Privacy Policy

BACKGROUND:

Lorna Taylor t/a Lorna and the Gram understands that your privacy is important to you and that you care about how your personal data is used and shared online. We respect and value the privacy of everyone who visits this website, https://www.lornaandthegram.co.uk/ (“Our Site”) and will only collect and use personal data in ways that are described here, and in a manner that is consistent with Our obligations and your rights under the law.

Please read this Privacy & Cookies Policy carefully and ensure that you understand it. It explains how We handle your personal data.

Definitions and Interpretation

In this Policy the following terms shall have the following meanings:

“Cookie”	means a small text file placed on your computer or device by Our Site when you visit certain parts of Our Site and/or when you use certain features of Our Site. Details of the Cookies used by Our Site are set out in section 13, below;
“Cookie Law”	means the relevant parts of the Privacy and Electronic Communications (EC Directive) Regulations 2003;
“Data Protection Legislation” “personal data”	means all applicable legislation in force from time to time in the United Kingdom applicable to data protection and privacy including, but not limited to, the UK GDPR; the Data Protection Act 2018 (and regulations made thereunder); and the Privacy and Electronic Communications Regulations 2003 as amended; means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means personal data that you give to Us via Our Site. This definition shall, where applicable, incorporate the definitions provided in the Data Protection Legislation”; and
“We/Us/Our”	means Lorna Taylor t/a Lorna and the Gram of 17 Heather Avenue, Romford, Essex, RM1 4SL.

Information About Us

Our Site https://www.lornaandthegram.co... is owned and/or operated by Lorna and the Gram.

What Does This Policy Cover?

This Privacy Policy applies only to your use of Our Site. Our Site may contain links to other websites. Please note that We have no control over how your data is collected, stored, or used by other websites and We advise you to check the privacy policies of any such websites before providing any data to them.

Your Rights

As a data subject, you have the following rights under the Data Protection Legislation, which this Policy and Our use of personal data have been designed to uphold:

The right to be informed about Our collection and use of personal data;

The right of access to the personal data We hold about you (see section 12);

The right to rectification if any personal data We hold about you is inaccurate or incomplete (please contact Us using the details in section 14);

The right to be forgotten – i.e., the right to ask Us to delete any personal data We hold about you (We only hold your personal data for a limited time, as explained in section 6 but if you would like Us to delete it sooner, please contact Us using the details in section 14);

The right to restrict (i.e., prevent) the processing of your personal data;

The right to data portability (obtaining a copy of your personal data to re-use with another service or organisation);

The right to object to Us using your personal data for particular purposes; and

Rights with respect to automated decision making and profiling.

If you have any cause for complaint about Our use of your personal data, please contact Us using the details provided in section 14 and We will do Our best to solve the problem for you. If We are unable to help, you also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office.

For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens Advice Bureau.

What Data Do We Collect?

Depending upon your use of Our Site, We may collect some or all of the following personal and non-personal data (please also see section 13 on Our use of Cookies and similar technologies):

5.1 name;

5.2 contact information such as postal addresses, email addresses and telephone numbers;

5.3 financial information such as bank account details and credit / debit card numbers which are pseudonymised by the payment processor; and

5.4 demographic information such as post code, preferences and interests.

How Do We Use Your Data?

All personal data is processed and stored securely, for no longer than is necessary in light of the reason(s) for which it was first collected. We will comply with Our obligations and safeguard your rights under the Data Protection Legislation at all times. For more details on security see section 7, below.

Our use of your personal data will always have a lawful basis, either because it is necessary for Our performance of a contract with you, because you have consented to Our use of your personal data (e.g. by subscribing to emails), or because it is in Our legitimate interests. Specifically, We may use your data for the following purposes:

Providing and managing your access to Our Site;

Personalising and tailoring your experience on Our Site;

Supplying Our products and services to you (please note that We require your personal data in order to enter into a contract with you);

Personalising and tailoring Our services for you;

Replying to emails from you;

Supplying you with emails that you have opted into (you may unsubscribe or opt-out at any time by contacting us or using the unsubscribe link within any emails;

Market research; and

Analysing your use of Our Site to enable Us to continually improve Our Site and your user experience.

