands and products

 

Marketing and Campaign Analysis: To analyse and gain insights that inform our marketing strategies and improve your visitor experience.

Personalised Communications: To tailor and personalise marketing communications based on your preferences, such as sending you a special birthday message.

Targeted Advertising: To share your details with social media and other platforms for targeted online advertising. You may receive ads based on the information we provide to these platforms or because they identify you as similar to other users in their database. For more details, please refer to the help pages of the platforms where you see these ads.

Tracking Engagement: To track when you receive, open, or engage with our website or electronic communications. (For more details, see our Cookie Policy.)

Corporate Subscribers: If you are a corporate subscriber, we may contact you via email or phone with marketing information about our products and services (unless we have obtained your consent). We may also personalise these communications and send targeted marketing through social media or third-party platforms, which could involve sharing your personal information with those platforms.

Abandoned Shopping Cart Reminders: To send you an email if you leave items in your shopping basket and close your browser without completing the purchase.

Automated Analysis: In some cases, we may use automated methods to analyze, combine, and evaluate the information you provide. This helps us deliver a more personalised and relevant customer experience through tailored services and communications.

Processing Necessary for Us to Support Customers and Users with Sales and Other Inquiries

  • To correspond and communicate with you regarding the services we offer, addressing your sales inquiries and other requests.
  • To train and monitor our staff, identifying ways to improve call handling and enhance your overall customer service experience.

Processing Necessary for Us to Respond to Changing Market Conditions and Our Customers’ Needs

  • To conduct market research in order to improve the products and services we offer, ensuring we meet the evolving needs of our customers.

Processing Necessary for Us to Operate the Administrative and Technical Aspects of Our Business Efficiently and Effectively

 

  • To administer the Site and our social media pages, and for internal operations such as troubleshooting, testing, and statistical reporting.
  • For the prevention of fraud and other criminal activities.
  • To verify the accuracy of the information we hold about you and to enhance our understanding of you as an account holder or visitor.
  • For network and information security, ensuring the protection of your data from loss, damage, theft, or unauthorised access.
  • To comply with requests related to the exercise of your rights (e.g., when you ask not to receive marketing communications, we will keep a record on our suppression lists to honour your request).
  • In connection with a corporate restructure, reorganisation, or sale of our business or assets.
  • For efficiency and accuracy improvements in our databases and systems, such as combining or consolidating records we or our group companies hold about you.
  • To enforce or protect our contractual or legal rights, or to bring or defend legal proceedings.
  • For general administration, including managing your queries, complaints, or claims, sending service messages, and providing important information about our business.

We Will Use Your Personal Information Where This Is Necessary for Us to Perform Our Contract with You or to Carry Out Any Pre-Contract Steps You’ve Requested, for the Following Purposes:

  • To process and fulfil your order.
  • To handle your payment card or bank details when processing payment for your orders or issuing refunds.
  • To run competitions and promotions you enter, and to distribute any prizes.

Marketing Communications

As mentioned above, we will only send you newsletters, marketing materials, or notifications about special events, offers, promotions, competitions, or new products and services via email if you have explicitly consented or specifically requested such communications. If you no longer wish to receive marketing emails from us, you can unsubscribe by using the link provided in the email, by emailing us at info@desavarylondon.com, or by adjusting your email preferences to opt out of marketing communications.

In other cases, we process your personal information for direct marketing purposes based on our legitimate business interests (see above for further details). We aim to tailor and personalise our marketing communications to suit your interests and location, for example, by notifying you about relevant products, services, offers, or promotions. If you do not wish to receive these communications, you can opt out at any time by using the unsubscribe link in the email, by emailing us at info@desavarylondon.com, or by adjusting your email settings.

If you choose to opt out, we will place your email address on our suppression list for a defined period to ensure that we comply with your preferences. For further details, please refer to our retention policy regarding how long we keep your personal information.

 

Disclosure of Your Personal Information by Us

We may disclose your personal information to third-party service providers, agents, and subcontractors ("Suppliers") for the purpose of providing services to us or directly to you on our behalf. These services include the operation and maintenance of our Site, Apps, and social media pages. Our Suppliers may include:

  • Banks, payment processors, and financial services providers
  • Cloud software system providers
  • Delivery and mailing service providers
  • Health and safety claims administrators and consultants
  • Legal, security, and other professional advisers and consultants
  • Website and data analytics platform providers
  • Website and app developers
  • Website hosting service providers
  • Wi-Fi and communication service providers

When using Suppliers, we only disclose the personal information necessary for them to provide their services. We ensure that contracts are in place requiring them to secure your information and use it only according to our specific instructions.

