Annie Haak Designs Ltd ("Annie Haak", "we", "us" or "our") operates this website and online store, including the related content, features, tools, products and services (the "Services"). Our online store is powered by Shopify.

This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit or use the Services, make a purchase or other transaction, enter a competition, or otherwise communicate with us. It also explains your privacy rights and how to contact us.

Annie Haak Designs Ltd is committed to protecting your privacy and processing personal information in accordance with applicable UK data protection law, including the UK GDPR and the Data Protection Act 2018. This Privacy Policy supplements any privacy or fair processing notices we may provide for particular activities and does not override them.

1. Who We Are and How to Contact Us

Annie Haak Designs Ltd is the controller responsible for your personal information. If you have questions about this Privacy Policy, wish to exercise your rights, make a complaint, or would like more information, please contact us:

·         Email: customerservices@anniehaak.com

·         Address: Annie Haak Designs Ltd, Unit 2 Ridgeway Office Park, Bedford Road, Petersfield, Hampshire, GU32 3QF

2. Personal Information We Collect

Personal information means information that identifies you or can reasonably be linked to you. It does not include anonymous or de-identified information that can no longer reasonably be linked to you. Depending on how you interact with us, we may collect or process:

·         Contact details, such as your name, billing and delivery addresses, telephone number and email address.

·         Payment and financial information, such as payment card or account information, transaction details, payment method and payment confirmation.

·         Account information, such as your username, password, security questions, preferences and settings.

·         Transaction information, such as products you view, place in your basket, add to your wishlist, purchase, return, exchange or cancel, and your transaction history.

·         Communications with us, including information you provide when contacting customer services.

·         Device information, including information about your device, browser, network connection, IP address and other unique identifiers.

·         Usage information, including how and when you use or navigate the Services.

·         Competition information, including your name, postal address, email address and, on occasion, telephone number. You may also choose to provide your date of birth so that we can offer a discount to celebrate your birth month.

We do not collect special categories of personal data about you, such as information about race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health, or genetic and biometric data. We also do not collect information about criminal convictions and offences.

3. How We Collect Personal Information

We may collect personal information:

·         Directly from you, for example when you create an account, place an order, enter a competition, contact us or otherwise provide information to us.

·         Automatically through the Services, including from your device and through cookies and similar technologies.

·         From service providers that provide technology or process information on our behalf.

·         From partners or other third parties.

4. How We Use Personal Information

Depending on how you interact with us, we may use personal information to:

·         Provide, tailor and improve the Services, including processing payments and orders, remembering preferences, send notifications, managing your account, arranging shipping, processing returns and exchanges, enabling reviews and recommending relevant products.

·         Provide marketing and advertising, including communications by email, SMS or post and online advertising based on your interactions with the Services, where permitted by law. From time to time, we may use the Data collected at the time of your order such as your email address, postcode, or other order information to contact you under Legitimate Interests (GDPR). This will be for the purpose of informing you of special offers or events. Aggregated Data is derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity.

·         If you enter a competition we collect your name, postal address, email address and phone number on occasions. In addition, we provide the option for you to share your date of birth. We ask if you are happy to share your date of birth as we offer entrants a discount to celebrate their birth month.

·         Protect the Services and prevent fraud, including authenticating accounts, detecting and investigating suspected fraudulent, illegal, unsafe or malicious activity and maintaining a secure shopping experience.

·         Communicate with you, provide customer support and maintain our business relationship.

·         Comply with legal obligations and valid legal processes, deal with disputes or litigation and enforce our terms and policies.

5. Lawful Bases for Processing

We will only use your personal information where the law allows us to do so. Depending on the circumstances, we may process it where:

·         it is necessary to perform a contract with you, or to take steps at your request before entering into a contract;

·         it is necessary for our legitimate interests, or those of a third party, where those interests are not overridden by your rights and interests;

·         you have given us consent; or

·         it is necessary to comply with a legal obligation.

