Privacy Policy

Privacy Policy

At Ellgravia London, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website, place an order, contact us, or otherwise interact with our services.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

For the purposes of applicable data protection laws, the data controller responsible for your personal information is:

365 Digital Enterprises Limited

[Registered Address]

Tsuen Wan, Hong Kong

Email: info@ellgravia-london.com

As a Hong Kong-incorporated business selling to UK consumers, we process personal data of UK residents. Whilst we are not required to register with the UK Information Commissioner's Office (ICO), we are committed to handling UK residents' data in a manner consistent with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

Depending on how you interact with our website and services, we may collect the following categories of information:

Contact Information

• Full name
• Billing and shipping address
• Telephone number
• Email address

Order and Transaction Information

• Products viewed, added to cart, or purchased
• Order history and status
• Returns and refunds
• Payment confirmations

Payment Information

Payments are securely processed by our payment providers. We do not store complete payment card details on our servers. Please refer to your payment provider's privacy policy for details of how they handle your payment data.

Device and Usage Information

• IP address
• Browser type and version
• Device information
• Pages viewed and website interactions
• Referring websites

Customer Service Communications

Information you provide when contacting us regarding orders, returns, support requests, complaints, or other enquiries.

3. How We Collect Information

We collect personal information:

• Directly from you when you place an order, subscribe to marketing communications, or contact us.
• Automatically through cookies and similar technologies when you browse our website.
• From service providers that assist us in operating our business.
• From marketing and advertising partners where permitted by law.

4. How We Use Your Information

Fulfil Orders and Provide Services

• Process payments
• Deliver orders
• Manage returns and refunds
• Provide customer support

Improve Your Shopping Experience

• Personalise website content and remember your preferences
• Improve our products and services
• Analyse website performance

Marketing Communications

Where permitted by law or where you have provided consent, we may send promotional emails, product updates, special offers, and marketing communications. You may unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us directly.

UK residents: under UK GDPR, we will only send marketing emails where you have given explicit consent or where we have a legitimate interest and a pre-existing commercial relationship (soft opt-in). You have the right to opt out at any time.

Fraud Prevention and Security

We use personal information to verify transactions, prevent fraud, detect unauthorised activity, and protect our customers and business.

Legal Compliance

We may use personal information to comply with legal obligations, resolve disputes, enforce our policies, and protect our legal rights.

5. Legal Basis for Processing (UK Residents)

For UK residents, we process your personal data on the following legal bases under the UK GDPR:

• Contract performance: processing necessary to fulfil your order, manage returns, and provide customer support.
• Legitimate interests: fraud prevention, website security, improving our services, and direct marketing to existing customers (subject to your right to object).
• Consent: where you have opted in to marketing communications or the use of non-essential cookies.
• Legal obligation: where we are required to process data to comply with applicable law.

6. Shopify Services

Our store is powered by Shopify, which enables us to provide secure ecommerce services and process customer transactions. Shopify may collect and process personal information necessary to operate the store, process payments, provide analytics, and improve platform performance.

For further information regarding Shopify's privacy practices, please visit: Shopify Privacy Policy

7. Sharing Your Information

We may share your information with trusted third parties when necessary to operate our business, including:

• Shopify (ecommerce platform)
• Payment processors (e.g. Stripe, PayPal)
• Shipping and logistics providers
• Customer support providers
• Analytics providers
• Marketing and advertising partners

We may also disclose information when required by law or to protect our legal rights.

We never sell your personal information.

8. International Data Transfers

As a Hong Kong-based business serving UK customers, your personal information will be transferred to and processed in Hong Kong and in countries where our service providers operate. Some of these countries may not have data protection laws equivalent to those in the UK.

Where we transfer personal data outside the UK, we take steps to ensure appropriate safeguards are in place, including relying on contractual protections and standard data protection clauses where applicable. By using our website, you acknowledge that your data may be transferred internationally in this manner.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies to:

• Enable website functionality
• Remember your preferences
• Analyse website traffic and improve performance
• Deliver personalised advertising where permitted

UK residents have the right to consent to or decline non-essential cookies. Please refer to our Cookie Policy for full details. You can manage your cookie preferences at any time through your browser settings or our cookie consent tool.

10. Data Retention

We retain personal information only for as long as necessary to:

• Provide our services and fulfil contractual obligations
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements

When personal information is no longer required, it will be securely deleted or anonymised. For UK customers, we retain order and transaction records for a minimum of six years in line with UK tax and accounting obligations.

11. Children's Privacy

Our services are not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us at info@ellgravia-london.com and we will take appropriate steps to remove that information.

12. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to correct inaccurate or incomplete information
• Right to erasure — to request deletion of your personal data ('right to be forgotten')
• Right to restrict processing — to ask us to limit how we use your data
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at info@ellgravia-london.com. We may need to verify your identity before processing certain requests and will respond within one month.

UK residents: if you are not satisfied with how we handle your request, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at www.ico.org.uk.

13. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices, content, or security of external websites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Security

We implement reasonable administrative, technical, and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction. However, no method of transmission or storage can be guaranteed to be completely secure. We encourage you to use a strong password and to keep your account credentials confidential.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or operational needs. Any updates will be posted on this page with a revised "Last Updated" date. Where changes are material, we will notify you by email or by a prominent notice on our website.

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Ellgravia London

Legal Entity: 365 Digital Enterprises Limited

Business Registration Number: 79628378

Registered Address:

Golden Bear Centre
66 Chai Wan Kok Street
Tsuen Wan, Hong Kong

Email: info@ellgravia-london.com