We May Disclose Your Personal Information to Other Third Parties as Follows:

  • Any third party involved in the restructuring, sale, or acquisition of some or all of our business or assets, or in the event of a merger, reorganisation, or similar event.
  • If we are under a duty to disclose or share your information to comply with any legal or regulatory obligation or request, including those from law enforcement, courts, tribunals, or regulators.

Transfers of Your Personal Information Outside of Europe
Currently, we do not transfer your personal information outside of Europe. If this changes in the future, we will inform you and take necessary measures to protect your information.

All information you provide is stored securely on servers located within the European Economic Area (EEA).

If we ever transfer or store your personal information in countries outside of the EEA (e.g., due to a change in our hosting provider), we will update this policy and notify you of any changes. We will also ensure that appropriate safeguards are in place for such transfers and storage, in line with applicable laws. Some countries outside the EEA may not have data protection laws equivalent to those in the EEA. If we transfer your personal information to the United States, we will only send it to companies participating in the Privacy Shield framework (or any replacement framework) or for which we have other safeguards in place, as required by law. In some cases, we may rely on adequacy decisions by the European Commission regarding certain countries' data protection laws.


Security and Links to Other Websites
We take the security of your personal information seriously and employ a range of security measures based on industry best practices to protect it. However, please be aware that transmissions over the internet and to the Site may not be completely secure, and we encourage caution when sharing information online. When you access links to other websites, the privacy policies of those websites, not ours, will govern your personal information.

We implement various security measures to safeguard the information you provide to us, preventing unauthorised access, unlawful processing, accidental loss, destruction, or damage. If we provide (or you choose) a password for accessing specific features of the Site, you are responsible for keeping it confidential and ensuring it is not used by third parties. While we strive to protect your personal information, we cannot guarantee the security of any information transmitted online. By using the Site, you accept the inherent risks of online communication and will not hold us liable for any security breaches unless we are directly at fault.

The Site may contain links to external websites operated by organisations we do not control. Our privacy policy does not apply to these external websites, so we encourage you to review their privacy policies before sharing your personal information. We are not responsible for the privacy practices or content of any third-party websites, and we provide links solely for your convenience and informational purposes. We disclaim any responsibility for their content, practices, or accuracy and make no representations regarding their reliability or completeness. Any personal information you disclose to third-party websites is done at your own risk.

If you have linked to our Site from a third-party website, we cannot be held responsible for the privacy policies or practices of the owners or operators of that third-party website. We recommend that you review their privacy policy for more information.

The Periods for Which We Retain Your Personal Information
We will not retain your personal information in an identifiable format longer than necessary for the purposes for which it was collected. The duration of retention will vary depending on the type of personal information, your relationship with us (e.g., as a subscriber, prospective client, or visitor to the Site), and the purposes for which we are processing it. This applies to any personal information we share with suppliers who process data on our behalf.

We (and our suppliers) retain your personal information for the following periods:

Type of Personal Information

When Do We Receive Your Personal Information?

How Long Do We Keep Your Personal Information After We Receive It?

IP addresses and type of device

From when you use any de Savary London websites/apps

1 year

Payment card information

From when the payment is processed via card processor

Electronic truncated payment card information is held for 5 years

Information provided through competition entries

Completed form entry

5 years

Opinions or other information from customer surveys

Online form is submitted

2 years for completed surveys, maximum of 2 years for research

Order details

When the system records the order

7 years, stored on third-party platforms

Correspondence with customer care or social media pages

Correspondence is received/acknowledged

5 years for inactive users

Location and frequency of your visits

From when you sign up for newsletters

5 years for inactive app users, ongoing for active app users

Social media handles

When you like or follow a de Savary London account

Ongoing until you remove the link or request a comment removal

Consent for marketing communications

When form completed

5 years

Personal details (name, email, phone, etc.) and marketing preferences

When signed up for marketing

Ongoing for active customers, removed after 5 years of inactivity unless unsubscribed


Retention and Deletion of Your Personal Information
In relation to the retention periods mentioned above, we will retain your personal information until the start of our next financial year (1st of July each year) following the expiry of that retention period, to manage the deletion or destruction process efficiently.

The only exceptions to the retention periods listed above are where:

  • You exercise your right to have the information erased (where applicable) and we do not need to retain it in connection with any lawful reasons (see Your rights over your personal information).
  • You request that we retain your personal information for a period longer than our stated retention period (see Your rights over your personal information).
  • We are required to retain your personal information due to ongoing legal proceedings, claims, or appeals, in which case we will retain your personal information until those proceedings have concluded.
  • Our contract with our client (under which you access subscription services) requires us to delete, destroy, or return your personal information sooner.
  • Existing or future laws, or a court or regulatory requirement, mandates the retention of your personal information for a longer or shorter period.

