Privacy policy
1. Who We Are
Elmont Wear is an online retailer operated by:
LCOSTA ECOM LTD
Trading Name: Elmont Wear
Company Number: 17411451
Registered in: England and Wales
Registered Office: 483 Green Lanes, London, England, N13 4FG
Email: contact@elmontwear.co.uk
Website: elmontwear.co.uk
For the purposes of applicable UK data protection legislation, LCOSTA ECOM LTD is the data controller of the personal information described in this Privacy Policy, except where another party acts as an independent controller.
2. Data Protection Framework
We process personal information in accordance with applicable data protection and privacy legislation, including the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 ("PECR"), and applicable amendments or replacement legislation.
Our approach to personal information is based on principles including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality.
3. Personal Information We Collect
The personal information we collect depends on how you interact with our Site and Services.
We may collect the following categories of personal information:
Identity and contact information, including your name, billing address, shipping address, email address and telephone number.
Order and transaction information, including products ordered, order history, transaction details, delivery information, returns, refunds and customer service records.
Account information, where applicable, including login credentials, account preferences, saved addresses and purchase history.
Payment information, including information necessary to process your payment. Full payment card details are generally processed directly by our payment service providers rather than stored by us. We may receive limited information relating to your payment, such as transaction status, payment method, card type or other transaction identifiers.
Device and technical information, including IP address, browser type, operating system, device type, device identifiers, network information and information about how your device interacts with our Site.
Website usage information, including pages viewed, products viewed, links clicked, referring website, browsing activity, shopping cart activity, session information and interactions with our Site.
Marketing and advertising information, including your marketing preferences, interactions with marketing communications, advertisements and campaigns and, where permitted, information used to measure or personalise advertising.
Customer support information, including messages, emails, enquiries, complaints, returns requests and other communications you send to us.
Fraud prevention and security information, including information used to verify transactions, identify suspicious behaviour, reduce fraud, prevent misuse and protect our customers and our business.
Information from third parties, including information received from Shopify, payment providers, delivery providers, analytics providers, advertising platforms, fraud prevention services and other service providers we use to operate our business.
We do not intentionally request or collect special category personal data such as information concerning health, racial or ethnic origin, religious beliefs, political opinions, biometric information or sexual orientation as part of our ordinary retail activities.
4. How We Collect Personal Information
We may collect personal information:
- directly from you when you place an order, create an account, contact us, subscribe to marketing communications or otherwise provide information to us;
- automatically when you access or use our Site, including through cookies, pixels and similar technologies;
- from Shopify and other service providers that help us operate our store;
- from payment processors, delivery providers, fraud prevention providers and customer support services;
- from analytics, advertising and marketing partners where such collection is permitted by applicable law and your consent choices; and
- from publicly available or other lawful sources where appropriate.
5. How We Use Your Personal Information
We may process personal information for the following purposes.
Providing Our Services
We use personal information to process payments, fulfil orders, arrange delivery, provide order confirmations and updates, manage returns and refunds, maintain customer accounts and provide customer support.
Our lawful basis is generally that processing is necessary to perform a contract with you or take steps at your request before entering into a contract.
Processing Payments
We and our payment service providers process information necessary to authorise, complete and administer payments, refunds and related transactions.
Processing is generally necessary for the performance of our contract with you, compliance with legal obligations and our legitimate interests in operating a secure business.
Fraud Prevention and Security
We may use personal information to identify suspicious activity, prevent fraud, protect accounts, secure our Site, prevent abuse and protect our legal rights.
Our lawful basis is generally our legitimate interests in protecting our business, customers and Services and, where applicable, compliance with legal obligations.
Customer Service
We use your information to respond to enquiries, complaints, delivery issues, returns, refunds and other customer service requests.
Depending on the request, processing may be necessary for the performance of our contract with you or based on our legitimate interests in providing effective customer support.
Legal and Regulatory Compliance
We may process information to comply with tax, accounting, corporate, consumer protection, fraud prevention, law enforcement and other legal requirements.
Our lawful basis is compliance with a legal obligation.
Improving Our Website and Services
We may analyse how visitors use our Site to understand performance, improve functionality, improve products and services, diagnose technical issues and improve the customer experience.
Where non-essential cookies or similar technologies are involved, we will rely on your consent where required by applicable law.
For other limited analytics or operational activities, we may rely on our legitimate interests where permitted.
Marketing
Where permitted by law, we may use your personal information to send you information about products, promotions, offers, new collections or other marketing communications.
We may rely on your consent or another lawful basis permitted under applicable direct marketing laws, including applicable provisions of PECR.
You can unsubscribe from email marketing at any time by using the unsubscribe link contained in our marketing emails or by contacting us.
Advertising
Where you provide the necessary consent, we and our advertising partners may use cookies, pixels and similar technologies to measure advertising performance, understand interactions with advertisements and provide advertising that may be more relevant to you.
