Privacy Policy

1. Introduction

Welcome to Pearl Gallery. We are committed to protecting your privacy and ensuring the security of your personal information. This privacy policy explains how we collect, use, store, and protect your data when you visit our website or purchase our products.

Pearl Gallery ("we", "us", "our") is the data controller responsible for your personal information. We are located at South Molton, Devon UK.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide

• Personal details (name, email address, phone number)
• Billing and shipping addresses
• Payment information (processed securely by our payment providers)
• Order history and preferences
• Customer service communications
• Account information if you create an account

2.2 Information We Collect Automatically

• Website usage data (pages visited, time spent, clicks)
• Device information (IP address, browser type, operating system)
• Cookies and similar tracking technologies
• Location data (general location based on IP address)

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Order Processing and Customer Service

• Processing and fulfilling your orders
• Communicating about your orders and deliveries
• Handling returns and exchanges
• Providing customer support

3.2 Website and Service Improvement

• Personalising your shopping experience
• Analysing website performance and user behaviour
• Improving our products and services
• Detecting and preventing fraud

3.3 Marketing and Communications

• Sending promotional emails (with your consent)
• Personalised product recommendations
• Marketing research and surveys
• Social media engagement

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on the following legal bases:

• Contract: Processing necessary for order fulfillment and customer service
• Legitimate Interest: Website analytics, fraud prevention, and service improvement
• Consent: Marketing communications and non-essential cookies
• Legal Obligation: Tax records and regulatory compliance

5. How We Share Your Information

We may share your personal information with:

• Service Providers: Payment processors, shipping companies, email service providers
• Analytics Partners: Google Analytics, marketing platforms (anonymised data)
• Legal Requirements: Law enforcement, regulatory authorities when required by law
• Business Transfers: In case of merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information:

• SSL encryption for all data transmission
• Secure payment processing through trusted providers
• Regular security audits and updates
• Access controls and staff training
• Backup and recovery procedures

7. Data Retention

We retain your personal information for as long as necessary to:

• Fulfil orders and provide customer service
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements
• Improve our services (anonymised data may be retained longer)

Generally, we retain customer data for 7 years after the last purchase for accounting and legal purposes.

8. Your Rights

Under UK GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal requirements)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing communications

To exercise your rights, contact us at [email protected] or +44 (0)330 174 7540.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and shopping cart
• Analyse website traffic and user behaviour
• Personalise content and advertisements
• Provide social media features

You can manage cookie preferences through your browser settings or our cookie consent banner.

10. International Data Transfers

Some of our service providers may be located outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK government
• Standard contractual clauses
• Certification schemes and codes of conduct

11. Children's Privacy

Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Contact Us

If you have questions about this privacy policy or wish to exercise your rights:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

13. Updates to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date above.

For significant changes, we may also send you an email notification or display a prominent notice on our website.