1. INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE DATA CONTROLLER

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you how we process your personal data when you use our website. Personal data is any information that can be used to identify you.

1.2 The data controller for personal data on this website, within the meaning of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, is:

Eleanor Lacey Operated by: Faircrest Holdings LLC Address: 312 W 2nd St, Unit #A8978, Casper, WY 82601, United States

Contact email: support@eleanorlacey.co.uk

The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 For security reasons, this website uses SSL/TLS encryption. You can recognise a secure connection by the "https://" prefix and the padlock icon in your browser.

2. DATA COLLECTION WHEN VISITING OUR WEBSITE

If you use our website purely for informational purposes, we only collect data that your browser transmits to our server (server log files), including:

• website visited
• date and time of access
• amount of data transferred (in bytes)
• source/referrer
• browser used
• operating system used
• IP address

Legal basis: Art. 6(1)(f) UK GDPR — legitimate interest in improving the stability and functionality of the website.

3. COOKIES

We use cookies to enhance your visit and enable certain features. These are small text files stored on your device.

• Session cookies: deleted when the browser is closed
• Persistent cookies: remain on your device and allow us or our partners to recognise your browser on future visits

The use of analytical and marketing cookies only takes place after your consent via the cookie banner (Art. 6(1)(a) UK GDPR and the Privacy and Electronic Communications Regulations 2003).

Cookies strictly necessary for the functioning of the website do not require consent and are processed on the basis of Art. 6(1)(b) or (f) UK GDPR.

You can configure your browser to notify you about cookies or block them entirely:

• Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
• Chrome: https://support.google.com/chrome/answer/95647
• Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
• Opera: https://help.opera.com/en/latest/web-preferences/

Please note: if you do not accept cookies, some features of our website may be limited.

4. CONTACT

When you contact us by email, we collect the personal data provided, which is used solely to respond to your enquiry and for related technical administration.

Legal basis: Art. 6(1)(f) UK GDPR. If the contact concerns a contract: Art. 6(1)(b) UK GDPR.

Your data will be deleted after the matter is finally resolved, unless legal retention obligations apply.

5. CUSTOMER ACCOUNT AND CONTRACT DATA

Personal data is collected and processed when you provide it to us for the purpose of executing a contract or creating a customer account.

Legal basis: Art. 6(1)(b) UK GDPR.

You may delete your account at any time by contacting: support@eleanorlacey.co.uk

After full execution of the contract or deletion of the account, your data will be restricted and deleted after the applicable legal retention periods.

6. DIRECT MARKETING

6.1 Email Newsletter

If you subscribe to our newsletter, we will regularly send you information about our offers. You will only receive the newsletter if you have given your consent.

Legal basis: Art. 6(1)(a) UK GDPR and the Privacy and Electronic Communications Regulations 2003.

You may unsubscribe at any time via the link in the email or by writing to: support@eleanorlacey.co.uk

6.2 Existing Customers

If you provided your email address when making a purchase and did not object at that time, we reserve the right to send you offers for similar products. You can object at any time, including via the link in each email.

Legal basis: Art. 6(1)(f) UK GDPR and regulation 22(3) of the Privacy and Electronic Communications Regulations 2003.

You may object at any time by writing to: support@eleanorlacey.co.uk

7. ORDER PROCESSING

7.1 Personal data is shared with the delivery company and payment providers solely to the extent necessary to fulfil the order.

Legal basis: Art. 6(1)(b) UK GDPR.

7.2 Payment Service Providers

Payment data is transmitted to the payment provider of the payment method you choose at checkout, which processes it under its own privacy policy. Card details are handled by the payment provider and are not stored by us.

7.3 Store Platform

Our online store is hosted by Shopify, which processes personal data on our behalf in order to run the store.

8. REVIEW REMINDER

We may send you a one-time email reminder to review your order, subject to your consent (Art. 6(1)(a) UK GDPR). You may withdraw your consent at any time by contacting: support@eleanorlacey.co.uk

9. SOCIAL MEDIA

Facebook and Instagram: Our website contains links to our pages on these platforms. If you click on these links, the respective platform may process your data under its own privacy policy. More information: https://www.facebook.com/privacy/policy/ and https://privacycenter.instagram.com/policy/

10. ONLINE MARKETING

Google Ads and Conversion Tracking: We use Google Ads and conversion tracking only after obtaining your consent via the cookie banner. A cookie is set after clicking on an ad and is used to create conversion statistics.

Legal basis: Art. 6(1)(a) UK GDPR. More information: https://policies.google.com/privacy

11. WEB ANALYTICS — GOOGLE ANALYTICS

We use Google Analytics only after obtaining your consent via the cookie banner (Art. 6(1)(a) UK GDPR).

You may withdraw your consent in the cookie settings on our website or install the opt-out add-on: https://tools.google.com/dlpage/gaoptout

12. RETARGETING / REMARKETING

Meta (Facebook) Pixel: We use the Meta Pixel only after obtaining your consent (Art. 6(1)(a) UK GDPR). Meta may link this data to your profile. More information: https://www.facebook.com/privacy/policy/

Google Remarketing: We use Google Remarketing only after obtaining your consent (Art. 6(1)(a) UK GDPR). More information: https://policies.google.com/technologies/ads

13. INTERNATIONAL TRANSFERS

We are based in the United States, and some of our service providers process personal data outside the United Kingdom. Where personal data is transferred outside the United Kingdom, this is done under the safeguards required by UK data protection law.

14. RIGHTS OF THE DATA SUBJECT

You have the following rights:

• Right of access (Art. 15 UK GDPR)
• Right to rectification (Art. 16 UK GDPR)
• Right to erasure (Art. 17 UK GDPR)
• Right to restriction of processing (Art. 18 UK GDPR)
• Right to data portability (Art. 20 UK GDPR)
• Right to withdraw consent (Art. 7(3) UK GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 UK GDPR)

In the United Kingdom, the supervisory authority is the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk

To exercise your rights, contact us: support@eleanorlacey.co.uk

Right to Object

If we process data on the basis of legitimate interest, you may object at any time. We will cease processing unless we demonstrate compelling legitimate grounds or processing is necessary for the establishment, exercise or defence of legal claims. If you object to direct marketing, we will stop using your data for that purpose.

15. DATA RETENTION

Personal data is retained in accordance with applicable legal retention periods (tax and commercial). After these periods expire, data is routinely deleted unless still required for contractual purposes or a justified legitimate interest exists.