Anonymised Data Retention
We retain an anonymised version of the submitted personal information for as long as we require it for reporting and other statistical and analytical purposes. Such anonymised information will not identify you and may be derived from personal information that was contained within accounts that have subsequently been deleted.

    Your Rights Over Your Personal Information
    Under data protection law, you have several rights regarding your personal information. In some cases, we may need to verify your identity and, where applicable, request additional details to help us locate your personal information. Except in rare instances, we will respond to your request within 30 days after receiving the required information or, if no verification is needed, after we have received full details of your request.

    Your Rights Over Your Personal Information

    • Right to Be Informed
      You have the right to be informed about how your personal information is being processed. This privacy statement outlines that information.

    • Right to Rectification
      If the personal information we hold about you is inaccurate or incomplete, you have the right to have it corrected. The accuracy of your information is important to us, and we are working to make it easier for you to review and correct the details we hold. In the meantime, if your name, address, or email address changes, or if you discover other information we hold is outdated or inaccurate, please contact us using the details at the end of this policy.

    • Right to Object to Processing
      Where we process your personal information based on legitimate interests, you have the right to object to such processing. If you wish to object, you can email or write to us at the address listed at the end of this policy. Except where we are certain we can continue processing your personal information, we will temporarily stop processing it.

    • Right to Withdraw Consent
      If we process your personal information based on your consent, you may withdraw that consent at any time. To do so, you can contact us using the details provided at the end of this policy. If you've opted-in for direct marketing, you can also use the unsubscribe link in any marketing email. Please note that withdrawing your consent does not affect the lawfulness of processing before you withdrew it.

    • Right to Restrict Processing
      You have the right to request that we restrict the processing of your personal information in certain circumstances, such as if you contest the accuracy of the data or object to its processing.

    • Right to Restrict Processing
      You may ask us to restrict the processing of your personal information in the following situations:

      - Where you believe the processing is unlawful.
      - If you have objected to its use, and our investigation is pending.
      - If you require us to keep your personal information in connection with legal proceedings.

      In these situations, we may only process your personal information while its processing is restricted if we have your consent or are legally permitted to do so (for example, for storage purposes, to protect the rights of another individual or company, or in connection with legal proceedings).

    • Right to Erasure
      In certain circumstances, you may ask us to erase your personal information from our systems by emailing or writing to us at the address at the end of this policy. Unless there is a reason that the law allows us to use your personal information for longer, we will make reasonable efforts to comply with your request.

    • Right to Access Your Personal Information
      You have the right to request a copy of the personal information we hold about you, as well as information on how we process it. Please email or write to us at the contact details at the end of this policy. However, we may not provide you with a copy if the information concerns other individuals or if there is another lawful reason to withhold it.

    • Right to Data Portability
      Where we process your personal information based on your consent or in connection with a contract directly with you, you may request that we provide you with a copy of your personal information in a structured data file. We will supply this electronically in a commonly used, machine-readable format such as a CSV file.

    • Rights Relating to Automated Decision-Making
      We will only make decisions that may significantly affect you (using only automated processing) in the ways described in this privacy policy. If you wish to contest such a decision, you may do so by emailing info@desavarylondon.com or unsubscribing from related communications.

    Right to Lodge a Complaint with a Data Protection Regulator
    You have the right to lodge a complaint with a data protection regulator in Europe, particularly in the country where you work, live, or where your legal rights have been infringed. For example, in the UK, the contact details for the Information Commissioner’s Office (ICO) can be found on their website. However, we encourage you to contact us first so that we can address any issues or concerns you may have before you lodge a formal complaint.

    Klarna
    To offer you Klarna’s payment options, we will pass certain personal information to Klarna, such as contact and order details. Klarna will then assess whether you qualify for their payment options and tailor the payment options for you. You can find general information on Klarna here. Your personal data will be handled in accordance with applicable data protection laws and Klarna’s privacy policy.

    Changes to Our Privacy Policy
    Please check this page regularly for any updates to this policy. We will notify you of any changes through your account and/or by email (if we hold a valid email address for you). We may review this policy from time to time, and any changes will be posted on this Site or sent via email or through your account. The updated terms will take effect 7 days after being posted on the website or after the notification date. We recommend that you regularly review this policy when visiting this Site. If you do not agree with any aspect of the updated policy, you must notify us and stop using the Site.

    Contact and Legal Information
    If you have any queries related to this policy or any other reason, please contact us at any time.

    For inquiries or to exercise any of your rights in relation to your personal information, please write to the Data Protection Manager at the following address or email us at info@desavarylondon.com:

    de Savary London Limited
    Company Registration Number: 10263722
    Registered Office Address: 21 Heathman's Road, London, SW6 4TJ