Privacy Policy

BELLA AND DUKE PRIVACY NOTICE

LAST UPDATED: DECEMBER 2024

1. Introduction

Bella & Duke (“we”, “us”, “our”) takes the privacy of your personal information seriously. This privacy notice is designed to tell you how we use your personal information.

1.1 Our Details

This privacy notice relates to the operations of Bella & Duke Ltd. Bella & Duke is the data controller of your personal data. ICO registration number: ZA269568. Our principal place of business is at Arrol House, Viking Way, Rosyth, Dunfermline, KY11 2UT.

You can contact us by writing to Data Protection Officer at the address above, by using our website contact form here, or by email to hello@bellaandduke.com

We are committed to safeguarding the privacy of all our customers and website visitors; this notice sets out how we will treat your personal information.

2. Collecting Personal Information

We may collect, store and use the following kinds of personal information:

2.1. information about your device and about your visits to and use of this website (including your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths);

2.2. information that you provide to us when registering with our website (including your email address);

2.3. information that you provide when completing your profile on our website (including your name, address, email address, and pet details);

2.4. information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters (including your name and email address);

2.5. information that you provide to us when using the services on our website, or that is generated in the course of the use of those services (including the timing, frequency and pattern of service use);

2.6. information relating to any purchases you make of our goods / services or any other transactions that you enter into through our website (including your name, address, telephone number, email address, date of birth, bank or credit card details and pet details);

2.7. information that you post to our website for publication on the internet (including your user name, your profile pictures and the content of your posts);

2.8. information contained in or relating to any communications that you send to us or send through our website; and

2.9. any other personal information that you choose to disclose to us either by phone, email, face to face at events, or through our website.

Should you choose to disclose to us the personal information of another person, you confirm that you have obtained that person’s consent to both the disclosure and the processing of that personal information in accordance with the terms of this notice.

3. Using your Personal Information

3.1. Personal information submitted to us through our website will be used for the purposes specified in this notice.

3.2. We may use your personal information to:

3.2.1. administer our website and business;

3.2.2. personalise our website for you;

3.2.3. enable your use of the services available on our website;

3.2.4. send you goods purchased through our website;

3.2.5. supply to you services purchased through our website;

3.2.6. send statements, invoices and payment reminders to you, and collect payments from you;

3.2.7. send you service-related communications by post, phone, email and text, depending on your communication preference;

3.2.8. manage your subscription to our email newsletter, you can inform us at any time if you no longer require the newsletter;

3.2.9. if you agree, to send you electronic marketing communications relating to our business which we think may be of interest to you by email, by text message, or other similar technology. You can inform us at any time if you no longer wish to receive marketing communications;

3.2.10. provide third parties with anonymised statistical information about our users (but those third parties will not be able to identify any individual user from that information);

3.2.11. deal with enquiries and complaints made by or about you relating to our website;

3.2.12. keep our website secure and prevent fraud;

3.2.13. verify compliance with the terms and conditions governing the use of our website(including monitoring private messages sent through our website private messaging service); If you submit personal information for publication on our website, we will publish and otherwise use that information with your agreement.

3.2.14 to contact you by phone after you become a customer to check you are happy with your subscription. If you consent to receive marketing from us, we may contact you by phone to let you know about our special offers and services.

4. Disclosing Personal Information

4.1. We may disclose your personal information to any of our employees, officers, insurers, professional advisers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this notice.

4.2. All our website financial transactions are handled through our payment services providers Braintree and Paypal. We will share information with our payment services provider only to the extent necessary for the purposes of processing payments you make via our website, refunding such payments and dealing with complaints and queries relating to such payments and refunds.

4.3. We may disclose your personal information to any member of our group of companies (this means our subsidiaries, our ultimate holding company and all its subsidiaries) insofar as reasonably necessary for the purposes set out in this notice.

4.4. We may also disclose your personal information:

4.4.1. to the extent that we are required to do so by law;

4.4.2. in connection with any ongoing or prospective legal proceedings;

4.4.3. in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk);

4.4.4. to the purchaser (or prospective purchaser) of any business or asset that we are (or are contemplating) selling; and

4.4.5. to any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information.

