The site's administrator is Glamour Empire Limited registered at the following address: J. House 5, Harrovian Business Village, Bessborough House, Harrow on the Hill, Middlesex, HA1 3EX registered at Companies House for England and Wales under the following number: 8351861, VAT No.: 154202448.
The administrator of your personal data within the meaning of the regulations on personal data protection is Glamour Empire Limited J. House 5, Harrovian Business Village, Bessborough House Harrow on the Hill, Middlesex HA1 3EX registered at Companies House for England and Wales under the following number: 8351861, VAT No. GB154202448. The purposes, legal grounds and duration of the processing of personal data are indicated separately for each purpose of processing (see below for a description of the different purposes of processing personal data).
The GDPR grants you the following potential rights related to the processing of your personal data:
The rules related to the exercise of the aforementioned rights are described in detail in Art. 16 - 21 of the GDPR. We encourage you to familiarize yourself with these regulations. For our part, we believe it is necessary to explain to you that the above-mentioned rights are not absolute and that you will not be entitled to them in relation to all activities related to the processing of your personal data. For your convenience, we have made every effort to indicate the rights you are entitled to within the framework of the description of individual personal data processing operations.
Safety. We guarantee you the confidentiality of any personal data you provide to us. We ensure that all security and personal data protection measures required by data protection legislation are taken. Personal data will be collected with due care and adequately protected against any unauthorised access.
List of entrustments. We entrust the processing of personal data to the following entities:
We entrust the processing of personal data to the following entities: suppliers responsible for providing and maintaining information systems and equipment, legal, accounting, auditing, consulting, courier and marketing agencies. Data are also disclosed to entities related to the Administrator, including companies from its corporate group, as well as entrepreneurs running the Administrator's showrooms. Your personal data will be made available to payment service providers for the purpose of processing payments through the electronic payment intermediary of your choice to a necessary extent.
All entities, to which we entrust the processing of personal data, guarantee the application of appropriate measures for the protection and security of personal data required by the law.
User account. When creating a user account, you must provide the information necessary to set up an account, such as your name, gender and address details. You can also enter your date of birth and your company details.
The data provided to us in connection with opening an account are processed in order to create and maintain an account on the basis of a contract for the provision of services by electronic means concluded by registering an account (Article 6(1)(b) of the GDPR).
Your account also contains a history of your orders placed in the store. Account data is processed in the framework of the shop system on a server provided by Velocity.
Account details will be processed throughout the functioning of your account. If you decide to delete an account, we will also delete the data contained in that account. However, please remember that deleting your account does not delete your order information.
You can correct your account details at any time. You can also decide to delete your account at any time.
In relation to the data on orders, you also have the right to transfer the data referred to in Art. 20 of the GDPR.
Orders. When placing an order, you must provide the information necessary to complete the order, such as your name, billing address, e-mail address and telephone number. Providing this data is voluntary, but necessary in order to place an order.
The data provided to us in connection with an order shall be processed in order to fulfil the order (Article 6(1)(b) of the GDPR), to issue an invoice (Article 6(1)(c) of the GDPR), to include the invoice in our accounting records (Article 6(1)(c) of the GDPR) and for archival and statistical purposes (Article 6(1)(f) of the GDPR).
The data contained in an order is processed within the store system and stored on servers provided by Velocity, eUKhost, DNSimple, dx3webs, Linnworks. The data is passed on to courier companies for the delivery of orders. All information about returns and customer complaints are stored in the Linnworks system. Invoices are forwarded to the accounting office of David Simon Limited, 5 Jardine House, Harrovian Business Village, Bessborough Road, Harrow Middlesex, HA1 3EX.
The order data will be processed for the time necessary to complete the order, and then until the expiration of the statute of limitations of claims under the concluded contract. Moreover, after this period of time, we may still process the data for statistical purposes. Please also note that we are required to retain invoices with your personal information for a period of 5 years from the end of the tax year in which the tax obligation arose.
In the case of order data, you cannot correct this data after the order has been processed. You cannot object to the processing of data or demand the deletion of data until the expiration of the period of limitation of claims under the concluded contract. Similarly, you may not object to the processing of data or request that the invoice details be deleted. After the expiration of the statute of limitations for your contractual claims, you may object to us processing your data for statistical purposes or request that we delete your data from our database. In relation to orders data, you also have the right to transfer the data referred to in Art. 20 of the GDPR.
By contacting us by e-mail, including sending an enquiry via the contact form, you naturally provide us with your e-mail address as the address of the sender of the message. In addition, you may also include other personal information in the message.
In this case, your data is processed for the purpose of contacting you, and the basis for processing is Article 6(1)(a) of the GDPR, i.e. your consent resulting from the initiation of contact with us. The legal basis for post-contact processing is the legitimate purpose of archiving internal correspondence (Article 6(1)(c) of the GDPR).
The content of the correspondence may be archived and we are not able to clearly identify when it will be deleted. You have the right to ask for a record of any correspondence you have had with us (if it has been archived) and to have it deleted, unless the archiving is justified by our overriding interests, such as protecting against potential claims on your part.
Using the website involves sending requests to the server on which the website is stored. Each request directed to the server is saved in the server logs.
Logs include your IP address, server date and time, browser and operating system information. Logs are saved and stored on the server. The data stored in the server logs is not associated with any specific person using the website and is not used by us for the purpose of identifying you. The server logs are only auxiliary material used to administer the site, and their content is not disclosed to anyone other than those authorized to administer the server.