Privacy policy

Busby & Fox is committed to protecting your personal information and being transparent about the information we collect and hold about you. 

The purpose of this policy is to give you a clear explanation of how we gather and use this information. We process your information in accordance with all applicable data protection laws. 

This policy explains: 

● What information we may collect about you; 

● How we may use that information; 

● In what situations we may disclose your details to third parties; 

● How we keep your personal information secure, how we maintain it for and your rights in relation to your personal information; and 

● Our use of cookies to improve your use of our website. 

Busby & Fox is the data controller, responsible for the processing of your personal data. The full name of the legal entity is: Emma Vowles Limited, trading as Busby & Fox, a limited company with registered number 07236800. Emma Vowles Limited is registered, and operates, in the United Kingdom. 

CONTACT DETAILS AND FURTHER INFORMATION 

If you have any questions, including any requests to exercise your legal rights, please contact us on the details below. 

You can write to us at: High Cross House, Dartington Hall, Totnes, Devon, England, TQ9 6ED, or email us: [email protected] 

COMPLAINTS 

You have the right to make a complaint at any time to the Information Commission (IC), the UK supervisory authority for data protection issues. We would, however, appreciate the chance to address your concerns before you approach the IC or any other supervisory authority so please do contact us in the first instance on [email protected] or in writing to the DPO at Busby & Fox, High Cross House, Dartington, Totnes, Devon, TQ9 6ED. We will acknowledge your complaint within 30 days, and respond to you about your complaint without undue delay. 

CHANGES TO THIS PRIVACY POLICY AND TO YOUR PERSONAL DATA 

We may need to update this Policy at any time and without notice and where we do this we will notify you, for example, by emailing all our customers. 

It is important that the personal data we hold about you is accurate and up to date. Please keep us informed if your personal data changes during your relationship with us and periodically review the details in your account settings on our website. 

INFORMATION COLLECTION AND PROCESSING 

We collect and process different types of personal data about you, as follows: 

Information you give to us 

When you open an account with Busby & Fox or shop on our website, sign up to our newsletters via our website or provide your details when you visit a store, we'll store the personal information you give us such as your name, email address, postal address and telephone number. We'll also keep a record of your purchases and any changes you might make to your orders. 

We don’t store or process your payment card details ourselves. They are processed and automatically stored via one of our contracted third party service providers. 

Information about you, and your interactions with us 

When you visit our website, we collect information about how you interact with our content (“Usage Data”). This helps us determine which pieces of content or areas of the website are most popular with our users, so that we can consistently improve the usability and relevancy of the site. See more about “Cookies” below. 

When we send you a mailing by email or by post, we store a record of this and, in the case of emails, keep a record of which ones you have opened and which links you have clicked on. This helps us to improve the way in which we communicate with you. 

We may analyse your personal data to understand our customers better, and to ensure that the content and timing of communications that we send to you are as relevant to you as possible. 

We may analyse data we hold about you in order to identify and prevent fraud. 

Special Category Data 

Under data protection laws, certain categories of personal data – such as health information, race, religious beliefs and political opinions – constitute Special Category Data, and are subject to additional protection. We will rarely collect and/or process any of your Special Category Data, and if we do, we will always obtain your consent before doing so, and comply with our obligations in relation to it. 

Aggregated or anonymised data 

We also collect, use and share aggregated and/or anonymised data (“Aggregated Data”) such as statistical or demographic data for analytical purposes. Aggregated Data may be derived from your

personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Policy. 

LEGAL BASES 

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances: 

Contract purposes 

When you make a purchase from our website, you are entering into a contract with us. In order to perform this contract, we need to process and store your data. For example, we will need to send you an order confirmation email, update you when your order is dispatched, let you know if we need to cancel your purchase, or inform you that we’ve received your request for a refund/exchange. 

Legitimate business interests 

In certain situations, we collect and process your personal data for purposes that are in our legitimate business interests. We only do this if your interests and fundamental rights do not override those interests. 

Legal or regulatory obligation 

We may process your personal data where we need to comply with legal or regulatory obligations. 

