Privacy Policy

1. Information About the Collection of Personal Data and Contact Details of the Controller

1.1 Thank you for visiting Draper's of Manchester’s website. We value your interest and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and store your personal data when you interact with our website. Personal data refers to any information that can directly or indirectly identify you.

1.2 The data controller responsible for data processing in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 is Draper's of Manchester. The controller is the organisation that determines the purposes and means of processing personal data.

1.3 This website uses SSL (Secure Sockets Layer) or TLS (Transport Layer Security) encryption to safeguard your personal data and other confidential information (e.g., orders or inquiries). You can recognise an encrypted connection by the “https://” prefix in the URL and the padlock symbol in your browser.

2. Data Collection When Visiting Our Website

When you visit Draper's of Manchester’s website for informational purposes only (i.e., without registering or transmitting information), we collect the following data that your browser transmits to our server (known as “server log files”):

  • Pages accessed on our website
  • Date and time of access
  • Amount of data transmitted
  • Referring URL (the page from which you accessed our site)
  • Browser type and version
  • Operating system used
  • IP address (anonymised where applicable)

This data is collected in accordance with Article 6(1)(f) UK GDPR based on our legitimate interest in ensuring the stability, functionality, and security of the website. This information is not shared with third parties or used for any other purpose unless unlawful activity is suspected, in which case we may review these server log files retrospectively.

3. Cookies

We use cookies to enhance your browsing experience and enable certain features of the website. Cookies are small text files stored on your device when you visit our website.

  • Session Cookies: These are temporary cookies that are deleted when you close your browser.
  • Persistent Cookies: These remain on your device and enable us to recognise your browser on future visits.

Cookies may collect data such as browser type, location information, and IP addresses. Persistent cookies are deleted automatically after a set period, depending on their purpose.

Cookies serve various purposes, including:

  • Improving the functionality of the website.
  • Simplifying processes such as retaining items in your shopping cart for future visits.

Where cookies involve the processing of personal data, the legal basis for their use is Article 6(1)(b) UK GDPR (for contractual purposes) or Article 6(1)(f) UK GDPR (for our legitimate interests in improving the user experience).

Managing Cookies:

You can control the use of cookies through your browser settings:

  • Enable notifications for cookie use.
  • Choose to accept or reject cookies on a case-by-case basis.
  • Block cookies altogether.

For specific instructions, refer to your browser’s help section:

Please note that disabling cookies may limit the functionality of Drapers of Manchester’s website.

4. Contacting Us

If you contact Draper's of Manchester (e.g., via email or contact form), we collect your personal data to respond to your inquiry. The specific data collected depends on the form you complete, or the details provided in your email.

Legal Basis:

  • Processing is conducted under Article 6(1)(f) UK GDPR, based on our legitimate interest in handling inquiries.
  • If your inquiry relates to a contract, the legal basis is Article 6(1)(b) UK GDPR.

Your data will only be used to respond to your inquiry and will be deleted once the matter is resolved, provided there are no statutory retention obligations.

5. Data Processing for Account Creation and Order Fulfilment

When you create an account with Draper's of Manchester or place an order, we process your personal data to fulfil the contract in accordance with Article 6(1)(b) UK GDPR.

  • Your account can be deleted at any time by contacting us at info@drapersofmanchester.co.uk.
  • After completing your order, your data will be securely stored to comply with legal retention periods (e.g., tax and financial records) and will be deleted once these periods expire, unless you consent to further use.

6. Use of Data for Marketing

6.1 Email Newsletter:

If you sign up for Draper's of Manchester’s email newsletter, we will send you information about our offers and promotions. To subscribe, we use a double opt-in process to confirm your consent. You will receive a confirmation email with a link to activate your subscription.

  • You can unsubscribe at any time via the link in the newsletter or by contacting us.
  • Legal Basis: Consent is provided under Article 6(1)(a) UK GDPR.

6.2 Marketing Emails for Existing Customers:

If you provide your email during a purchase, we may send you information about similar products or services under Article 6(1)(f) UK GDPR, based on our legitimate interest in direct marketing. You can opt out of these emails at any time.

7. Data Sharing

To process your order, we may need to share your data with the following parties:

  • Delivery Partners: To ensure the delivery of your order, we provide necessary details to our couriers or postal services.
  • Payment Processors: To complete payments, we share data with your chosen payment provider.

Data sharing is limited to what is strictly necessary and is conducted in accordance with Article 6(1)(b) UK GDPR.

8. Your Data Protection Rights

Under the UK GDPR and Data Protection Act 2018, you have the following rights:

  • Access: Request details of the personal data we hold about you (Article 15 UK GDPR).
  • Rectification: Correct inaccuracies in your personal data (Article 16 UK GDPR).
  • Erasure: Request deletion of your data, subject to legal retention obligations (Article 17 UK GDPR).
  • Restriction: Limit the processing of your data under certain conditions (Article 18 UK GDPR).
  • Data Portability: Request a copy of your data in a structured, machine-readable format (Article 20 UK GDPR).
  • Objection: Object to processing for legitimate interests or direct marketing (Article 21 UK GDPR).
  • Withdraw Consent: If you have given consent, you can withdraw it at any time without affecting prior lawful processing (Article 7(3) UK GDPR).

To exercise any of these rights, contact us at info@drapersofmanchester.co.uk.

9. Retention of Data

Your personal data will only be retained for as long as necessary to fulfil the purposes outlined in this policy or comply with legal obligations. Once the retention period expires, your data will be securely deleted.