Where we rely on consent, you may withdraw it at any time. Where we rely on legitimate interests, these may include communicating relevant offers or events to existing customers and measuring and improving the effectiveness of our marketing, where permitted by law.

6. If You Do Not Provide Personal Information

Where we need to collect personal information by law, or under a contract with you, and you do not provide it when requested, we may be unable to perform the contract we have or are trying to enter into with you. For example, we may be unable to process or fulfil your order.

7. Change of Purpose

We will only use your personal information for the purposes for which we collected it unless we reasonably consider that we need to use it for another purpose that is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so.

8. Marketing Communications

We aim to give you choices about marketing and advertising. Where you have consented to marketing, we may send information about products, services and offers that may be relevant to you. We may also contact existing customers about relevant products, services, offers or events where we rely on legitimate interests and the law permits us to do so.

You can opt out of marketing communications at any time by using the unsubscribe option in the communication or by emailing customerservices@anniehaak.com . Opting out of marketing does not prevent us from sending non-promotional communications, such as order or account messages.

We may use the following marketing channels and technologies:

·         Email. We use a third-party platform to send e-newsletters. Our marketing emails may use tracking pixels that provide information such as IP address, when an email was opened, clicks and clicked images, general location, account-opening date where applicable and, on occasion, device information. We use this information to measure campaign effectiveness and understand which products and offers are most relevant.

·         Direct mail. We may use information collected when you place an order to send exclusive promotions, special offers or information about new collections, where permitted by law.

·         SMS. We may send marketing text messages where you have provided your mobile number and consented to receive them. We do not use a mobile number collected solely from an order or your account details for SMS marketing unless the required consent has been obtained.

·         Other marketing. If we use another communication method, we will do so in accordance with applicable data protection and direct marketing law.

We do not currently share your personal information with third parties for their own direct marketing purposes without your consent. If we do so in future, we will obtain any consent required by law before sharing it for that purpose.

9. SMS/Text Messaging

If you opt in to Annie Haak Designs SMS/text messaging, you agree to receive recurring text messages at the mobile number you provide. These may include service messages, such as order or account updates, and promotional messages, such as offers and cart reminders. Your consent to marketing text messages is voluntary and is not a condition of purchase.

We do not charge you for our SMS service, but your mobile provider may apply message or data charges. Message frequency may vary.

You can opt out at any time by using the unsubscribe option provided in a message or, where supported by the service, by replying STOP. You can also contact customerservices@anniehaak.com for assistance. If you change your mobile number, you should update your details or sign up again using the new number.

10. Cookies

We use cookies and similar technologies to help the website operate efficiently, remember relevant preferences and support functions such as keeping your order information available as you move between pages. Some cookies are essential for the website and checkout to function properly.

You can set your browser to refuse some or all browser cookies or to alert you when websites set or access cookies. Disabling cookies may affect the availability or operation of parts of the website.

For more information, please see our Cookie Policy.

11. How We Disclose Personal Information

We may disclose personal information to third parties for legitimate purposes described in this Privacy Policy, including:

·         Shopify and service providers that support our business, such as providers of IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping.

·         Business and marketing partners that help us provide marketing services and advertising, including services such as Google Analytics, Facebook, affiliate partners and our email communication platform. These partners process information in accordance with their own privacy notices.

·         Third parties where you direct, request or consent to the disclosure, for example to ship a product or through social media widgets or login integrations.

·         Our affiliates or other companies within our corporate group.

·         Parties involved in a business transaction, such as a merger, sale or insolvency process, and parties to whom disclosure is necessary to comply with legal obligations, enforce our terms or policies, or protect our rights, the Services or other people.

Depending on where you live, you may have rights to opt out of certain uses of personal information for targeted advertising. See section 18 below.

12. Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit through the Services may be transmitted to and shared with Shopify and other third parties, including where they are located in countries other than where you live.

We also use Shopify features that may use information from your interactions with our store together with information from your interactions with Shopify and other merchants. For processing associated with those Shopify features, Shopify may be responsible for responding to requests to exercise privacy rights.

