Privacy & Cookie Policy

1. Introduction: Our Heart & Your Privacy

Welcome to Clara&Co. Our journey began with a simple dream of creating a relatable, reliable place for women to find quality style. Part of being a "friendly and trusted" brand means being completely open about how we handle your information.

This policy explains how we collect, use, and protect your data in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Who We Are

The website is operated by GMR & CCG Limited (trading as clara&co). We are the data controller responsible for your personal data and are formally registered with the Information Commissioner's Office (ICO).

• Registered Office: Northgate Business Centre, 38-40 Northgate, Newark Upon Trent, Nottinghamshire, NG24 1EZ.
• Company Registration Number: Registered in England & Wales under number [PENDING].
• ICO Registration Number: [PENDING].
• Contact: hello@claraandco.co.uk

3. Data Security

Your security is our priority. Our website is protected by an SSL (Secure Sockets Layer) certificate, which encrypts the connection between your device and our site. All payments are processed through Stripe, a secure, world-class payment provider.

4. The Data We Collect

To process your orders and keep you updated on the latest collections, we collect:

• Identity Data: Name and title.
• Contact Data: Email address, telephone number, and delivery/billing address.
• Financial Data: Payment card details (processed securely via Stripe).
• Transaction Data: Details about products you have purchased and payments made.
• Technical Data: IP address, browser type, and location data via Google Tracking and Vercel.
• Marketing Data: Your preferences for receiving our newsletter and social media updates.

5. How We Use Your Data

We only use your data when the law allows us to. Most commonly, we use it to:

• Fulfill Orders: To process payments and ship your items via Royal Mail.
• Legal Compliance: To comply with the Companies Act 2006, Electronic Commerce Regulations 2002, and UK tax laws.
• Communication: To send "Back in Stock" alerts or newsletters you have opted into.
• Improvement: Using analytics to see how you use our site, helping us curate better collections.

6. Third-Party Sharing

We do not sell your data. We only share it with trusted partners necessary to run our business:

• Service Providers: Vercel (Hosting), Stripe (Payments), and Royal Mail (Delivery).
• Wholesalers: Your personal data is never shared with our third-party clothing suppliers.
• Analytics & Marketing: Google (Tracking), Facebook, Instagram, and TikTok.

7. Data Retention

We keep your personal data for 6 years following your last transaction. This allows us to comply with UK legal, accounting, and tax reporting requirements.

8. Our Cookie Policy

We use a cookie banner to ensure you have control. We use the following types of cookies:

• Strictly Necessary: Essential for the website to function (e.g., your shopping basket).
• Analytical/Performance: Provided by Google Tracking to help us understand visitor numbers.
• Functionality: To recognise you when you return to our site.
• Targeting/Marketing: Used to make our ads on social media more relevant to you.

9. Your Legal Rights

Under UK GDPR, you have the right to access, correct, or erase your personal data. To exercise these rights, please contact us at hello@claraandco.co.uk. You also have the right to make a complaint at any time to the ICO (www.ico.org.uk).

10. Compliance & Safety

• Product Safety: In line with the General Product Safety Regulations 2005, we ensure all items meet UK standards.
• Liability: We hold full Product and Public Liability Insurance.
• Pricing: All prices are shown in GBP, include VAT, and shipping is calculated at checkout in accordance with the Consumer Rights Act 2015.