Privacy policy

Privacy Policy

This Privacy Policy describes how Willmere (74 Marylebone Lane, London, W1U 2PW, United Kingdom) collects, processes and protects your personal data when you visit our website willmere.shop or shop with us. We process personal data in accordance with the UK GDPR and the Data Protection Act 2018.

1. Data controller

Willmere
74 Marylebone Lane, London, W1U 2PW, United Kingdom
E-mail: contact@willmere.shop
Phone: +447348449827

2. Data we collect

Order data: name, delivery and billing address, e-mail address, phone number, items ordered, payment method (no full card details)
Account data: login details and order history if you create an account
Communication data: the content of your e-mails, calls or chat messages to our customer service
Usage data: IP address, browser type, pages visited, referral source (via cookies — see section 5)

3. Purposes and legal bases

Processing your order (contract performance, Art. 6(1)(b) UK GDPR)
Customer service and complaint handling (contract performance / legitimate interests, Art. 6(1)(b) and (f))
Legal obligations such as tax and accounting record-keeping (Art. 6(1)(c))
Marketing e-mails only with your consent (Art. 6(1)(a)) — you can unsubscribe at any time
Website analytics and improvement with your consent via the cookie banner (Art. 6(1)(a))

4. Sharing with third parties

Data is shared only with the following categories of recipients, to the extent necessary to perform the contract:

Payment providers: Visa, Mastercard, American Express, Apple Pay, Google Pay
Delivery providers: Royal Mail and partner couriers
Hosting: Shopify Inc. (platform and data storage)
Analytics: Google Analytics (anonymised, IP anonymisation active — only with your consent)

All third parties are contractually bound to comply with applicable data protection law. Where data is transferred outside the UK, we rely on adequacy regulations or the UK International Data Transfer Agreement/Addendum (IDTA) with appropriate safeguards.

5. Cookies and consent

We use cookies. On your first visit a cookie banner lets you give or refuse consent per category. You can change or withdraw your consent at any time via the "Cookie settings" link in the footer.

Strictly necessary cookies: required for the shop to function (cart, session, security) — no consent required
Functional cookies: enhanced features and personalisation — only with consent
Performance cookies: anonymous usage statistics (e.g. Google Analytics with IP anonymisation) — only with consent
Targeting cookies: advertising relevance — only with consent

6. Data retention

We keep personal data only as long as necessary or legally required (generally 6 years for accounting and tax records, per HMRC requirements). Data no longer needed is deleted or anonymised.

7. Your rights under the UK GDPR

You have the right to:

Access — a copy of the personal data we hold about you
Rectification — correction of inaccurate data
Erasure — deletion of your data where there is no overriding legal basis
Restriction of processing
Data portability — your data in a structured, machine-readable format
Object — to processing based on legitimate interests and to direct marketing
Withdraw consent at any time with future effect

To exercise your rights, contact us at contact@willmere.shop. We respond to data-rights requests within the statutory period of one month. General enquiries are usually answered within 24 hours.

Supervisory authority: you have the right to lodge a complaint with the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk.

8. Data security

Our website uses SSL/TLS encryption. Payment data is processed exclusively by certified payment providers (PCI-DSS). We apply technical and organisational measures to protect your data against loss, misuse and unauthorised access.