Privacy Policy Love Amber x UK
Love Amber x Ltd
Privacy Policy
1. Who we are
LOVE AMBER X LIMITED (company number 09851689), trading as Love Amber x, is the controller of the personal information described in this privacy policy. References to “we”, “us” and “our” mean LOVE AMBER X LIMITED.
Business address: 2 Haygreen Road, Witham, Essex, CM8 1FS, United Kingdom.
You can contact us using our contact form.
If you have a concern about how we use your personal information, please contact us first so that we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.
2. What personal information we collect
Depending on how you use our store, we may collect:
Identity and contact information — such as your name, billing and delivery address, email address and telephone number.
Order and transaction information — including the products you purchase, order history, delivery information, discounts, refunds and returns.
Account information — if you create or use a customer account.
Communications — including messages you send through our contact form or communications relating to an order or customer-service enquiry.
Marketing preferences — including whether you have chosen to receive marketing communications and your unsubscribe preferences.
Technical and usage information — such as IP address, browser/device information, website activity and information collected through cookies and similar technologies.
Payment information — payment details are collected and processed securely by Shopify and/or the payment provider you select at checkout. Love Amber x does not receive or store your full payment-card number.
We do not intentionally collect special-category personal information through our normal retail activities, such as information about health, race or ethnicity, religious or philosophical beliefs, political opinions, trade-union membership, genetic or biometric data, sex life or sexual orientation.
3. How we collect personal information
We collect personal information directly from you when you place an order, create or use a customer account, contact us, subscribe to marketing, or otherwise provide information to us.
We also collect some information automatically when you use our website, including through cookies, pixels, server logs and similar technologies, subject to the consent and privacy controls that apply to you.
We may receive information from service providers that help us operate the store and provide our services, including payment providers, delivery providers, fraud-prevention services, analytics services and advertising platforms.
4. Why we use personal information and our lawful bases
We use personal information only where we have a lawful basis for doing so.
Contract — we use your information where it is necessary to process and fulfil your order, take or reconcile payment, arrange delivery, provide customer service, manage your customer account, and deal with returns, refunds or warranty matters.
Legal obligation — we may use and retain information where necessary to comply with legal, tax, accounting or regulatory requirements.
Legitimate interests — we may use personal information where necessary for our legitimate business interests, including operating and improving our store, maintaining website and account security, preventing fraud and abuse, understanding how customers use our website, protecting our business and legal rights, and promoting our products where permitted. When relying on legitimate interests, we consider the impact on your rights and interests.
Consent — where consent is required, for example for certain marketing communications, advertising technologies or non-essential cookies, we rely on the consent you provide. You can withdraw your consent at any time. This does not affect processing that was lawful before consent was withdrawn.
5. Marketing
We may send you marketing emails where you have asked to receive them.
In some circumstances, UK law also allows us to contact existing customers about our own similar products and services without asking for separate marketing consent. We will only rely on this where the applicable requirements are met, including giving you a clear opportunity to opt out when we collect your details and in every subsequent marketing email.
We use Shopify Email to send our email marketing.
You can unsubscribe at any time by using the unsubscribe link in any marketing email or by contacting us. If you unsubscribe, we will record your preference so that we do not send you further marketing emails unless you later choose to subscribe again.
Opting out of marketing does not stop us from sending service or transactional communications about an order, account, return, refund, warranty, security issue or other transaction with you.
6. Cookies, analytics and advertising
Our website uses cookies, pixels and similar technologies to operate the store, remember choices, protect the website, understand how the website is used and, where permitted, measure or support advertising.
Some technologies are necessary for functions you request, such as keeping items in your basket, enabling checkout, maintaining security and remembering essential session information. These may be used without consent where the law permits.
We may also use limited analytics for statistical purposes to understand how visitors use our website and to improve it. Where the applicable legal requirements for the statistical-purpose exception are met, this may be used without prior consent and you will be given a simple way to object. Where that exception does not apply, we will obtain consent where required.
