Privacy Policy

This Privacy Policy explains what types of personal information we collect, why we collect it, how we use it, and your rights in relation to your data. Please read this policy carefully alongside our Cookies Policy. All personal information is controlled by the operator of shopbluedresses.com.

Whom This Applies To

This privacy notice applies to all personal information we collect from members of the public whether online through our website. This does not apply to employees, who are covered by a separate policy. Our services are not directed at children under the age of 16, and we do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 16 without appropriate consent, we will delete it promptly.

What Type of Information We Collect

We currently collect and process the following types of information:

Payment Details – When you place an order, we will collect your payment details and process these securely in order to take payment for your order. You can choose to save your payment details on your online account for ease. We will keep a record of the financial transaction for legal reasons.

Purchase History – We record and keep the details of any transactions you make with us, including details of the products you have bought from us. We use this information to assist with the selection of future products.

Contact History – Whenever you contact our customer service team, we will store a record of our conversations with you in order to better assist you next time. Some information will also be used for training purposes.

Online Identifiers & Technical Information – We may collect personal information through our use of cookies, pixels, beacons, log files and other technologies. We may use this information to administer our website for internal operations, troubleshooting, testing and improvements and optimisation. This might include information regarding your mobile device, computer hardware and software used to access our website, such as the IP address of device(s) used, browser type, operating system and device type, referring website addresses, access times and dates, and approximate location. This type of personal information is laid out in more detail in our Cookie Policy.

Website Analytics & Experience Optimisation – We also use website analytics, personalisation and experience optimisation tools to help us understand how visitors use our website, improve site performance and functionality, personalise content, test features, identify technical issues and improve the customer experience. These tools may collect information about how you interact with our website, including pages viewed, navigation journeys, clicks, taps, scrolling, cursor or mouse movements, selected page elements, form interactions, device and browser information, screen size, approximate location and general usage data. Some tools may use session replay or similar technology to recreate aspects of a visit to our website, such as page navigation, clicks, scrolling and cursor movement. We use this information to analyse usability and troubleshoot website issues. We do not use these tools to intentionally capture sensitive information, such as payment card details or passwords, and we take steps to mask or exclude protected fields where appropriate.

Advertising & Retargeting Technologies – We may use advertising and retargeting technologies through various platforms where these are enabled through our cookie consent settings. More information is set out in our Cookie Policy.

How We Collect It and Why

We collect personal information for the following purposes:

To process and fulfil your orders.
To manage your online account.
To communicate with you regarding your orders and inquiries.
To personalise your shopping experience and recommend products that may interest you.
To improve our website, products and services.
To detect and prevent fraud.
To comply with legal obligations.

Legal Bases for Processing

Under applicable data protection laws, the lawful bases we rely on for processing this information are:

(a) Consent – You have given clear consent for us to process your personal data for specific purposes (for example, marketing communications). You are able to remove your consent at any time.

(b) Contract – The processing is necessary for the performance of a contract (for example, fulfilling your order).

(c) Legal Obligation – We are required by law to retain some data (for example, for tax purposes).

(d) Legitimate Interest – We have a legitimate business reason to process your data, and this is not overridden by your rights and interests (for example, fraud prevention, improving user experience).

We will not sell or rent your information to any third party without your express consent unless we are required or permitted to do so by law. We share your personal data with trusted third parties who support us in delivering our services. These include payment processors, delivery and logistics providers, IT and system support providers, marketing and analytics service providers, and professional advisers.

Where we engage third parties to process your personal data, we ensure that appropriate contracts are in place to safeguard your information in accordance with data protection law. Some of our service providers may be located outside your country of residence. Where this is the case, we ensure adequate safeguards are in place.

Security & Retention of Your Data

We implement physical, technical and organisational safeguards to protect your data from unauthorised access, use or disclosure. This includes encryption, access controls, secure storage and regular review of our security practices.

Any information you provide reaches us fully encrypted through a secure connection – a special security layer added to your account and checkout pages. You can see when you are on a secure page because the address in your browser will begin with the secure protocol.

We retain your personal data only for as long as necessary for the purposes described in this notice or as required by law. Once your data is no longer needed, we will securely delete or anonymise it.

Your Data Protection Rights

Under data protection law, you have rights including:

Right to access – You have the right to request a copy of the personal information we hold about you.
Right to rectification – You have the right to request that we correct any inaccurate or incomplete information.
Right to erasure – You have the right to request that we delete your personal information in certain circumstances.
Right to restriction – You have the right to request that we restrict the processing of your personal information in certain circumstances.
Right to data portability – You have the right to request that we transfer your personal information to another organisation, or directly to you, in certain circumstances.
Right to object – You have the right to object to our processing of your personal information in certain circumstances, including for direct marketing purposes.
Rights related to automated decision-making – You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you.

You can exercise your rights by contacting us through the methods available on our website. We will respond within the timeframes required by applicable law. You do not have to pay to exercise your rights.

Complaints

If you are unhappy with how we have handled your data, please contact us. You also have the right to complain to the relevant data protection supervisory authority in your country of residence.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons. We encourage you to review this policy periodically. The most current version will always be available on our website.