Privacy Policy

Privacy Policy

Last updated: [insert date]

This Privacy Policy explains how Chloe and Liam (“we”, “us”, “our”) collects, uses, shares, and protects your personal information when you use our website https://wearchloe.com/ or purchase our products.

We are committed to protecting your privacy and handling your personal data in compliance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

  • Data Controller: GAE (Chloe and Liam website's owner)

  • Address: Via San Luca 14, 40019 Sant'Agata Bolognese BO, Italy

  • Email: info@chloeandliamcs.com

We are the data controller responsible for your personal information.

2. What Information We Collect

We collect the following categories of personal data:

  • Identity Data: name, email address, billing/shipping address, phone number.

  • Transaction Data: payment details, purchase history, order details.

  • Technical Data: IP address, browser type, operating system, device type, cookies.

  • Usage Data: how you interact with our website, pages visited, and preferences.

  • Marketing & Communication Data: your choices about receiving marketing from us.

3. How We Collect Your Data

  • Directly from you (when placing an order, creating an account, or contacting us).

  • Automatically (through cookies, server logs, analytics).

  • From third parties (payment processors, delivery partners, advertising networks).

4. How We Use Your Data

We process your personal data only where lawful under UK GDPR:

  • To fulfil your order and deliver products (contractual necessity).

  • To process payments and prevent fraud (legal obligation / legitimate interest).

  • To provide customer service and respond to enquiries (contractual necessity).

  • To send marketing communications where you have consented (consent).

  • To improve our website, products, and services (legitimate interest).

5. Legal Bases for Processing

We rely on the following legal grounds:

  • Contractual necessity – when processing your order.

  • Legal obligation – when keeping transaction records for tax or regulatory compliance.

  • Consent – when sending newsletters or personalised marketing.

  • Legitimate interests – to operate our business, prevent fraud, improve services.

6. Sharing Your Data

We only share your personal data where necessary:

  • With payment providers to process payments.

  • With delivery/courier services to deliver your order.

  • With IT, analytics and marketing providers that support our business.

  • With authorities or regulators if required by law.

We do not sell your personal data.

We use third-party providers including Google and Meta (Facebook/Instagram) for analytics and advertising purposes. These providers may process your personal data (such as IP address, device identifiers, browsing behaviour) in order to help us measure performance, deliver relevant ads and improve our services. Their use of personal data is governed by their own privacy policies.

7. International Transfers

Some of our service providers and partners are located outside the United Kingdom, including in countries that may not provide the same level of data protection as the UK.

This includes:

Our logistics and warehouse partner in China, which processes order fulfilment and returns.

Certain IT, analytics, and marketing service providers located outside the UK/EEA.

Where your personal data is transferred outside the UK, we ensure that appropriate safeguards are in place to protect it, in accordance with UK data protection law. These safeguards may include:

Using Standard Contractual Clauses (SCCs) approved under UK law.

Implementing additional security and organisational measures (e.g. encryption, limited access).

Working only with trusted service providers who commit to protecting personal data.

If you would like more information about the safeguards we use when transferring your personal data outside the UK, you can contact us at info@chloeandliamcs.com

8. Data Retention

  • We keep your data only as long as necessary for the purposes set out in this policy.

  • Typically, order and transaction data are retained for 6 years to comply with tax obligations.

  • After retention periods expire, data will be securely deleted or anonymised.

9. Your Rights

Under UK GDPR, you have the following rights:

  • Right of access – request a copy of your personal data.

  • Right to rectification – correct inaccurate or incomplete data.

  • Right to erasure – request deletion of your data (where lawful).

  • Right to restrict processing – limit how we use your data.

  • Right to data portability – request transfer of your data to another provider.

  • Right to object – to direct marketing or certain processing.

  • Right to withdraw consent – where processing is based on consent.

  • Right to lodge a complaint – with the UK Information Commissioner’s Office (ICO): www.ico.org.uk

10. Cookies

We use cookies and similar technologies to enhance your experience, analyse traffic, and provide targeted advertising.

You can control or disable cookies in your browser settings. For more information, see our Cookie Policy.

11. Security of Your Data

We use appropriate technical and organisational measures to protect your personal data from loss, misuse, and unauthorised access.

However, no system is completely secure. You share information with us at your own risk.

12. Marketing Communications

  • You will only receive email marketing if you opted in.

  • You can unsubscribe at any time by clicking the link in our emails or contacting us.

  • We may contact existing customers about similar products under the soft opt-in rule (PECR).

13. Children

Our website and services are not directed to children under 13. We do not knowingly collect data from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on our website with the date of update.

15. Contact Us

If you have any questions or wish to exercise your rights, contact us: info@chloeandliamcs.com