Your personal data:
Personal data relates to an individual who can be identified from that data. The processing of personal data is governed by the General Data Protection Regulation 2016/679 (the “GDPR”).
Who are we?
Elle Narbrook (trading as Auburn and Peaches) is the data controller for this information (contact details below), which means we decide how your personal data is processed and for what purposes. This privacy notice tells you what to expect when Auburn and Peaches collects personal information.
How to get in touch:
If you have any questions or comments, or if you want to update, delete or change any Personal Information we hold, or you have a concern about the way in which we have handled any privacy matter, please use our contact form to send us a message.
You may also contact us by email at:
Auburn and Peaches
Attn: Privacy Officer
elle @ auburnandpeaches.co.uk
What personal data we collect
- Information you voluntarily provide to us: When you make a purchase, consult with our customer service team, send us an email, post on our blog, or communicate with us in any way, you are voluntarily giving us information that we collect. That information may include either your name, physical address, email address, IP address, phone number, credit card information, as well as details including gender, occupation, location, purchase history, and other demographic information. By giving us this information, you consent to this information being collected, used, disclosed, and stored by us, as described in this Privacy Notice.
- Information we collect automatically: When you make a purchase or browse one of our Websites, we may collect information about your visit to our Websites, your usage of the Services, and your web browsing. That information may include your IP address, your operating system, your browser ID, your browsing activity, and other information about how you interacted with our Websites or other websites. We may collect this information as a part of log files as well as through the use of cookies or other tracking technologies.
We may require you to provide certain information to us in order to fulfil a purchase or to comply with our legal obligations. Except in these circumstances, your decision to provide personal information to us is generally voluntary and, where it is voluntary, you may choose to withhold and not provide personal information to us. If you choose not to provide certain information to us we may not be able to accomplish some of the purposes outlined in this policy.
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Contact forms
What information do you store?
We store user input data sent through the contact forms on this website, along with meta information about the submissions, including the time stamp, the origin IP address, and the user agent (browser). Also, third party services may collect information about website visitors. We currently use Google Analytics on this website.
Where does the information go?
We use the Contact Form 7 plugin to manage contact form submissions. The information is sent as email messages that only a select few are allowed to access. The information is also stored in the database on our hosting server for backup and later reference purposes. We use the Flamingo plugin to safely manage this data. NameCheap hosts this website.
How long do you keep the information?
We don’t set a particular time limit on storing information because we need it for future reference. If you want your information to be removed from our database, please contact us. We will remove it anytime there are concerns about your privacy.
Do you share the information with other parties?
No, although we do use some WordPress plugins on this website that may pass data, including personal information, to external servers to process, such as Akismet Anti-Spam or Jetpack by WordPress.com.
We only use WordPress plugins and themes that are hosted by WordPress.org. WordPress.org’s guidelines clearly prohibit tracking users without their explicit informed consent.
How do we process your data?
Auburn and Peaches complies with its obligations under the GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
We ensure that we have set out the legal basis on which we process your information.
How do we process your personal information?
| Purpose of processing your information | Legal basis for processing |
| To administer purchases, including confirming your purchase and otherwise communicating with you about your purchase. | With your consent or for the performance of a contract, or for taking steps at your request in order to enter into a contract. |
| To provide you with other products and services you request | With your consent or for the performance of a contract, or for taking steps at your request in order to enter into a contract. |
| To manage our relationship | With your consent or for the performance of a contract. |
| To address any claims made against us; for example, we may share details of our accident logs with our insurers in connection with any claim made or likely to be made against us | Carried out in connection with legal proceedings (ie the establishment, exercise or defence of legal claims) |
| To comply with any legal or regulatory obligation (including in connection with a court order) | This processing is necessary for compliance with law |
| To provide you with information that you have requested from us | With your consent, or as is necessary for compliance with the law. |
| To send you marketing communications | With your consent. |
| To protect our rights, property or safety or those of our customers, employees or other third parties | Depending on the circumstances, the processing is carried out for our legitimate business purposes, compliance with law, to protect the vital interests of a living person (ie matters of life or death), or in connection with legal proceedings (ie the establishment, exercise or defence of legal claims) |
Who do we share your personal information with?
