Plum & Peach is committed to protecting your privacy and handling your personal information responsibly. This policy explains how we collect, use, store, and safeguard your data when you use our website.
For the purposes of UK data protection law, Plum & Peach (“we”, “us”, “our”) is the data controller for all personal data collected through our website https://plumandpeach.com/.
Information We Collect
We collect personal information that you provide directly to us and information that is gathered automatically when you use our website. This may include:
- Your name, contact details (such as email address and phone number), and delivery/billing addresses.
- Account login credentials, skincare preferences, and profile details.
- Order history, shopping cart items, and payment details processed securely by our payment partners.
- Records of your communications with us, including customer support tickets and contact form submissions.
- Information you submit when participating in surveys, promotions, or reviews.
We also collect technical data automatically via cookies and similar tracking technologies. This includes your IP address, browser type, device information, operating system, pages visited, and interaction with our emails.
How We Use Your Information
We use your personal data only where permitted by law and for legitimate business purposes, including:
- Processing, packaging, and delivering your beauty orders.
- Managing your customer account and providing support.
- Improving our product selection, customer experience, and website functionality.
- Sending shopping basket reminders, order updates, and service messages.
- Preventing fraudulent activities and securing our systems.
- Complying with our legal and regulatory obligations.
Legal Basis for Processing
We process your personal data under one or more of the following legal grounds:
- Contractual Necessity: To fulfil your orders and manage your customer account.
- Consent: Where you have opted in to receive marketing communications or accepted non-essential cookies.
- Legitimate Interests: To run our business efficiently, improve our services, and prevent fraud.
- Legal Obligation: To comply with tax, accounting, or consumer rights regulations.
Marketing Communications
Where permitted, we may send you marketing communications by email, SMS, or post. These messages may include information about new beauty arrivals, exclusive promotions, and updates from Plum & Peach.
You can opt out of marketing communications at any time by using the unsubscribe link at the bottom of our emails or by visiting our Contact Page. Even if you opt out of marketing, we will still send essential transaction and service-related messages (such as order confirmations and shipping updates).
Sharing Your Information
We do not sell your personal data. We only share your personal data with trusted third parties where necessary to operate our website and deliver your orders, including:
- Payment processors (to securely process transactions).
- Couriers and delivery partners (to ship your products).
- IT, hosting, and software providers (to keep our systems secure and functional).
- Email and SMS marketing platforms (to communicate with you).
- Professional advisers and fraud prevention agencies.
We may also disclose personal data if required to do so by law or in response to valid requests by public authorities.
International Transfers & Data Retention
Some of our service providers may process personal data outside the UK or the European Economic Area (EEA). In such cases, we apply standard contractual clauses or other appropriate safeguards to ensure your information remains protected.
We retain your personal data only for as long as necessary to fulfil the purposes set out in this policy, including legal, tax, accounting, and reporting obligations.
Data Security
We use suitable technical and organisational measures to protect your personal data, including secure servers, firewalls, encryption, and restricted access controls. All payments are processed using secure, PCI-compliant payment gateways.
While we take all reasonable steps to safeguard your information, please be aware that no online transmission or storage system can be guaranteed 100% secure.
Children’s Privacy
Our website is not intended for individuals under the age of 18, and we do not knowingly collect personal data from children.
Cookies
We use cookies to ensure our website functions correctly, analyse traffic, remember your preferences, and deliver relevant content. You can manage your cookie preferences through your browser settings. Cookies never store sensitive details like payment card credentials or passwords.
Your Rights
Under UK data protection laws, you have the right to access your personal data, request corrections, ask for deletion in certain circumstances, restrict or object to processing, request data portability, and withdraw consent where applicable.
To exercise any of these rights, please contact our support team via our Contact Page.