Privacy policy
This policy explains what we do with your personal information when you visit www.amandalacey.com, buy from us, or write to us.
Who we are
Amanda Lacey is a sole trader based in London, United Kingdom, and is the data controller for the information described here. You can reach us at info@amandalacey.com.
What we collect
- When you order: your name, billing and delivery addresses, email address, telephone number, and what you bought. We do not see or store your full card details.
- When you write to us: your name, email address, telephone number if you give it, and whatever you tell us.
- When you subscribe: your email address, and which of our emails you open or click.
- When you browse: your IP address, device and browser, the pages you look at, and how you arrived. This comes from cookies and similar technologies, and only where you have agreed to it.
Why we use it, and on what basis
- To fulfil your order — to take payment, pack, ship, and deal with returns. Basis: performance of our contract with you.
- To answer you when you get in touch. Basis: our legitimate interest in running the business and replying to people.
- To send marketing email, where you have asked for it. Basis: your consent, which you can withdraw at any time using the unsubscribe link in any email.
- To understand how the site is used and improve it. Basis: your consent, given through the cookie banner.
- To keep records we are legally required to keep, including for tax. Basis: our legal obligations.
Who we share it with
We do not sell your personal information. We share it only with the companies that make the shop work:
- Shopify — hosts the shop and processes orders.
- Shopify Payments, Stripe and PayPal — take payment. Your card details go to them, not to us.
- Klaviyo — sends our email, if you have subscribed.
- Royal Mail and DHL — deliver your order.
- Google Analytics — tells us how the site is used, where you have consented.
We may also disclose information where the law requires it.
Where your information goes
Some of these companies are outside the United Kingdom. Where information is transferred out of the UK, it is protected by the UK International Data Transfer Agreement, by Standard Contractual Clauses, or by an adequacy decision.
How long we keep it
Order records are kept for seven years, because tax law requires it. Marketing subscriptions are kept until you unsubscribe. Enquiries are kept for two years, then deleted.
Your rights
You have the right to ask us for a copy of the information we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent at any time. Write to info@amandalacey.com and we will respond within one month.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
Set out separately in our cookie policy.
Children
The shop is not intended for children, and we do not knowingly collect information about anyone under 16.
Changes
If we change this policy we will post the new version here and update the date below.
Last updated 25 August 2026.