In connection with the uses described above, we may share your information to certain third parties, including:
- Other companies and entities owned by Elle Narbrook (trading as Auburn and Peaches).
- Organisations that provide services to us. For example, we may engage third party service providers to send postal mail and email, maintain and update our databases of customer details (including the removal of repetitive information), analyse data,, process card payments, provide customer service and handle claims;
- to external agencies and organisations (including the police and other law enforcement agencies) for the purpose of preventing and detecting fraud (including fraudulent transactions) and criminal activity and for the assessment and collection of tax; and
- our insurers and insurance brokers and our and their advisers in the event that a claim is made or could be made against us.
In the event that we sell or buy any business or assets, we may disclose personal information held by us to the prospective seller or buyer of such business or assets. If we or substantially all of our assets are acquired by a third party (or subject to a reorganisation within our corporate group), personal information held by us will be one of the transferred assets.
We may pass your personal information to third parties if we are under a duty to disclose or share your personal information in order to comply with any legal or regulatory obligation (including in connection with a court order), or in order to enforce or apply the agreements we have with or otherwise concerning you (including agreements between you and us (or one or more of our affiliates)); or to protect our rights, property or safety or those of our customers, employees or other third parties.
You should be aware that, if we are requested by the police or any regulatory or government authority investigating suspected illegal activities to access and disclose individually identifiable information concerning your activities whilst using our website, we reserve the right to do so. We also reserve the right to disclose individually identifiable information to third parties where a complaint arises concerning your use of our website, and that use is deemed by us inconsistent with the terms governing use of our website.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
reCAPTCHA
This website uses Google reCAPTCHA v3 in the background of the website to prevent spam. Please find Google’s Privacy Policy and Terms of Service here.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Links to other websites
This privacy notice does not cover the links within this site linking to other websites. We encourage you to read the privacy statement on the other websites you visit.
Use of children’s data
We do not knowingly collect or store any personal information about children under the age of 16 and we do not offer any of our products directly to children.
Where will your information be processed?
In relation to the above uses of your personal information and the above sharing arrangements, your personal information may be transferred to, and stored and processed in, one or more countries outside the European Economic Area (EEA), including countries which do not provide equivalent protection for personal information.
In relation to these transfers, we will take steps to ensure that your personal information is adequately protected. This may involve the use of data transfer agreements (standard contractual clauses) in the form approved by the European Commission or some other mechanism recognised by the European Commission as ensuring an adequate level of protection for personal data transferred outside the EEA (such as the US Privacy Shield framework). https://www.privacyshield.gov/welcome
How long do we keep your personal information?
We will keep your personal information for as long as is necessary given the purposes for which we collected and use that information. We may also retain and use your information in order to comply with our legal obligations, resolve disputes, prevent abuse, and enforce our Agreements.
If we collected your personal information in order to perform a service or performance of a contract, we keep your personal information for 4 years from the date of the last service you requested or booked with us.
If we collected your personal information in the process of recruitment, we keep successful applicants’ personal information for 4 years from the date of their termination or resignation. We keep unsuccessful applicants’ personal information for 6 months from receipt.
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
How do we keep your personal information safe?
We take reasonable and appropriate measures to protect Personal Information from loss, misuse and unauthorized access, disclosure, alteration and destruction, taking into account the risks involved in the processing and the nature of the Personal Information.
How can you access, correct, update or delete information we hold about you?
We will give an individual access to any Personal Information we hold about them within 30 days of any request for that information. You are entitled:
- to request access to your data,
- to correct or update your data,
- to delete your data,
- to restrict or object to how we use your data, and
- To move your data.
Individuals may make any of the above requests regarding the information we hold about them by contacting us here. Unless it is prohibited by law, we will remove any Personal Information about an individual from our servers at your request. There is no charge for an individual to access or update their Personal Information.
You are able to unsubscribe or withdraw consent for how we use your information at any time.
How can you make a complaint?
To make all relevant requests and complaints, please in the first instance contact the Privacy Officer:
Auburn and Peaches
Attn: Privacy Officer
elle @ auburnandpeaches.co.uk
You are entitled to make a complaint to the Information Commissioner’s Office:
on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at their address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Updates
If we update this privacy notice, we will post the updated notice on this website. The updated notice will take effect as soon as it is posted on our website. This policy was last updated on 18 September 2022.