Privacy Policy
This privacy policy describes how and when Rosewood & Moss (‘we’, ‘us’ and ‘our’) collects, uses, and shares your personal information. We reserve the right to change this privacy policy from time to time at our discretion, so please review it periodically. You can review the most current version of this policy at any time on this page. If you do not agree to any of these terms, please do not use (or continue to use) the website or the shop.
​
Information we collect and why
​
We receive, collect and store any information you enter on our website (‘rosewoodandmoss.co.uk’) or provide us in any other way such as through Etsy or by email.
​
As part of the process when you make an order, we will collect personal information you give us such as your name, address, phone number and email address; payment details including credit card information; details of the items you view, put in your shopping basket or order; account details such as password, security questions and communication preferences; product reviews; comments and feedback. Your personal information will be used for the specific reasons stated below only.
​
We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page and the Internet protocol (IP) address used to connect your computer to the Internet.
​
The information may be provided through the third party service providers that support our website, such as Wix, Etsy and our payment providers, or directly to us.
​
If you sign up to our newsletter, we ask for your email address. You can remove your consent at any time by clicking on the link at the bottom of any newsletter.
​
If you contact us directly, we may collect your name, email address or phone number, and any other information you include in your messages, calls or letters.
​
Why we need your information and how we use it
​
Under the UK General Data Protection Regulation (UK GDPR), we rely on a number of ‘legal bases’ to collect, use, and share your information, including:
-
As needed to provide our services, such as when we use your information to fulfil your order, to settle disputes, or to provide customer support
-
When you have provided your consent, which you may withdraw at any time, such as for subscribing to our newsletter
-
To comply with any applicable laws and regulations, such as retaining information about your purchases as required by tax law
-
As necessary for the purpose of our legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as 1) providing and improving our services. We may use your information to provide the services you requested and in our legitimate interest to improve our services; and 2) Compliance with our third party service providers Policies and Terms of Use
For these purposes we may contact you via email, telephone, text messages, and postal mail.
We may also use your non-personal information to create aggregated statistical data and other aggregated and/or inferred non-personal information, which we may use to provide and improve our respective services.
Our website is hosted on the Wix.com platform. Wix.com provides the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.
All direct payment gateways offered by Wix.com and used by us adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint venture by brands such as Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
Information sharing
Information about our customers and newsletter subscribers is important to our business. We share your personal information for limited reasons and in limited circumstances, as follows:
-
Third party service providers - We share information as necessary to provide you our services and comply with our obligations under both their Policies and Terms of Use
-
We may store and process your information through third-party hosting services in the US and other jurisdictions. As a result, we may transfer your personal information to a jurisdiction with different data protection and government surveillance laws than your jurisdiction
-
Compliance with laws. We may collect, use, retain, and share your information if we have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce our agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of our customers, or others
Data retention
​
For customers, we keep your information for as long as your account is open with us. You can contact us (using the contact details below) to close your account at any time. After that, we will keep your information for up to 7 years, to enable us to satisfy our legal obligations.
For newsletter subscribers, you can unsubscribe from the mailing list at any time by clicking on the link at the bottom of any newsletter. After that, the information is kept for up to 7 years, in case you wish to re-subscribe at a later date. You can ask us to remove your information at any time.
Your rights
If you live in the UK or the EU, you have rights including:
-
Your right of access - You can ask us for copies of your personal information
-
Your right to rectification - You can ask us to correct personal information you think is inaccurate
-
Your right to erasure - You can to ask us to erase your personal information. We will close your account and delete your personal information on request, unless we are required to keep your personal information for legitimate or legal reasons
-
Your right to restriction of processing - You can to ask us to restrict the processing of your personal information, unless we are required to use your personal information for legitimate or legal reasons
-
Your right to object to processing - You can object to the processing of your personal information, unless we are required to use your personal information for legitimate or legal reasons
-
Your right to data portability - You can ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances
You can make a request using the contact details below, and we have one month to respond to you.
Cookies
Cookies and similar tracking technologies are small pieces of data that are placed in your internet browser. They are typically used to keep track of your preferences, the settings you have selected and actions you have taken on a website. We use cookies for reasons such as:
-
To provide a better experience for you
-
To ensure our website is secure and safe to use
-
To identify if have an account with us
-
To make an order in the shop
-
To allow you to have an account that you can login to track your purchases
-
To monitor and analyse the performance, operation and effectiveness of our website
Certain types of cookies are essential for security and anti-fraud reasons, system monitoring and to manage our cookie consent policy. Other cookies can be used to remember your preferences, and track useful information to help us improve your experience. You can choose whether to accept non-essential cookies or not, when you first enter our website. You can change your preferences at any time my clicking here.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us using the contact details below.
You can also complain to the ICO (Information Commissioner’s Office) if you are unhappy with how we have used your personal information:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
How to contact Rosewood & Moss
If you have any questions or concerns, please click the Contact link below or contact me at:
​
Ali Lou Field
Rosewood & Moss
20 Kevan Drive, Send, Woking, Surrey, GU23 7BU