With your permission and/or where permitted by law, We may also use your data for marketing purposes which may include contacting you by email, telephone and post with information, news and offers on Our products and services. We will not, however, send you any unsolicited marketing or spam and will take all reasonable steps to ensure that We fully protect your rights and comply with Our obligations under the Data Protection Legislation.

You have the right to withdraw your consent to Us using your personal data at any time, and to request that We delete it.

We do not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. Data will therefore be retained for the following periods (or its retention will be determined on the following bases):

We will retain your contact details for as long as we contract with you and for 36 months thereafter;

We will retain your contact details for 36 months if you have enquired about our products or services thereafter, they will be deleted;

We will retain your contact details indefinitely if you have consented to receiving marketing materials

from us and for a period of 3 months once you unsubscribe; and

We will retain your financial information for as long as we contract with you and, thereafter, for the permitted period of time required by law.

How and Where Do We Store Your Data?

We only keep your personal data for as long as We need to in order to use it as described above in section 6, and/or for as long as We have your permission to keep it.

We will store some of your personal data in the UK. This means that it will be fully protected under the UK’s Data Protection Legislation.

We will store some of your personal data within the European Economic Area (the “EEA”). The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein. This means that your personal data will be fully protected under the EU GDPR and/or to equivalent standards by law. Transfers of personal data to the EEA from the UK are permitted without additional safeguards.

We may store some or all of your personal data in countries outside of the UK and EEA. These are known as “third countries”. We will take additional steps in order to ensure that your personal data is treated just as safely and securely as it would be within the UK and under the Data Protection Legislation Data security is very important to Us, and to protect your data We have taken suitable measures to safeguard and secure data collected through Our Site.

We use the following third-party software and some of your data may be stored on their servers:

Webmail email servers;

Google cloud storage;

Mailerlite; and

Stripe.

Steps We take to secure and protect your data include:

All devices and computers that we store your data on are password protected;

All devices and computers that we store your data have anti-virus software and are constantly updated to the most recent operating system; and

We only store your data on computers and devices owned by Us. We also use Contractors who may store Our data on their computers, servers and any such cloud storage they may access. We will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, Our obligations, and the obligations of the third party under the law.

Do We Share Your Data?

We may sometimes contract with third parties to supply products and services to you on Our behalf. These may include payment processing, delivery of goods, search engine facilities, advertising, and marketing. In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, We will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, Our obligations, and the obligations of the third party under the law.

We may compile statistics about the use of Our Site including data on traffic, usage patterns, user numbers, sales, and other information. All such data will be anonymised and will not include any personally identifying data, or any anonymised data that can be combined with other data and used to identify you. We may from time to time share such data with third parties such as prospective investors, affiliates, partners, and advertisers. Data will only be shared and used within the bounds of the law.

We may sometimes use third party data processors that are located outside of the United Kingdom and European Economic Area (“the EEA”) (The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein). Where We transfer any personal data outside the EEA, We will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the UK under the Data Protection Legislation including:

Using Standard Contractual Clauses “SCCs” as a mechanism to safely process data outside of the UK and EEA to third countries which have not been granted adequacy; or

Is a Country that has been granted adequacy which confirms its data protection legislation is adequate to safeguard data processing.

In certain circumstances, We may be legally required to share certain data held by Us, which may include your personal data, for example, where We are involved in legal proceedings, where We are complying with legal requirements, a court order, or a governmental authority.

What Happens If Our Business Changes Hands?

We may, from time to time, expand or reduce Our business and this may involve the sale and/or the transfer of control of all or part of Our business. Any personal data that you have provided will, where it is relevant to any part of Our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy & Cookies Policy, be permitted to use that data only for the same purposes for which it was originally collected by Us.

In the event that any of your data is to be transferred in such a manner, you will not be contacted in advance and informed of the changes.

How Can You Control Your Data?

In addition to your rights under the Data Protection Legislation, set out in section 4, when you submit personal data via Our Site, you may be given options to restrict Our use of your data. In particular, We aim to give you strong controls on Our use of your data for direct marketing purposes (including the ability to opt-out of receiving emails from Us which you may do by unsubscribing using the links provided in Our emails and at the point of providing your details and by managing your Account.