You can manage your preferences through our cookie consent tools.
6. Shopify
Our online store is hosted by Shopify, which provides the ecommerce platform that enables us to provide the Services to you.
Shopify processes personal information when you visit our Site, use the Services or make a purchase. This may include information relating to your device, browsing activity, transactions and interactions with Elmont Wear.
Information may be shared with Shopify and processed by Shopify and its service providers in countries other than the country in which you live where necessary to provide the Services.
Depending on the Shopify services and features enabled on our store, Shopify may also process information derived from your interactions with Elmont Wear, Shopify and other Shopify merchants in order to provide enhanced services, including services relating to security, fraud prevention, analytics, personalisation and advertising.
For further information regarding Shopify's processing practices, please review the Shopify Consumer Privacy Policy.
You may also use the Shopify Privacy Portal to obtain information regarding certain privacy choices and rights relating to Shopify's processing.
7. Shopify Network Intelligence and Enhanced Services
Where Shopify Network Intelligence is enabled on our store, Shopify may securely use customer data from interactions with Elmont Wear together with information derived from interactions with Shopify and other Shopify merchants to generate insights and provide enhanced Shopify services.
These enhanced services may include features relating to fraud protection, analytics, personalisation, search, marketing or advertising.
Shopify does not provide other merchants with direct access to Elmont Wear customer information merely because Network Intelligence is enabled.
Where UK or other applicable privacy law requires consent for advertising, tracking or other non-essential processing, these activities will be subject to your consent choices.
You may withdraw or modify your consent through the privacy or cookie controls available on our Site.
Further information about Shopify's processing and applicable privacy rights is available through the Shopify Consumer Privacy Policy and Shopify Privacy Portal.
8. Cookies and Similar Technologies
Our Site uses cookies, pixels, tags, local storage and similar technologies.
These technologies may be used to:
Essential functions: operate the Site, maintain security, process shopping carts, remember checkout information and provide functionality necessary for the Services.
Preferences and functionality: remember selections and improve Site functionality.
Analytics: understand how visitors interact with our Site and measure Site performance.
Advertising and marketing: measure marketing campaigns and, where you consent, deliver or measure personalised advertising.
Where required by law, non-essential cookies and tracking technologies will not be activated until you have provided the necessary consent.
You can accept, reject or manage non-essential cookies through the cookie consent controls available on our Site.
You may withdraw your consent or change your preferences at any time through the available privacy or cookie settings.
Disabling certain cookies may affect some Site features, but refusing non-essential cookies will not prevent you from accessing the essential functionality of our store.
9. Advertising and Analytics Providers
Where enabled on our Site and permitted by your consent preferences, we may work with analytics and advertising providers, which may include platforms such as Meta, Google or similar providers.
These providers may use cookies, pixels, device identifiers and similar technologies to measure advertising, understand Site activity, attribute sales or conversions and provide advertising services.
These providers may process information under their own privacy policies and, in certain circumstances, may act as independent data controllers.
Where consent is required, advertising and analytics technologies will be subject to your cookie consent preferences.
10. How We Share Personal Information
We may disclose personal information where reasonably necessary to operate our business and provide our Services.
Recipients may include:
Shopify, which hosts and supports our ecommerce store.
Payment processors and financial service providers, for payment authorisation, fraud prevention, refunds and financial transactions.
Shipping, fulfilment and delivery partners, so that orders can be processed, shipped, tracked and delivered.
IT, hosting and technology providers, which provide infrastructure, website functionality, security and technical support.
Customer service providers, where used to assist in managing customer enquiries.
Email and communications providers, where used to send transactional or marketing communications.
Analytics and advertising providers, where enabled and permitted by law and your privacy choices.
Fraud prevention and security providers, where necessary to detect, investigate and prevent fraudulent or suspicious activity.
Professional advisers, such as accountants, lawyers, insurers and auditors where reasonably necessary.
Government authorities, courts, regulators or law enforcement, where disclosure is required by law or reasonably necessary to protect our legal rights.
We may also transfer personal information in connection with a merger, restructuring, financing, acquisition, sale of assets or other business transaction, subject to applicable legal requirements.
We do not disclose personal information merely in exchange for money. However, certain privacy laws may define some advertising or technology-related disclosures as "sharing", "sale" or similar concepts. Where such laws apply, we will provide applicable rights and controls.
11. Payment Processing
Payments made through our Site may be processed by Shopify Payments or other payment service providers available at checkout.
Payment providers may collect and process information necessary to authenticate and complete transactions and prevent fraud.
Payment providers may act as independent data controllers or processors depending on the relevant processing activity and may process personal information according to their own privacy policies.
We generally do not receive or store your complete payment card number or card security code.
12. Order Fulfilment and Delivery
We may provide your name, shipping address, telephone number, email address and relevant order information to fulfilment partners, carriers, postal services or other delivery providers where necessary to fulfil and deliver your order.