4.5. We engage third party service providers to support our operations. Where we work with third parties which process your personal information on our behalf, these third parties will only process your personal information in line with our instructions and in a secure manner. Where any third parties are based outside the UK or EEA, we ensure that adequate safeguards are in place to protect your personal information. Third parties that we engage include:

4.5.1 We use a third-party provider, Dot Digital, to deliver our email newsletter and other emails. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter.

4.5.2 We may share your data with marketing services providers we work with, who will use it to help us better understand the likely characteristics of our customers; communicate with them more effectively; and also identify prospective customers. This should mean that you receive direct marketing that is more relevant to you. This is known as profiling and you have the right not to be subject to this type of processing activity. Please contact hello@bellaandduke.com if you do not wish for your personal information to be used for profiling purposes.

4.5.3. We may acquire personal information about you from third party agencies for the purposes of designing marketing campaigns to you.

4.5.4. We work with Epsilon Abacus (registered as Epsilon International UK Ltd), a company that manages the Abacus Alliance on behalf of UK retailers. The participating retailers in the Abacus Alliance are active in the clothing, collectables, food & wine, gardening, gadgets & entertainment, health & beauty, household goods, and home interiors categories. Bella and Duke may share personal information about you and your purchase history with Epsilon Abacus in order that they may analyse this information to help us understand consumers’ wider buying patterns. If you do not wish for your personal data to be used for this purpose, please let us know at hello@bellaandduke.com

4.5.5 We also work with Experian Ltd and in this regard some of your personal information may be shared with Experian for the purposes of managing a service called Club Canvasse, a home shopping and direct retailer data co-operative of which Bella & Duke are members. By sharing information on what customers buy and pooling that with contributions from other members of the co-operative, the service allows us to better understand our customers and to communicate with you more effectively. Please note, your personal information is not shared with any of the other members of the co-operative, and only aggregated data on the number and value of purchases is provided to members e.g. we will receive a report which states how many customers who have bought from us in the last 0-12mths, and who have also bought from other members of the co-operative in the last 0-12mths, or the last 24mths, last 36mths etc. To understand more please click through to Experian’s website to understand more about their marketing services. If you do not wish for your personal data to be used for this purpose, please let us know at hello@bellaandduke.com.

4.5.6 We also work with Sky UK Limited (‘Sky’) and in this regard some of your personal information may be shared with Sky and third parties that may be appointed by Sky from time to time (including Google Ireland Limited, Virgin Media Limited, and Experian Limited) for the purposes of Web Attribution Services. Using cookies or similar technologies, Sky will investigate website usage, particularly in relation to the website activities and usage by users who have been exposed to particular advertising campaigns and those who have not. This allows us to evaluate the success of our advertising campaigns. Please note, the personal data processed by Sky for this purpose is your IP address and unique cookies IDs – which are fully anonymised. Nothing further is shared with Sky (for the avoidance of doubt, no special category data is shared). To understand more, please click through to Sky’s website to understand more about their Web Attribution Services. If you do not wish your personal data to be used for these purposes, please let us know at hello@bellaandduke.com.

5. Legal Basis for Processing your Data

Bella and Duke processes your personal information lawfully. What this means is that we will only process your personal data where we have identified a legal basis to do so. The table below sets out the lawful bases relied upon by us to process your personal information.

PurposePersonal DataLegal Basis
Administer our website and online business activitiesTechnical DataContract where we provide you with goods and services Legitimate interest – where we collect technical data
Personalise our website for youTechnical DataConsent to the use of non-essential cookies.
Enable your use of the services available on our websiteTechnical Data and Contact DataContract
Send you goods and supply you with services purchased through our websiteContact data and financial dataContract
Send statements, invoices and payment reminders to you, and collect payments from youContact data and financial dataContract
Send you service-related communications by post, email and text, depending on your communication preferenceContact dataContract
Managing your subscription to our email newsletter and marketing communicationsContact dataConsent for electronic marketing Legitimate interest for postal marketing
Provide third parties with anonymised statistical information about our usersAnonymised dataLegitimate Interest
Deal with enquiries and complaints made by or about you relating to our websiteContact dataLegitimate Interest
Keep our website secure and prevent fraudContact data & Technical DataLegitimate Interest
Verify compliance with the terms and conditions governing the use of our website[(including monitoring private messages sent through our website private messaging service)Contact data & Technical DataLegitimate Interest
Sharing information with third parties which help us to analyse customer data to better understand our customers, optimise customer experience and design effective marketing campaignsContact data & Technical DataLegitimate Interest
To contact you by phone to check you are happy with your subscription and to offer our products and services to youContact DataLegitimate Interest Consent (for marketing calls)

