Your privacy is important to Aimee Joyce London (“we”, “us”, “our”). We are committed to keeping your personal data safe, secure, and never misused. This Privacy Policy explains what information we collect, how we use it, and how we protect your privacy when you visit our website.
By using this website, you confirm that you have read and understood this policy.
Aimee Joyce London Ltd Registered Company Number: 11017689, is the Data Controller responsible for your personal data, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What Information Do We Collect?
We only collect personal information necessary for legitimate business purposes, where you have consented, or where we are legally required to do so.
1. Account Information
If you create an account, we may collect:
- Name
- Date of birth
- Email address
- Billing and delivery address
- Order history
- Telephone number
Your password is encrypted and not accessible to us. You are responsible for keeping your account credentials secure.
2. Orders
When you place an order, we receive:
- Name
- Email address
- Mailing address
- Product details
We do not receive your payment card details. Payments are processed securely by our third-party payment providers acting as Data Processors.
3. Cookies
We collect information through cookies used in your browser. Please refer to our Cookies Policy for full details.
4. Website Usage Data
We collect anonymised information such as:
- IP address (anonymised where possible)
- Browser type and device
- Country location
- Pages visited
- Search terms used to find our website
This helps us improve user experience and is typically gathered through analytics tools.
5. Social Media
If you contact us through social media, we may collect your username and correspondence history to respond to your enquiry. Social platforms operate under their own privacy policies.
How We Use Your Information
We process your data only where lawful, including contractual necessity, legal obligations, legitimate interests, or consent. We use your data to:
1. Verify your identity
2. Process and deliver orders
3. Manage refunds, complaints, and customer support
4. Prevent fraud and protect accounts
5. Process payments and prevent fraudulent transactions
6. Send marketing emails (with your consent) — you can unsubscribe anytime
7. Send legally required communications (e.g., policy updates, recalls)
8. Run promotions you enter
9. Conduct market research
10. Comply with legal obligations, including law enforcement requests
How We Protect Your Personal Data
We take data security seriously and use:
- SSL encryption and secure HTTPS connections
- Password-protected systems
- Tokenisation of payment data
- Regular system monitoring and security testing
How Long We Keep Your Data
We retain personal data only as long as necessary:
- Account data: while your account is active
- Customer service communications: up to 3 years
- Order data: as required for legal, tax, and contractual purposes
Who We Share Your Data With
We work with trusted service providers who help operate our business, including:
- Payment providers
- Delivery partners
- Website hosting providers
- Marketing and advertising partners
- Fraud prevention agencies
- Law enforcement (when required)
These partners:
- Only receive necessary data
- Can only use it for specified services
- Must maintain strict security
- Must delete or anonymise data after service ends
Third-Party Advertising & Analytics
Some partners may collect digital identifiers and browsing data for advertising and analytics. For more information, see:
- https://rakutenadvertising.com/legal-notices/services-privacy-policy/
- https://rakutenadvertising.com/legal-notices/services-privacy-rights-requestform/
Your Rights
- Under data protection law, you have the right to:
- Be informed about data use
- Access your personal data
- Correct inaccurate data
- Request deletion (in certain cases)
- Withdraw consent and stop marketing
- Request data transfer
- Complain to the UK regulator, the Information Commissioner’s Office (ICO)
Security Notice
We use high-level encryption technologies. We will never email asking for passwords or card details.
External Links
Our site may link to external websites. We are not responsible for their privacy practices.
Data Breaches
If a data breach occurs involving personal data, we will notify relevant authorities and affected individuals within 72 hours where required by law.
Children’s Data
We do not knowingly collect personal data from children under 13. Parental consent is required for minors.
Policy Updates
We may update this Privacy Policy to reflect legal or operational changes. Please check this page periodically. If you’d like, I can also format this into website-ready HTML or add a Cookies Policy to match.