These providers may process your information in accordance with their own legal obligations and privacy practices.
13. International Transfers
Some of our service providers, including Shopify and other technology, payment, analytics or advertising providers, may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate lawful transfer mechanism is used where required.
Such safeguards may include UK adequacy regulations, approved contractual protections such as the UK International Data Transfer Agreement, the UK Addendum to standard contractual clauses, or other lawful safeguards recognised under applicable UK data protection legislation.
The protections available may depend on the relevant service provider, processing activity and destination country.
14. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing customer service, resolving disputes, preventing fraud and complying with tax, accounting and other legal obligations.
Retention periods may vary depending on the category of information and applicable legal requirements.
For example, certain accounting and transaction records may need to be retained for six years from the end of the relevant company financial year for UK tax and accounting purposes.
Information may be retained for longer where necessary in connection with legal claims, investigations, regulatory requirements or unresolved disputes.
When information is no longer required, we will delete, anonymise or otherwise securely dispose of it where reasonably practicable.
15. Data Security
We use reasonable administrative, organisational and technical measures designed to protect personal information against unauthorised access, disclosure, alteration, misuse or loss.
We also rely on service providers such as Shopify and payment providers that maintain their own security measures.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure. You should therefore use appropriate precautions when providing information online.
If you believe your interaction with us is no longer secure, please contact us at contact@elmontwear.co.uk.
16. Your Privacy Rights
Depending on applicable law and the circumstances, you may have the right to:
- request confirmation as to whether we process your personal information and obtain access to it;
- request correction of inaccurate or incomplete personal information;
- request deletion of your personal information in certain circumstances;
- request restriction of processing;
- receive certain personal information in a portable format;
- object to certain processing based on legitimate interests;
- object at any time to the use of your personal information for direct marketing;
- withdraw consent at any time where processing is based on consent, without affecting processing carried out before withdrawal;
- request information about safeguards used for certain international transfers;
- exercise applicable rights relating to solely automated decisions that produce legal or similarly significant effects; and
- lodge a complaint with a relevant data protection supervisory authority.
These rights are not absolute and may be subject to legal exceptions.
To exercise your rights, contact us at:
We may need to verify your identity before responding to certain requests.
We will respond within the timeframe required by applicable law.
The UK GDPR recognises rights including access, rectification, erasure, restriction, portability and objection, including an absolute right to object to processing for direct marketing. ICO
17. Automated Decision-Making and Fraud Screening
We and our service providers may use automated systems to assist with payment processing, fraud detection, security and risk assessment.
These systems may evaluate information such as transaction details, device information, payment information, order history or patterns associated with fraudulent activity.
Where a decision is made solely by automated means and produces legal or similarly significant effects, you may have additional rights under applicable data protection law.
You can contact us if you have questions or wish to exercise applicable rights concerning automated decision-making.
18. Marketing Communications
If you have agreed to receive marketing communications, or where otherwise permitted by applicable law, we may contact you regarding products, promotions, collections or other Elmont Wear news.
You can unsubscribe at any time by selecting the unsubscribe option contained in the relevant communication.
We will continue to send essential transactional messages relating to purchases, payments, delivery, returns, security or customer service even if you opt out of marketing communications.
19. Your Cookie and Consent Choices
Where required, you can manage your cookie preferences through the cookie banner or privacy preference controls available on the Site.
Consent can be withdrawn at any time.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Where Shopify Network Intelligence or other enhanced advertising services are enabled, your consent choices may also affect whether information from your activity on our Site can be used for non-essential purposes.
20. Third-Party Websites
Our Site may contain links to websites or services operated by third parties.
We are not responsible for the privacy, security or content practices of third-party websites.
We recommend reviewing the privacy policy of any third-party service before providing personal information.
21. Children's Privacy
Our Services are not directed specifically at children, and we do not knowingly seek to collect personal information from children.
If you believe that a child has provided personal information to us inappropriately, please contact us at contact@elmontwear.co.uk so that we can review the matter and take appropriate action.
22. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business practices, technology, legal obligations, Shopify services or other operational requirements.
When we update this Privacy Policy, we will revise the "Last updated" date at the top of this page.
Where required by applicable law, we may provide additional notice of material changes.
We encourage you to review this Privacy Policy periodically.
23. Complaints
If you have concerns about how we collect or use your personal information, please contact us first so that we can investigate and respond to your concern.
You can contact us at:
You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection supervisory authority, if you believe that your personal information has been handled in breach of applicable data protection law.
24. Contact Us
For questions regarding this Privacy Policy, requests relating to your personal information or privacy complaints, please contact:
Elmont Wear
Operated by LCOSTA ECOM LTD
Company Number: 17411451
483 Green Lanes
London
England
N13 4FG
United Kingdom
Email: contact@elmontwear.co.uk
Website: elmontwear.co.uk