6. International Data Transfers

6.1. Information that we collect may be stored and processed in and transferred between any of the countries in which we operate in order to enable us to use the information in accordance with this notice. Currently, we do not operate outside of the UK.

6.2. Personal information that you publish on our website or submit for publication on our website may be available, via the internet, around the world. We cannot prevent the use or misuse of such information by others.

6.3. All your personal data is held securely on our servers located within the UK.

6.4. Your data may be shared outside the EEA with third parties we share personal data with, such as service suppliers, who are located outside the EEA. If we do transfer personal data outside the EEA, we ensure that appropriate safeguards are in place to protection your information.

7. Retaining Personal Information

7.1. This Section 7 sets out our data retention policies and procedure, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal information.

7.2. Personal information that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.

7.3. Notwithstanding the other provisions of this Section 7, we will retain documents (including electronic documents) containing personal data:

7.3.1. to the extent that we are required to do so by law;

7.3.2. if we believe that the documents may be relevant to any ongoing or prospective legal proceedings; and

7.3.3. in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk).

7.3.4. for the purposes of communication by email to non-customers for as long as the subject continues to Consent to the use of their data for this purpose (they can withdraw Consent at any time).

7.3.5. for up to 2 years after a customer receives their last product from us. If the customer has also Consented to receive marketing communications by post, email, or SMS, their data will be retained for as long as the subject to Consent to the use of their data for this purpose (they can withdraw Consent at any time).

8. Security of Your Personal Information

8.1. We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.

8.2. We will store all the personal information you provide on our secure (password- and firewall-protected) servers.

8.3. All electronic financial transactions entered into through our website will be protected by encryption technology.

8.4. You acknowledge that the transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.

8.5. You are responsible for keeping the password you use for accessing our website confidential; we will not ask you for your password (except when you log in to our website).

9. Your Rights

You have a number of legal rights in relation to your personal data. These are set out below. To exercise any of these rights, please contact hello@bellaandduke.com.

9.1. Right of Access You may ask us to provide you with a copy of personal information we hold about you;

9.2. Right to Object You have the right to object to the processing of your personal data for certain purposes, for example, marketing.

9.3. Right of Erasure You have the right to request that we deleted some or all of your personally data in certain circumstances. We reserve the right to retain certain personal information about you where we have a legal justification to do so, for example, we may need to retain transactional information for tax purposes.

9.4. Right of Rectification If you think that any of the information we hold about you is incorrect, you may request that we correct it.

9.5. Right to Restrict Processing. In certain situations you may ask for the processing of your personal data to be restricted.

9.6. Right to Withdraw Consent where you have given consent to process your personal data, you can withdraw this consent at any time.

9.7. Right not to be subject to Profiling or Automated-Decision Making you can ask that we do not use your personal data for this purpose.

9.8. Right to Complain. If you have any questions or you are not happy about something, please get in touch so we can help resolve any issues. Please contact us at hello@bellaandduke.com., call us on 01738 479 865 or write to us at the address above. If you have any further concerns about data protection, you can also contact the Information Commissioner’s Office (ICO) online or by calling 0303 123 1113.

10. Third party websites

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates.

10.1. Our website includes hyperlinks to, and details of, third party websites.

10.2. We have no control over, and are not responsible for, the privacy policies and practices of third parties.

11. Amendments

11.1. We may update this notice from time to time by publishing a new version on our website.

11.2. You should check this page occasionally to ensure you are happy with any changes to this notice.

11.3. We may notify you of changes to this notice, either by email or through the private messaging system on our website.

If you have any questions relating to this policy, please contact hello@bellaandduke.com.
Privacy Notice v1.2 (December 2024)