For more information, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

13. Third-Party Links

The Services may contain links, plug-ins or applications operated by third parties, including social networking platforms. Clicking a link or enabling a connection may allow a third party to collect or share information about you. We do not control those third parties and are not responsible for their privacy or security practices. We encourage you to review their privacy policies and terms before providing personal information.

14. Children's Data

The Services are not intended for children, and we do not knowingly collect personal information about children under the age of majority in their jurisdiction. If you are the parent or guardian of a child who has provided personal information to us, please contact us using the details in section 1 to request deletion. As of the date of this Privacy Policy, we do not have actual knowledge that we "sell" or "share", as those terms are defined in applicable law, personal information of individuals under 16.

15. Security

No security measure is perfect or impenetrable, and information sent over the internet may not always be secure while in transit. Please avoid sending sensitive or confidential information through unsecured channels.

We take appropriate measures to protect personal information from accidental loss and unauthorised access, use, alteration or disclosure. Access is limited to employees, agents, contractors and other third parties who have a legitimate business need to access it. We also have procedures to respond to suspected personal data breaches and will notify affected individuals and the applicable regulator where required by law.

16. Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, regulatory, tax, accounting or reporting requirements. We may retain information for longer where there is a complaint or where we reasonably believe there is a prospect of litigation concerning our relationship with you.

When deciding the appropriate retention period, we consider the amount, nature and sensitivity of the information, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, whether those purposes can be achieved by other means, and applicable legal, regulatory, tax, accounting or other requirements.

We may keep basic customer information, including contact, identity, financial and transaction data, for up to seven years after you cease being a customer for tax purposes. In some circumstances you may ask us to delete your information. We may also anonymise personal information so that it can no longer be associated with you and use that anonymised information indefinitely for research or statistical purposes.

17. International Transfers

We may transfer, store and process personal information outside the country in which you live. Where we transfer personal information outside the United Kingdom or European Economic Area, as applicable, we use recognised transfer mechanisms, such as relevant standard contractual clauses or equivalent UK transfer arrangements, unless the destination has been recognised as providing an adequate level of protection.

18. Your Rights and Choices

Depending on where you live, and subject to applicable exceptions and limitations, you may have rights in relation to your personal information, including:

·         Access: request access to personal information we hold about you.

·         Correction: ask us to correct inaccurate personal information.

·         Deletion: ask us to delete personal information in certain circumstances.

·         Portability: receive certain personal information in a portable form and, in some circumstances, ask us to transfer it to a third party.

·         Objection and restriction: ask us to stop or restrict certain processing.

·         Withdrawal of consent: withdraw consent where we rely on consent. This does not affect processing carried out before consent was withdrawn.

·         Marketing preferences: unsubscribe from promotional emails or other marketing communications.

·         Targeted advertising: depending on where you live, opt out of processing that applicable law treats as sale, sharing or targeted advertising.

You can exercise applicable targeted-advertising choices through our data-sharing opt-out page. Where applicable, if you visit our website with the Global Privacy Control opt-out preference signal enabled, we will treat it as an opt-out request for the device and browser you use. If the signal can be associated with a Shopify account, the request may also be applied to that account. Learn more about Global Privacy Control.

To exercise your rights, contact us using the details in section 1 or use any rights tools made available through the Services. We may need to verify your identity before processing a request. Where applicable law allows an authorised agent to act for you, we may require evidence of their authority and may also need to verify your identity directly.

We aim to respond to legitimate requests within one month. If a request is particularly complex or you have made a number of requests, it may take longer; if so, we will inform you and keep you updated.

You will not normally have to pay a fee to exercise your rights. We may charge a reasonable fee, or refuse to act, where permitted by law if a request is clearly unfounded, repetitive or excessive. We will not discriminate against you for exercising applicable privacy rights.

19. Complaints

If you have concerns about how we process your personal information, please contact us first using the details in section 1 so that we have an opportunity to address them. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

You can find more information on the ICO website.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal or regulatory reasons. We will post the revised policy on our website, update the "Last updated" date and provide any notice required by applicable law.