Privacy Policy

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data is any data with which you could be personally identified.

1.2 The controller responsible for data processing on this website, within the meaning of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, is Clara London, contactable at info@claralondon.uk. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 This website uses SSL/TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). You can recognise an encrypted connection by the ‘https://’ prefix and the padlock symbol in your browser bar.

When you use our website for informational purposes only — i.e. if you do not register or otherwise send us information — we only collect the data your browser transmits to our server (‘server log files’). When you visit our website, we collect the following data, which is technically necessary to display the website to you:

●        The page visited

●        Date and time of access

●        Amount of data sent, in bytes

●        Source/referral from which you reached the page

●        Browser and operating system used

●        IP address used (anonymised where applicable)

Processing is carried out in accordance with Art. 6(1)(f) UK GDPR, on the basis of our legitimate interest in improving the stability and functionality of our website. This data is not passed on or otherwise used, except that we reserve the right to retrospectively check server log files if there are concrete indications of unlawful use.

To make visiting our website attractive and to enable the use of certain functions, we use cookies on various pages. These are small text files stored on your device. Some cookies are deleted after your browser session ends (session cookies); others remain on your device and allow us, or our partner companies, to recognise your browser on your next visit (persistent cookies).

Where cookies collect personal information, this is processed in accordance with Art. 6(1)(b) UK GDPR, for the performance of a contract, or Art. 6(1)(f) UK GDPR, to safeguard our legitimate interest in the functionality of the website and a customer-friendly browsing experience.

We may work with advertising partners who help make our website more relevant to you. For this purpose, cookies from partner companies may also be stored on your device (third-party cookies).

Note: you can set your browser to inform you about cookies and decide individually on their acceptance, or exclude cookies in certain cases or altogether. Please note the functionality of our website may be limited if cookies are not accepted.

When you contact us (e.g. via a contact form or email), personal data is collected. The data collected via a contact form can be seen from the respective form. This data is stored and used solely to respond to your request and for related administration.

The legal basis for processing is our legitimate interest in responding to your request (Art. 6(1)(f) UK GDPR). Where your contact aims at the conclusion of a contract, the additional legal basis is Art. 6(1)(b) UK GDPR. Your data will be deleted once your request has been fully processed, unless a legal retention obligation applies.

In accordance with Art. 6(1)(b) UK GDPR, personal data is collected and processed when you provide it to us for the performance of a contract or when opening a customer account. The data collected can be seen from the relevant input forms.

You may delete your customer account at any time by sending a message to the controller’s contact address above. We store and use the data you provide for contract processing. After the contract is fully processed or your account is deleted, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods expire, unless you have expressly consented to further use.

If you register for our email newsletter, we will regularly send you information about our offers. The only mandatory information is your email address. We use a double opt-in procedure, meaning we will only send you newsletters once you have expressly confirmed your consent.

By activating the confirmation link, you give us your consent under Art. 6(1)(a) UK GDPR. We store your IP address and the date and time of registration. You can unsubscribe at any time via the link in the newsletter, after which your email address is deleted from our distribution list.

If you have provided your email address when purchasing goods or services, we may send you offers for similar goods or services by email, on the basis of our legitimate interest in personalised direct advertising under Art. 6(1)(f) UK GDPR, without needing separate consent. You may object to the use of your email address for advertising purposes at any time, with future effect.

7.1 Your personal data is passed to the delivery company commissioned with delivery, where necessary for delivery of the goods, and to the relevant payment institution, where necessary for payment processing. The legal basis for this transfer is Art. 6(1)(b) UK GDPR. As our products are shipped from suppliers based outside the United Kingdom, your data may be transferred internationally as part of order fulfilment — see Section 15 below.

PayPal: When paying via PayPal, credit card via PayPal, direct debit via PayPal, or — where offered — ‘pay later’ or instalment payment via PayPal, we pass your payment data to PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. The transfer takes place under Art. 6(1)(b) UK GDPR, only insofar as necessary for payment processing. PayPal reserves the right to carry out a credit check. You can object to this at any time by contacting PayPal.

