Eliza H Accessories Ltd, Company No 17153312. Last updated 1 November 2026.

This policy explains how we collect, use and protect your personal data when you use elizahaccessories.co.uk, buy from us, join our waitlist or contact us. It is written with reference to the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and the Data (Use and Access) Act 2025.

1. Who We Are

•         Data controller: Eliza H Accessories Ltd, a private limited company registered in England and Wales

•         Company registration number: 17153312

•         Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

•         ICO registration reference: ZC125004 (this can be checked on the ICO's public register at ico.org.uk)

•         Email: hello@elizahaccessories.co.uk

•         Website: elizahaccessories.co.uk

We are the controller of the personal data described in this policy. Data protection at Eliza H Accessories Ltd is handled by our data protection lead. To contact them, email the address above and mark your message "Data protection". You can check our registration on the ICO's public register at ico.org.uk.

2. What Data We Collect

We collect the following information, mostly directly from you:

•         Contact details: your name, email address, phone number (if you give one), and delivery and billing addresses.

•         Order details: the products you buy, prices, dates, delivery and returns information.

•         Payment details: your payment is taken by our payment provider. We do not see or store your full card number.

•         Messages: emails, and messages you send us through Instagram, WhatsApp or other social media.

•         Waitlist and competitions: your email address and any details you give us when you join a waitlist or enter a giveaway.

•         Technical data: your IP address, browser and device type, pages visited and how you reached our site, collected by cookies and similar tools (see Section 6).

•         Collaboration details: if you work with us as a creator or collaborator, your contact details and the content you produce for us.

We also receive some data from others, such as your payment provider (confirming your payment) and social media platforms (if you message us or enter a giveaway through them). Giving us your data is voluntary, but we need your name, delivery address and payment details to supply your order, and cannot do so without them. We do not knowingly collect special category data (such as health data). If you give us any, please tell us so we can remove it.

3. How We Use Your Data and Our Legal Basis

We only use your data where the law allows us to. The table shows what we use it for and the legal basis under Article 6 of the UK GDPR.

What we do

Data used

Legal basis

Take, process, deliver and refund your orders

Contact, order and payment details

Contract (Article 6(1)(b))

Reply to your questions, complaints and returns

Contact details, messages, order details

Contract, or our legitimate interests in helping customers (Article 6(1)(f))

Keep accounting and tax records, and meet legal duties

Order and payment details

Legal obligation (Article 6(1)(c))

Prevent fraud and keep our website secure

Technical data, order details

Legitimate interests (Article 6(1)(f))

Understand how our website is used and improve it

Technical data

Consent for non-essential cookies, otherwise legitimate interests

Send marketing emails, including waitlist and launch updates

Name, email address

Consent (Article 6(1)(a)), or the soft opt-in for existing customers of similar products

Run giveaways and collaborations

Contact details, content

Contract or consent, depending on the activity

If we rely on your consent, you can withdraw it at any time, and doing so does not affect what we did before. If we rely on legitimate interests, we have considered your rights and concluded they are not overridden. You can ask us how we reached that decision.

4. Who We Share Your Data With

We do not sell your personal data. We share it only with organisations that help us run the business, and only what they need:

•         Website and checkout provider: Squarespace hosts our website and processes your order through it.

•         Payment providers: the payment services available at checkout, such as Stripe or PayPal, which handle your card or account details.

•         Delivery providers: couriers and postal services such as Royal Mail and Evri receive your name, address and delivery details, and sometimes your email address or phone number for delivery updates.

•         Email and marketing tools: services we use to send emails and to run and measure our advertising, such as Meta (Instagram and Facebook), if you have agreed to the relevant cookies or marketing.

•         Accountants and professional advisers: who work under duties of confidentiality.

•         Authorities: HMRC, Companies House, the courts or regulators, where the law requires it.

These providers act on our instructions, or are separately responsible for the data they receive, under their own privacy policies. If our business is ever sold or restructured, your data may pass to the new owner, who must keep using it as set out here.

5. Marketing and the L'Homme Waitlist

If you join our waitlist or sign up to our emails, we use your name and email address to tell you about launches, early access and offers, such as the L'Homme Collection. We only do this with your consent. If you have bought from us before, we may email you about similar products unless you tell us not to.

You can unsubscribe at any time using the link in every email, or by emailing hello@elizahaccessories.co.uk. We will stop straight away. We keep a short record that you opted out so we do not email you again.

We may also use social media advertising. If you have agreed to advertising cookies, our advertising partners may show you our adverts. You can change your cookie choices at any time.

6. Cookies, Retention, Transfers and Security

Cookies. Our website uses cookies and similar technologies. Essential cookies keep the site and your basket working, and do not need your consent. Analytics and advertising cookies are used only if you accept them in our cookie banner, and you can change or withdraw your choice at any time. You can also block cookies in your browser settings, although parts of the site may then not work properly.

How long we keep your data.

•         Order and payment records: 6 years, because tax and company law requires it.

•         Enquiries and messages: as long as needed to deal with them, then up to 2 years.

•         Marketing emails: until you unsubscribe or withdraw consent.

•         Collaboration content and agreements: for the length of the agreement and the period of any usage rights.

When we no longer need data, we delete it or anonymise it.

Transfers outside the UK. Some of our providers, such as Squarespace, are based outside the UK, including in the United States. Where your data leaves the UK, we make sure it is protected, either because the destination is covered by UK adequacy rules or because the provider has approved contractual safeguards in place. You can ask us for details.

Security. We take reasonable technical and organisational steps to protect your data, including using a secure checkout and limiting who can see it. No online system is completely secure. If a breach is likely to put people's rights at risk, we will report it to the ICO within 72 hours of becoming aware of it, and we will tell you without undue delay if the risk to you is high.

7. Your Rights

Under UK data protection law you have the right to:

•         be told how we use your data (this policy)

•         ask for a copy of the data we hold about you

•         ask us to correct inaccurate data

•         ask us to delete your data, in some cases

•         ask us to restrict how we use it, in some cases

•         receive your data in a portable format, where we use it under a contract or with your consent

•         object to our use of it, including for direct marketing

•         withdraw your consent at any time

We do not make decisions about you using fully automated processing. To use any of these rights, email hello@elizahaccessories.co.uk. We may need to check your identity first. We reply within one month, which we may extend by up to two months for complex requests, and there is normally no charge.

Your right to object. You can object at any time to us using your data for direct marketing, and we will stop straight away. You can also object to any use of your data that relies on our legitimate interests, by emailing us. We will stop unless we can show a compelling reason to continue.

8. Complaints

If you are unhappy with how we have handled your data, please contact us first at hello@elizahaccessories.co.uk. You can complain to us in any way that suits you, including by email or by messaging us on social media. We will acknowledge your complaint within 30 days, look into it without undue delay, keep you updated and tell you the outcome without undue delay. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113, and you can bring a claim in the courts.

9. Children

Our website is not aimed at children under 13, and we do not knowingly collect their data. If you think a child has given us data, please contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. The latest version is always on this page, with its date at the top. If we make a significant change, we will tell you by email where we have your address.

11. Contact

Email: hello@elizahaccessories.co.uk. Website: elizahaccessories.co.uk.

Eliza H Accessories Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. Company No: 17153312. ICO registration: ZC125004. Registered in England and Wales.