This Privacy Policy explains how The House of Ros (“we”, “us”, “our”) collects, uses and protects your personal data when you visit www.thehouseofros.co.uk.
Simply browsing our Website does not mean that you have consented to optional analytics or every processing activity described in this policy.
1. Information We Collect
Personal Data You Provide
We may collect information you voluntarily provide, including your name, email address and information submitted through contact forms. You are not required to provide personal data to browse the Website.
Usage Data
We may automatically collect technical information including IP address, browser type, pages visited, visit time and date, and device information to operate and secure the Website and, where permitted, understand how visitors use it.
2. How We Use Your Information
We use personal information to:
- Operate and maintain the Website.
- Respond to enquiries.
- Improve content and user experience.
- Monitor Website performance where permitted.
- Ensure security and prevent misuse.
- Comply with legal obligations.
We do not sell your personal data. We do not automatically add people who contact us to marketing mailing lists.
3. Legal Basis for Processing
Under UK data protection law, we rely on appropriate lawful bases depending on the purpose of processing. These may include:
- Legitimate interests: Responding to enquiries, maintaining the Website and protecting its security, where our interests are not overridden by applicable individual rights.
- Consent: Optional analytics or other activities where consent is required.
- Legal obligations: Processing necessary to comply with applicable laws.
Where processing relies on consent, you may withdraw that consent. Withdrawal does not affect processing already carried out lawfully before withdrawal.
4. Analytics and Third-Party Services
We use third-party services to operate the Website, including:
- Vercel: Website hosting and related infrastructure.
- Sanity: Content management and publishing.
- Google Analytics 4: Website statistics when enabled according to applicable consent requirements.
- Email services: Delivery and handling of enquiries submitted through the contact form.
Our Website may also use external services for fonts, icons, photographs and social media features. These services may process technical information, such as IP addresses, when providing their functionality.
Contact Form
When you submit the contact form, your name, email address and message are sent to our designated email inbox through the Website's email-delivery service.
We do not maintain a separate website database of contact messages. However, email providers and relevant hosting or security services may process or retain information associated with sending and receiving those messages. We use the information to respond to enquiries and handle related correspondence.
5. Affiliate Links
If you click an affiliate link and make a purchase, we may earn a commission at no extra cost to you. Affiliate partners may collect information under their own privacy policies.
6. Cookies
We use cookies and similar technologies for core functionality and, where enabled with appropriate consent, analytics. See our Cookie Policy for more information.
7. Data Sharing
We do not sell or rent personal data. We may share relevant personal information with trusted service providers who help operate the Website or where disclosure is required by law.
8. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described, including applicable legal, accounting or reporting requirements.
Contact messages are retained while an enquiry is being handled and for any reasonably necessary follow-up, record-keeping or dispute resolution. Information is deleted when no longer required, subject to applicable retention obligations. Technical logs, analytics information and email records may have different retention periods depending on their purpose and the services involved.
9. Data Security
We take reasonable technical and organisational measures to protect personal data, although no Internet transmission or electronic storage method is completely secure.
10. Children's Privacy
This Website is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided personal information without appropriate permission, please contact us.
11. Your Rights
Under applicable data protection law, you may have rights to:
- Request access to your personal information.
- Request correction of inaccurate information.
- Request deletion or restriction of processing.
- Object to certain processing.
- Withdraw consent where applicable.
- Request data portability where applicable.
- Complain to the relevant supervisory authority.
You have the right to object to processing based on legitimate interests, subject to applicable legal exceptions. UK users can make a complaint to the Information Commissioner's Office.
To exercise your rights, please use our Get in Touch page.
12. International Transfers
Some providers may process data outside the UK. Where this occurs, we rely on applicable adequacy arrangements or other appropriate safeguards as required by law.
13. Changes
We may update this policy and will post changes here with an updated date.
14. Contact
Questions about this Privacy Policy or requests concerning your personal information can be submitted through our Get in Touch page.