Sofort: If you select ‘Sofort’ as your payment method, payment is processed by SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany, part of the Klarna Group. Your data is transferred exclusively for payment processing purposes.

We use your email address for a one-off reminder to leave a review of your order via the review system we use, provided you gave express consent under Art. 6(1)(a) UK GDPR during or after your order. You can withdraw your consent at any time by contacting the controller.

Our website uses social plugins of Facebook, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. To increase data protection, these buttons are integrated only as HTML links rather than unrestricted plugins, so no connection is made to Facebook servers until you actively click the button.

Our website uses social plugins of Instagram, operated by Meta Platforms Ireland Limited. The same Shariff HTML-link solution applies, so no connection is made to Instagram servers until you actively click the button.

This website uses the online marketing tool DoubleClick by Google (Google Ireland Limited). DoubleClick uses cookies to display relevant ads, improve campaign performance reporting, and avoid showing the same ads repeatedly. Processing is based on our legitimate interest in the optimal marketing of our website under Art. 6(1)(f) UK GDPR. According to Google, DoubleClick cookies do not contain personal information.

This website uses Google Ads and its conversion tracking feature. A conversion tracking cookie is set when a user clicks on one of our Google Ads. These cookies usually expire after 30 days and are not used for personal identification. Processing is based on our legitimate interest under Art. 6(1)(f) UK GDPR.

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies to analyse your use of the website. We use Google Analytics with the ‘_anonymizeIp()’ extension, which ensures your IP address is truncated and anonymised, excluding direct personal reference.

Google uses this information on our behalf to evaluate use of the website, compile activity reports and provide related services. The IP address transmitted by your browser via Google Analytics is not merged with other Google data.

This website also uses Google Analytics for cross-device analysis via a User ID. A unique, anonymised ID is assigned on first visit and set across devices; it does not contain or transmit personal data to Google. You can object to this at any time, with future effect.

This website uses the Facebook Pixel operated by Meta Platforms Ireland Limited. Where you give express consent, your behaviour can be tracked after you have seen or clicked a Facebook ad, for the purpose of evaluating advertising effectiveness. The data collected is anonymous to us but is stored and processed by Meta. Processing takes place only upon express consent under Art. 6(1)(a) UK GDPR. Consent to use the Facebook Pixel may only be given by users aged 13 or over.

Our website uses Google Ads Remarketing. Google sets a cookie enabling interest-based advertising via a pseudonymous cookie ID based on the pages you have visited. Processing is based on our legitimate interest under Art. 6(1)(f) UK GDPR. Further processing only occurs if you have agreed that Google may link your browsing history with your Google account.

13.1 Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

●        Right of access (Art. 15 UK GDPR)

●        Right to rectification (Art. 16 UK GDPR)

●        Right to erasure (Art. 17 UK GDPR)

●        Right to restriction of processing (Art. 18 UK GDPR)

●        Right to be informed of recipients of disclosed data (Art. 19 UK GDPR)

●        Right to data portability (Art. 20 UK GDPR)

●        Right to withdraw consent at any time (Art. 7(3) UK GDPR)

●        Right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection — ico.org.uk, telephone 0303 123 1113.

Where we process your personal data on the basis of a legitimate interest, you have the right to object at any time for reasons arising from your particular situation. If you object, we will stop processing that data, unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.

Direct advertising: if we process your personal data for direct advertising, you have the right to object at any time. If you do, we will stop processing your data for that purpose.

The duration of storage is based on the applicable statutory retention period (e.g. commercial and tax retention periods). After that period expires, the data is routinely deleted, provided it is no longer required to perform a contract and there is no other legitimate interest in continued storage.

Some of our suppliers and service providers, including our order fulfilment partners, are located outside the United Kingdom. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place — such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or reliance on a country having an adequate level of data protection as recognised by the UK Government.