Our Privacy Policy


Our Privacy Policy

We understand how important your personal data is and this is our company privacy policy that outlines exactly how we use your data, process and store it, your rights (in relation to the personal details you provide us) and explains how we comply with the new GDPR EU law on data protection ( GDPR EU 2016/679 ) introduced in May 2018.

If you have any questions please do not hesitate to contact us elliesbeautifulmess@yahoo.com


Who we are

References to “us”, “we” and “our” in the policy refers to ElliesBeautifulMess as a whole.

The term “individuals” or “customer” is used to describe anyone that may provide us with personal information when placing an order or

Anyone requesting an order or an invoice for a future order
Any customer that requires their order delivered to them
Any customer that provides their information and agrees to further contact from us.


2.   How we use your Data

We require personal information from you to fulfil and arrange delivery your orders which is generally taken through our secure website or through messages or company emails.

You are under no obligation to provide us with any personal information but unfortunately, we are unable to provide and products or services without specific data.

Anyone whose personal data we hold has the right to object to us using it at any time.  They can do this in writing via email and we will consider the best outcome.  A decision will then be made and we will stop using the individual’s information or we will explain why we cannot if this time and formulate an appropriate solution.  See below for more details.


3.  What personal data do we collect?

Basic personal details such as name, email address and postal address.

Some orders require personalisation and in those circumstances we would ask the customer to supply the wording or colours or design alterations that they require.

All payment details are encrypted at our end so we don’t ever collect your card or Paypal details and have no access to them other than to send a refund when and if required.

Our website is supported by Shopify and they have brought their systems in line with the new regulations so that once orders are completed, any data gathered can then be deleted once surplus to requirements.  All customer’s details are stored securely as orders are pending and aren’t retained unless at the customers request.


4.  How do we use your personal information?

We use the information you provide us to send your products to you at your request and keep you updated on delivery times and/or tracking information.

Sometimes we will contact customers to keep them informed of any delays or problems with their order or to answer any queries, comments, feedback or questions they may have.


5.   Sources of collecting information

The main way we collect data is to ask customers to input it themselves when prompted as they checkout on the website so its collated directly from customers in most cases.

Other forms of ordering bespoke items mean that this information my be collected via email, or messages on facebook, Instagram, Twitter or Pinterest.



6.   Who do we share your personal information with?

We will never sell or share your personal information to any unnecessary third party in any circumstance.

The only time we do have to share is with Royal Mail or MyHermes as these are the two companies we use to deliver our products.  They are also obliged to keep all of your information safe and secure under their own privacy procedures.

We will never send you unsolicited emails or use your information to contact you for marketing purposes.  As a company, we hope that you will find us when and if you need something and we have never retained personal information for marketing purposes.


7.   How long do we keep your information

We keep information for as long as necessary to fulfil the sale or as required by law.


8.   Your rights

Any individual that has provided us with their personal data has the right to

   Object to us processing it.  We will either agree to stop or explain why it may not be possible at the time with a view to rectifying the situation as soon as possible.

Ask for a copy of their information currently being held subject to certain exceptions (a data subject access request)

Ask us to correct or update their personal information to ensure its accuracy (the right of rectification)

Ask us to delete their personal information once its no longer required for the original purpose. (The right to be forgotten)

Ask us to restrict the processing of their personal information in certain circumstances (the right of restriction )

Ask for a copy of their personal information to be used for their own purposes. (The right to portability)

The right to complain if they feel their personal data has been mishandled.  (The right to withdraw consent)



9.  Changes to our Fair Processing Notice

We may update this policy from time to time.  Significant changes will be announced on social media but please regularly check this policy for your own peace of mind and to make sure that you are aware of the most up to date version

This privacy policy was last updated on 23rd May 2018