Privacy & Cookies

Introduction

Notes London Ltd (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, and protect your information when you visit our website www.noteslondon.co.uk or purchase from us. Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it.

What Data We Collect

We may collect and process the following types of personal data:

Personal details (name, email, billing/shipping address, phone number)
Payment information (processed securely via third-party payment providers)
Account data (login details, purchase history)
Technical data (IP address, browser type, device information, time zone)
Marketing preferences and communication history

How We Collect Data

We collect your data in the following ways:

When you make a purchase or create an account
When you subscribe to our newsletter
When you contact our support team or fill out a form
Through cookies and analytics tools
From social media or advertising partners (where applicable)

How We Use Your Personal Data

We use your data for the following purposes, based on the lawful grounds under UK GDPR:

To process and deliver your orders (Contract)
To communicate updates or respond to enquiries (Contract / Legitimate Interest)
To send marketing communications (Consent)
To prevent fraud and ensure website security (Legitimate Interest)
To analyse site usage and improve our services (Consent)

How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, including any legal, accounting, or reporting requirements. For example, we may retain order information for up to seven years to comply with UK tax and accounting laws.

Who We Share Your Data With

We may share your data with trusted third parties who perform services on our behalf, including:

Payment processors (e.g., Stripe)
Delivery and logistics providers (e.g., Royal Mail, DPD)
IT and hosting service providers
Marketing and analytics providers (e.g., Google, Meta)
Legal or regulatory authorities where required

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

International Data Transfers

If we transfer your personal data outside the UK or EEA, we ensure appropriate safeguards are in place, such as the use of standard contractual clauses approved by the UK Information Commissioner’s Office (ICO).

Your Data Protection Rights

Under UK GDPR, you have the right to:

Access your personal data
Request correction or deletion of your data
Object to or restrict data processing
Request data portability
Withdraw consent at any time
Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise any of these rights, please contact us at [email protected].

Cookies Policy

We use cookies to enhance your browsing experience, analyse site performance, and provide relevant marketing content.

Types of cookies we use:

Essential cookies (required for basic site functionality)
Analytics cookies (to understand website usage)
Marketing cookies (for personalised advertising)

You can manage or disable cookies via your browser settings or through our Cookie Settings panel. Non-essential cookies will only be set with your consent, in line with the Privacy and Electronic Communications Regulations (PECR).

Policy Updates

We may update this Privacy & Cookies Policy periodically to reflect changes in our practices or for legal reasons. Any updates will be posted on this page with an updated revision date.

Contact Information

If you have any questions about this Privacy & Cookies Policy or wish to exercise your data protection rights, please contact us at:

Email: [email protected]
Address: Unit 10, The Axis Centre, Cleeve Road, Leatherhead, KT22 7RD