Advertising and advertising-related tracking technologies are used only where the required consent has been obtained. These technologies may help us understand whether advertising leads to visits or purchases and may support advertising on other services.
We use Shopify to operate our online store. We also use Google-related services for advertising, product-feed and conversion-measurement purposes, including services connected through ScaleUp for Google Ads and Nabu for Google Feed. Where enabled and subject to your privacy choices, we use Meta/Facebook advertising and measurement technologies, including those connected through Omega Facebook Pixel.
For further information, please see the Google Privacy Policy and the Meta Privacy Policy.
You can use the cookie and privacy controls made available on our store to manage your choices where available. You can also adjust your browser settings, although blocking technologies necessary for the store may affect functions such as the basket, customer account or checkout.
7. Who we share personal information with
We share personal information only where reasonably necessary to operate our store, fulfil orders, provide customer service, protect our website and business, measure or promote our services, or comply with the law.
This may include:
Shopify and ecommerce providers — Shopify provides our ecommerce platform, hosting, checkout, customer-account and related store services.
Payment providers — payment information is processed by the payment methods available at checkout. We do not receive or store your full payment-card number.
Delivery, fulfilment and postal providers — including services used to prepare, dispatch and deliver orders, such as Royal Mail/Click & Drop and our fulfilment or warehouse providers where applicable.
Reviews and onsite search providers — including Judge.me Reviews and Searchanise Search & Filter, where information is processed as necessary to provide those features.
Fraud and security providers — including services such as Halt: Card Testing Blocker, which may process technical, checkout or transaction information to help identify and prevent suspicious activity, payment abuse or other misuse of the store.
Analytics and advertising providers — including the Google- and Meta-related services described in the cookies, analytics and advertising section above, where permitted.
Customer communication and technical providers — where needed to provide customer messaging, website functionality, shipping calculations and other technical services.
Professional advisers and authorities — such as accountants, insurers, legal advisers, regulators, courts, law-enforcement bodies or other competent authorities where disclosure is reasonably necessary or legally required.
Where service providers process personal information for us, they are expected to handle that information in accordance with the contractual and legal obligations that apply to them.
We may also disclose personal information where necessary to establish, exercise or defend legal claims, investigate or prevent fraud or abuse, protect our rights or the rights of others, or comply with a legal obligation or lawful request from a competent authority.
We do not give service providers permission to use customer personal information for their own unrelated marketing simply because they provide a service to us.
8. International transfers
Some of the service providers that support our store may process personal information outside the United Kingdom.
Where this amounts to a restricted international transfer under UK data-protection law, we take steps to ensure that an appropriate legal transfer mechanism is in place. Depending on the circumstances, this may include UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework for eligible participating US organisations, or appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.
Where required, the relevant transfer safeguards and risk assessments are used to help ensure that personal information continues to receive an appropriate level of protection when transferred outside the UK.
In some limited circumstances, UK data-protection law also permits specific exceptions for international transfers.
9. How long we keep information
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide our services and to meet legal, tax, accounting, warranty, fraud-prevention and dispute-handling requirements.
Order and transaction records — records relating to orders, payments, refunds and other transactions that form part of our business and accounting records are normally kept for six years from the end of the company financial year to which they relate. We may need to keep them for longer where required by law, for example where a tax enquiry or other legal matter remains open.
Customer-service and warranty records — correspondence and information connected with enquiries, returns, refunds, complaints or warranty matters is kept for as long as reasonably necessary to deal with the matter and any related legal or business requirements.
Fraud and security information — information relevant to fraud prevention, payment abuse, card testing, website security or disputes may be retained for as long as reasonably necessary to protect our customers and business, investigate incidents and establish, exercise or defend legal claims.
Marketing information — marketing information is kept while you are subscribed. If you unsubscribe, we may retain limited information about your opt-out so that we can record and respect your preference and avoid sending you marketing you have asked not to receive.
