top of page

PRIVACY POLICY

A legal disclaimer

The explanations and information provided on this page are only general and high-level explanations and information on how to write your own document of a Privacy Policy. You should not rely on this article as legal advice or as recommendations regarding what you should actually do, because we cannot know in advance what are the specific privacy policies you wish to establish between your business and your customers and visitors. We recommend that you seek legal advice to help you understand and to assist you in the creation of your own Privacy Policy. 

Privacy Policy - the basics 

Having said that, a privacy policy is a statement that discloses some or all of the ways a website collects, uses, discloses, processes, and manages the data of its visitors and customers. It usually also includes a statement regarding the website’s commitment to protecting its visitors’ or customers’ privacy, and an explanation about the different mechanisms the website is implementing in order to protect privacy. 

 

Different jurisdictions have different legal obligations of what must be included in a Privacy Policy. You are responsible to make sure you are following the relevant legislation to your activities and location.

What to include in the Privacy Policy

Generally speaking, a Privacy Policy often addresses these types of issues: the types of information the website is collecting and the manner in which it collects the data; an explanation about why is the website collecting these types of information; what are the website’s practices on sharing the information with third parties; ways in which your visitors and customers can exercise their rights according to the relevant privacy legislation; the specific practices regarding minors’ data collection; and much, much more. 


To learn more about this, check out our article “Creating a Privacy Policy”.

COLD ROSE – PRIVACY POLICY

​

Cold Rose ("we", "our", or "us") respects your right to privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, store, and protect your information when you use our website [www.coldrose.com] or interact with us.

1. DATA CONTROLLER

This website is operated by Cold Rose, registered in England and Wales. For the purpose of UK GDPR, the data controller is:

2. INFORMATION WE COLLECT

We may collect and process the following data:

  • Identity Data: Full name, date of birth (if provided)

  • Contact Data: Email address, billing address, shipping address, phone number

  • Order Data: Items purchased, payment confirmation, order history

  • Technical Data: IP address, browser type, time zone, operating system, and platform

  • Usage Data: Information on how you use our site

  • Marketing Data: Preferences for receiving promotional messages

3. HOW WE USE YOUR DATA

We process your personal data for the following purposes:

  • To manage and fulfill your orders

  • To process payments and issue invoices

  • To communicate with you about your order or account

  • To respond to customer service requests

  • To improve our website, services, and user experience

  • To send marketing communications, if you have opted in

  • To comply with legal and tax obligations

4. LEGAL BASIS FOR PROCESSING

We process your data based on the following lawful bases:

  • Performance of a contract: To fulfill your purchase

  • Legal obligation: To comply with applicable laws

  • Consent: For marketing or non-essential cookies

  • Legitimate interest: To improve our services and prevent fraud

5. DATA SHARING

Your data may be shared with trusted third parties, including:

  • Payment processors (e.g., Stripe, PayPal)

  • Delivery couriers (e.g., Royal Mail, DPD)

  • IT and hosting providers

  • Analytics and marketing services

  • Regulatory or legal authorities, where required by law

All third parties are required to protect your data and act only on our instructions.

6. INTERNATIONAL TRANSFERS

If your data is transferred outside the UK or EEA, we ensure it is protected using appropriate safeguards, such as standard contractual clauses or reliance on providers with approved data protection frameworks.

7. DATA RETENTION

We retain your personal data only as long as necessary for the purposes it was collected, including:

  • For as long as your account is active

  • For 6 years for financial records, as required by law

  • Until you withdraw your consent for marketing (if applicable)

8. YOUR RIGHTS

Under the UK GDPR, you have the following rights:

  • Access your personal data

  • Request correction or deletion

  • Object to or restrict processing

  • Withdraw consent at any time (for marketing)

  • Request data portability

To exercise any of these rights, contact us at [Insert Support Email].

9. DATA SECURITY

We use appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction of your data. However, no method of internet transmission is 100% secure.

10. COOKIES

We use cookies to enhance user experience, analyze site traffic, and support marketing activities. You may manage cookie settings through your browser. For more information, see our [Cookie Policy].

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the revised effective date. Your continued use of the website indicates acceptance of the updated terms.

12. CONTACT US

For any questions or concerns regarding this Privacy Policy, contact us at:
Email: [info@coldrose.com]
Website: [www.coldrose.com]
 

bottom of page