top of page

Privacy Policy – Ella Maison UK

​
Introduction

Ella Maison UK (“we”, “us”, or “our”) is committed to protecting your privacy and respecting your personal data. This privacy policy explains how we collect, use, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable laws.

​
Who We Are

We operate an online retail business, supplying products directly to customers, sometimes via trusted dropshipping partners.

​
What Personal Data We Collect

We may collect and process the following personal information:

  • Names and contact details

  • Addresses

  • Date of birth

  • Purchase or account history

  • Payment details (including bank or card information for transactions)

 
Purposes of Processing

We collect and use your personal data to:

  • Provide and deliver products you have ordered

  • Manage customer accounts and bookings

  • Send service updates and important information about your order

  • Manage invoicing, payments, and refunds

  • Deliver marketing communications (where you have given consent)

  • Fulfil our legal and regulatory obligations

 
Lawful Bases for Processing

We process your personal data under the following lawful bases:

  • Consent: Where you have given us permission (for example, to receive marketing communications).

  • Contract: Where processing is necessary to fulfil your purchase, manage your order, or take steps before entering into a contract.

  • Legitimate Interests: Where it is necessary for our business operations (such as fraud prevention, customer service improvement, and business administration), provided this does not override your rights and freedoms.

  • Legal Obligation: To comply with applicable laws (such as tax and accounting requirements).

 
Legitimate Interests

We rely on legitimate interests for certain processing, including:

  • Retaining records of transactions to ensure smooth handling of customer service queries.

  • Preventing fraud and ensuring secure transactions.

  • Analysing sales performance to improve our services.

We have carried out a Legitimate Interests Assessment to ensure this processing is proportionate and respects your rights.

 
Children’s Data

We do not intentionally collect personal data about children.

 
Where We Get Your Data

We collect personal data directly from you when you:

  • Place an order on our website

  • Subscribe to our marketing communications

  • Contact us via email or telephone

We may also receive information from trusted third-party dropshipping suppliers in order to fulfil orders.

 
Sub-Processors and Systems

We use trusted third parties to manage data securely:

  • Wix – For website hosting, customer accounts, and email marketing

  • Dropship Supplier(s) – To process and ship your orders (we provide only the necessary customer information to complete delivery)

 
Data Sharing

We may share your personal data with:

  • Suppliers (to enable product delivery)

  • Payment processors and banks (for transactions)

  • Professional advisors (for legal or financial compliance)

  • Regulators or authorities (where legally required)

 

We do not sell your data to third parties.

 
Data Retention

We retain personal data only for as long as necessary to meet the purposes described above or to comply with legal requirements. In most cases, order and transaction records are kept for six years in line with HMRC guidance.

 
International Transfers

Some of our systems (including Wix) and third-party suppliers may transfer or store personal data outside of the UK. Where this occurs, we ensure appropriate safeguards are in place, such as:

  • UK Government adequacy decisions (for countries recognised as having equivalent data protection laws)

  • Standard Contractual Clauses (SCCs) or International Data Transfer Agreements (IDTAs) to ensure data remains protected to UK GDPR standards

 
Data Security

We take the protection of your data seriously. Measures we apply include:

  • Encryption for payments and account details

  • Secure access controls for systems

  • Regular monitoring of suppliers and sub-processors

  • Limiting access to personal data on a “need-to-know” basis

 
Your Rights

You have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate or incomplete information

  • Request deletion of your data (where legally possible)

  • Object to or restrict processing in certain circumstances

  • Withdraw consent to marketing at any time

  • Request data portability

 
How to Complain

If you have concerns about how we use your data, please contact us first at: customerservice@ellamaison.co.uk

If you remain dissatisfied, you can lodge a complaint with the Information Commissioner’s Office (ICO):

bottom of page