Information held by service providers — information processed on our behalf by Shopify and other service providers may also be retained in accordance with their applicable retention arrangements and legal obligations.
We periodically review the personal information we hold. When information is no longer required, we delete it, anonymise it, or otherwise put it beyond use, unless continued retention is required or permitted by law.
10. Data security
We take appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, destruction, alteration, unauthorised disclosure or access.
Our security measures are proportionate to the nature of the personal information we process and the risks involved. These include using reputable service providers, appropriate access controls and security features, and limiting access to personal information to people and service providers who need it for legitimate business purposes.
Payment-card information is handled through Shopify and the payment providers available at checkout. Love Amber x does not receive or store your full payment-card number.
We take steps to identify and respond to suspected security incidents where they arise. If a personal-data breach occurs, we will assess the circumstances and make any notifications to the Information Commissioner’s Office and affected individuals where required by law.
No method of transmitting or storing information can be guaranteed to be completely secure, but we review the measures within our control and take reasonable steps to maintain an appropriate level of protection.
11. Your rights
Depending on the circumstances and the lawful basis on which we use your personal information, UK data-protection law may give you the right to:
Access — ask whether we are using your personal information and receive a copy of the personal information we hold about you, together with certain related information.
Correction — ask us to correct personal information that is inaccurate or complete information that is incomplete.
Erasure — ask us to delete your personal information in circumstances where the right to erasure applies. This right is not absolute and we may sometimes need or be permitted to retain information, for example to meet legal obligations or establish, exercise or defend legal claims.
Restriction — ask us to restrict how we use your personal information in certain circumstances.
Objection — object to certain uses of your personal information, including processing based on legitimate interests where the right applies. You have an absolute right to object to your personal information being used for direct marketing.
Data portability — in certain circumstances, ask to receive personal information you have provided to us in a structured, commonly used and machine-readable format, or ask for it to be transferred to another organisation where technically feasible.
Withdraw consent — where we rely on your consent, you can withdraw it at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
You can exercise your rights by using our contact form. We may ask for information that is reasonably necessary to confirm your identity before acting on a request.
We will respond to valid rights requests without undue delay and within the time limits required by law. In most cases this is within one month, although the law allows additional time in certain circumstances.
If you are unhappy with how we have handled your personal information or a rights request, please contact us first so that we can try to resolve the matter. You also have the right to complain to the Information Commissioner’s Office (ICO).
For further information about your rights, see the ICO’s individual rights guidance.
12. Data-sharing and privacy choices
In addition to the data-protection rights described above, our store provides privacy controls through Shopify where those controls are available and applicable.
You can use our Your Privacy Choices page to make certain choices about the sale or sharing of personal information and processing that may be treated as targeted advertising under applicable privacy laws. The choices available to you may depend on your location and the privacy requirements that apply there.
Where supported by Shopify and applicable to your region, browser-based privacy signals such as Global Privacy Control (GPC) may also be used to communicate an opt-out preference.
These Shopify privacy controls are separate from your broader rights under UK data-protection law. You can still contact us at any time using our contact form to exercise the rights described in section 11.
13. Third-party links
Our website may contain links to websites or services operated by other organisations. If you follow one of these links, the other organisation’s own privacy information and cookie practices will apply.
We do not control the privacy practices or use of cookies and similar technologies on third-party websites. We encourage you to read the relevant privacy information when you leave our website, particularly before providing personal information to another organisation.
14. Children
Our online store is intended for adults making retail purchases. It is not designed for children to create customer accounts, place orders or provide personal information to us independently.
Some of our products are purchased by adults for children, but this does not mean that we intentionally collect personal information about the child who may use the product.
If you believe a child has provided personal information to us without appropriate involvement from a parent or guardian, please contact us so that we can review the information and take appropriate action.
15. Changes to this policy
We may update this privacy policy when our services, suppliers, legal obligations or privacy practices change. The version published on this page will be the current version.
Last reviewed: September 2026.