Privacy Policy

Last updated November 2025

This Privacy Policy explains how Anna Jeffreys Ltd (“we”, “us”, “our”) collects, uses, stores and protects your personal information when you visit annajeffreys.co.uk (the “Website”) or make a purchase from us.
We are committed to protecting your privacy and complying with all applicable data-protection laws, including the UK GDPR, Data Protection Act 2018, the EU GDPR (for customers in the EEA), and relevant US consumer-privacy principles.

If you have any questions, please contact us at:
Email: anna@annajeffreys.co.uk
Company: Anna Jeffreys Ltd
Registered in England & Wales
Company Number: 07275977
Registered Address: 3 Main Street, Sproxton, Melton Mowbray, England, LE14 4QS

1. Information We Collect

We collect personal data in the following ways:

1.1 Information you provide to us

When you make a purchase, create an account, contact us, or subscribe to updates, we may collect:

  • Name
  • Billing and shipping address
  • Email address
  • Phone number
  • Order details
  • Payment information (processed securely by third-party payment providers; we do not store full card details. If you opt for storage of your card details on our site they are collected and maintained by Stripe).

1.2 Information collected automatically

When you browse the Website, we may collect:

  • IP address
  • Browser type and version
  • Pages visited and time spent on site
  • Referring website
  • Device information
  • Cookies and similar tracking technologies (see Section 8)

1.3 Information from third parties

We may receive information from:

  • Payment processors (e.g., Stripe)
  • Delivery partners and couriers
  • Analytics providers such as Google Analytics

2. How We Use Your Information

We use your personal data for the following purposes:

  • To process and fulfil your orders
  • To manage your account and provide customer support
  • To send emails related to your order (confirmation, dispatch, updates)
  • To improve and personalise your shopping experience
  • To comply with legal or regulatory obligations
  • To prevent fraud and enhance security
  • To send marketing communications where you have provided consent (you can unsubscribe at any time)

3. Legal Basis for Processing (UK & EU Customers)

Under the UK GDPR and EU GDPR, we rely on the following legal grounds:

  • Contract: to process orders and provide services
  • Consent: for marketing emails or optional cookies
  • Legitimate Interests: improving the Website, preventing fraud
  • Legal Obligation: maintaining records for tax and accounting

4. Sharing Your Information

We only share your information with trusted third parties when necessary:

  • Payment processors: to process your payment
  • Delivery and courier companies: to deliver your order
  • IT and website service providers: including hosting and analytics
  • Professional advisers: accountants or legal advisers
  • Authorities: if required by law or for fraud prevention

We do not sell or rent your personal data.

5. International Transfers

As we sell to customers in the UK, EU/EEA, and USA, your data may be transferred outside your home country.

Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) for EU/EEA transfers
  • UK International Data Transfer Addendum
  • Only using reputable service providers with strong security practices

6. Data Retention

We retain personal data only as long as necessary:

  • Order records: 6 years (for tax and legal requirements)
  • Customer service communications: up to 3 years
  • Marketing preferences: until you withdraw consent
  • Analytics data: retained according to third-party policies (e.g., Google Analytics)

7. Your Rights

UK and EU/EEA Customers

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent for marketing or cookies
  • Lodge a complaint with the UK ICO or your local data authority

US Customers

While rights vary by state, we respect:

  • The right to access information we hold about you
  • The right to request deletion where applicable
  • The right to opt-out of marketing communications

We do not sell personal data as defined under US state privacy laws.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to:

  • Enable essential website functions
  • Analyse site traffic and performance
  • Personalise your shopping experience
  • Deliver relevant advertising (where consent applies)

You may control cookies through your browser settings or via our cookie-consent tool.

9. Keeping Your Data Secure

We use appropriate technical and organisational measures to protect your information, including:

  • HTTPS encryption
  • Secure payment processing
  • Access controls and authentication
  • Regular security monitoring

However, no system is completely secure, and you share information at your own risk.

10. Children’s Privacy

Our Website is not intended for anyone under the age of 18, and we do not knowingly collect personal data from them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always appear on this page, with the updated date shown at the top.

12. Contact Us

If you have any concerns, requests or questions about this Privacy Policy, please contact:

Anna Jeffreys Ltd
Email: anna@annajeffreys.co.uk
Website: https://annajeffreys.co.uk