PRIVACY POLICY

Introduction

1.1 We are committed to safeguarding the privacy of visitors and service users of www.numinaeclat.uk.

1.2 This policy applies where we are acting as a data controller with respect to the personal data of www.numinaeclat.uk visitors and service users; in other words, where we determine the purposes and means of processing that personal data.

1.3 We use cookies on our website. Insofar as those cookies are not strictly necessary for the provision of www.numinaeclat.uk and our services, we will ask you to consent to our use of cookies when you first visit our website.

1.4 Our website incorporates privacy controls that affect how we will process your personal data. By using the privacy controls, you can specify whether you would like to receive direct marketing communications and limit the publication of your information.

1.5 In this policy, “we”, “us” and “our” refer to Maria Robertson trading as Numina Éclat. For more information about us, please see Section 13.

How we use your personal data

2.1 In this section we set out:

(a) the general categories of personal data we may process;

(b) the purposes for which we may process personal data; and

(c) the legal bases of the processing.

2.2 We may process data about your use of our website and services (“usage data”), including your IP address, location, browser type and version, operating system, referral source, length of visit, page views, and website navigation paths. This data may be processed for analysing website usage and improving our website and services. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website.

2.3 We may process your account data (“account data”), including your name, email address, and other details you provide. The legal basis is our legitimate interests in operating www.numinaeclat.uk and communicating with you.

2.4 We may process profile data you provide on our website (“profile data”), such as your name, contact details, or other information submitted in order to receive services or newsletters. The legal basis is our legitimate interests in managing customer relationships and providing services.

2.5 We may process information contained in any enquiry you submit to us regarding goods or services (“enquiry data”) for offering, marketing, and selling relevant products or services. The legal basis is consent.

2.6 We may process transaction data relating to purchases (“transaction data”), including your contact details, payment information, and purchase details, for supplying goods and keeping records. The legal basis is performance of a contract and our legitimate interests in proper administration.

2.7 We may process information you provide for subscribing to newsletters or email notifications (“notification data”) for sending you relevant updates. The legal basis is consent.

2.8 We may process correspondence data in communications you send to us (“correspondence data”) for communicating with you and keeping records. The legal basis is our legitimate interests, namely the proper administration of our business.

2.9 Please do not supply any other person’s personal data to us, unless we prompt you to do so.

Providing your personal data to others

4.1 We may disclose your personal data to our professional advisers (such as lawyers, accountants, and insurers) as reasonably necessary for our legitimate interests and compliance with legal obligations.

4.2 Financial transactions on our website are handled by our payment providers (e.g., PayPal, Stripe). We will share transaction data with these providers only to the extent necessary for processing your payments, refunds, or related queries. You can review their privacy policies at:

  • PayPal: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full

  • Stripe: https://stripe.com/gb/privacy

4.3 We may disclose your personal data where required to comply with a legal obligation, or to establish, exercise, or defend legal claims.

International transfers of your personal data

5.1 Information we collect may be stored and processed in, and transferred between, countries outside the UK or European Economic Area.

5.2 Our hosting facilities may be located outside the UK, and you acknowledge that your data may be transferred internationally. We will ensure such transfers comply with data protection laws and that appropriate safeguards (e.g., Standard Contractual Clauses) are in place.

Retaining and deleting your personal data

6.1 We will not keep your personal data for longer than necessary for the purposes it was collected.

6.2 We will retain personal data relating to purchases or enquiries for a minimum period of 12 months following the date of contact.

6.3 We may retain your personal data beyond this period if required for compliance with legal obligations or to protect your vital interests.

Amendments

7.1 We may update this policy from time to time by publishing a new version on our website.

7.2 You should check this page periodically to ensure you are happy with any changes.

7.3 We will notify you of significant changes by email.

Your rights

8.1 Under data protection law you have:

  • the right to access your personal data;

  • the right to rectification;

  • the right to erasure;

  • the right to restrict processing;

  • the right to object to processing;

  • the right to data portability;

  • the right to complain to a supervisory authority; and

  • the right to withdraw consent.

8.2 You may exercise your rights by contacting us using the details in Section 13.

About cookies

9.1 A cookie is a small file placed on your device by our website. Cookies help us analyse website usage and enhance your experience.

9.2 We use both session cookies (which expire when you close your browser) and persistent cookies (which remain until they expire or you delete them).

Cookies we use

10.1 We use cookies for:

(a) authentication – identifying you on our website;

(b) security – protecting user accounts;

(c) analytics – understanding website usage to improve our services;

(d) cookie consent – recording your preferences.

Cookies used by our service providers

11.1 Our website is built on Squarespace, which uses cookies to support website functionality, analytics, and security. Squarespace may set cookies such as ss_cid, ss_cvr, ss_cpvisit, ss_cookieAllowed, and others. You can read Squarespace’s privacy policy at: https://www.squarespace.com/privacy

11.2 We may also use Google Analytics to analyse site use. Google’s privacy policy is available at: https://policies.google.com/privacy.

Managing cookies

12.1 Most browsers allow you to refuse or delete cookies. For details on managing cookies in your browser, visit:

  • Chrome: https://support.google.com/chrome/answer/95647

  • Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies

  • Edge: https://privacy.microsoft.com/en-GB/windows-10-microsoft-edge-and-privacy

12.2 Blocking cookies may affect your ability to use all features on our website.

Our details

13.1 This website is owned and operated by Maria Robertson trading as Numina Éclat.

13.2 Our principal place of business is in Edinburgh, UK.

13.3 You can contact us:

(a) by post (please request our address by email);

(b) via our website contact form; or

(c) by email at mariadaartist@yahoo.com.

Data protection officer

14.1 Our data protection officer is Maria Robertson, who can be contacted at mariadaartist@yahoo.com.