With your explicit consent 

In certain circumstances we may ask for your explicit consent before using your personal information. 

Marketing communications 

If you have given your consent to receiving our marketing emails, we will aim to communicate with you about our products and activities in ways that you will find relevant, timely and respectful. 

You will be given the opportunity to opt out of such communications in every email that we send to you. Alternatively, you can use the contact details at the end of this policy if you’d like us to stop sending marketing communications to you. 

THIRD PARTIES 

Service providers 

We work with a small number of third-party service providers, including: 

● our website platform provider; 

● our customer relationship management platform; 

● our customer survey provider; and 

● our digital marketing providers, such as Google and Facebook

who may process your personal data on our behalf as part of providing their services. 

We require all third parties to ensure the security of your personal data and to process it in accordance with data protection laws. They may only use your data for the purposes we specify in our contract with them. We will always work with them to protect your privacy. 

From time to time, we may employ the services of other parties for dealing with certain processes necessary for the operation of our website. The providers of such services do not have access to the personal data provided by users of this website. 

THIRD PARTY LINKS 

We may, from time to time, provide links from our website to other sites. We have no control over such websites and are not responsible for the content of these websites. This privacy policy does not extend to your use of such websites, so we advise you to read the privacy policy or statement of such other websites prior to using them. We will never share your personal information with third-party marketers. 

CHANGES OF BUSINESS OWNERSHIP AND CONTROL 

We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of the company (Emma Vowles Limited trading as Busby & Fox). Where it is relevant to any part of our business so transferred, the personal data of our customers and subscribers will be transferred too, and the new owner or newly controlling party will, under the terms of this privacy policy, be permitted to use the data for the purposes for which it was originally supplied to us. 

RETENTION OF YOUR PERSONAL INFORMATION 

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. 

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. For example, 

details of your orders will be kept for as long as we need to retain that data to comply with our legal and regulatory requirements. 

In some circumstances, you can ask us to delete your data: see ‘Your Legal Rights’ below for further information. 

We may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you. 

Any objections you make to any processing of your data will be stored against your record on our system, in order that we can comply with your requests.

DATA SECURITY 

Data security is of great importance to us. To protect your data, we have put in place appropriate security measures to protect your personal data. 

If password access is required for certain parts of our website, you are responsible for keeping this password confidential. 

We endeavour to do our best to protect your personal data. However, transmission of information over the internet is not entirely secure and is done at your own risk, and we cannot ensure the security of your data transmitted to our website. We are not responsible for any damages which you, or others, may suffer as a result of the loss of confidentiality of such information. 

YOUR LEGAL RIGHTS RELATING TO YOUR PERSONAL DATA 

Under certain circumstances, you have rights under data protection laws in relation to your personal data. 

You have the right to: 

● Request access to your personal data (commonly known as a “data subject access request”);

● Request correction of the personal data that we hold about you; 

● Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request; 

● Object to the processing of your personal data. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms; 

● Request restriction of processing of your personal data; 

● Request the transfer of your personal data to you or to a third party. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you; 

● Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. 

If you wish to exercise any of these rights, please contact us using the Contact Details at the start of this Privacy Policy. 

COOKIES 

Cookies are small text files that are automatically placed on your device by some websites that you visit. They are widely used to allow a website to function (for example to keep track of your

shopping basket) as well as to provide website operators with information on how the site is being used. As a rule, cookies will make your browsing experience better. 

We use cookies to keep track of your basket and to identify how our website is being used (for example by sharing anonymised data with Google Analytics), so that we can make relevant improvements to improve your experience of using the website. All cookies used by us are done so in accordance with current UK and EU Cookie Law. 

Before our website places cookies on your computer, you will be presented with a message bar requesting your consent to set those cookies. By giving your consent to the placing of Cookies, you are enabling us to provide a better experience and service to you. You may, if you wish, deny consent to the placing of cookies; however certain features of the website may not function fully or as intended. 

If you do consent, our website may place the following cookies: 

Strictly necessary cookies 

These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services. 

Analytical/performance cookies 

These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily. 

Functionality cookies 

These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region). 

Targeting cookies 

These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.