You may also wish to sign up to one or more of the preference services operating in the UK: The Telephone Preference Service (“the TPS”), the Corporate Telephone Preference Service (“the CTPS”), and the Mailing Preference Service (“the MPS”). These may help to prevent you receiving unsolicited marketing. Please note, however, that these services will not prevent you from receiving marketing communications that you have consented to receiving.

Your Right to Withhold Information

You may access Our Site without providing any data at all.

You may restrict Our use of Cookies. For more information, see section 13.

How Can You Access Your Data?

You have the right to ask for a copy of any of your personal data held by Us (where such data is held). Under the Data Protection Legislation, no fee is payable and We will provide any and all information in response to your reasonable request free of charge. Please contact Us for more details at lorna@lornaandthegram.co.uk, or using the contact details below in section 14.

COOKIES POLICY

Our Use of Cookies

Our Site may place and access certain first party Cookies on your computer or device. First party Cookies are those placed directly by Us and are used only by Us. We use Cookies to facilitate and improve your experience of Our Site and to provide and improve Our services. We have carefully chosen these Cookies and have taken steps to ensure that your privacy and personal data is protected and respected at all times.

All Cookies used by and on Our Site are used in accordance with current Cookie Law. We may use some or all of the following types of Cookies:

Strictly Necessary Cookies

A Cookie falls into this category if it is essential to the operation of Our Site, supporting functions such as logging in, your shopping basket, and payment transactions.

Analytics Cookies

It is important for Us to understand how you use Our Site, for example, how efficiently you are able to navigate around it, and what features you use. Analytics Cookies enable us to gather this information, helping Us to improve Our Site and your experience of it.

Functionality Cookies

Functionality Cookies enable Us to provide additional functions to you on Our Site such as

personalisation and remembering your saved preferences. Some functionality Cookies may also be strictly necessary Cookies, but not all necessarily fall into that category.

Targeting Cookies

It is important for Us to know when and how often you visit Our Site, and which parts of it you have used (including which pages you have visited and which links you have visited). As with analytics Cookies, this information helps us to better understand you and, in turn, to make Our Site and advertising more relevant to your interests.

13.2.5 Persistent Cookies

Any of the above types of Cookie may be a persistent Cookie. Persistent Cookies are those which remain on your computer or device for a predetermined period and are activated each time you visit Our Site.

13.2.6 Session Cookies

Any of the above types of Cookie may be a session Cookie. Session Cookies are temporary and only remain on your computer or device from the point at which you visit Our Site until you close your browser. Session Cookies are deleted when you close your browser.

We do not currently have any first party cookies running on Our Site.

Our Site does not currently use any analytics services.

It is recommended that you keep your internet browser and operating system up-to-date and that you consult the help and guidance provided by the developer of your internet browser and manufacturer of your computer or device if you are unsure about adjusting your privacy settings.

Contacting Us

If you have any questions about Our Site or this Privacy Policy, please contact Us by email at lorna@lornaandthegram.co.uk or by post to Lorna and the Gram of 17 Heather Avenue, Romford, Essex, RM1 4SL. Please ensure that your query is clear, particularly if it is a request for information about the data We hold about you (as under section 12, above).

Changes to Our Privacy Policy

We may change this Privacy Policy from time to time (for example, if the law changes). Any changes will be immediately posted on Our Site. This policy was last updated 20th January 2022

Last updated: August 2021

Lorna Taylor, (“the Company”, “us”, “we”, or “our”), operates the website https://www.lornaandthegram.co.uk/ We may change or add to this privacy notice, so we encourage you to come back and read it periodically. Lorna Taylor is the data controller that resides in Romford, Essex, UK.

This privacy notice governs the website Lorna Taylor informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data. Your privacy is very important to us.

We use your data to provide and improve our site. By using the site, you agree to the collection and use of information in accordance with this policy.

DATA WE COLLECT

While using our site, we may ask you to provide us with certain personal data that can be used to contact or identify you (“Personal Data”). Personal Data may include, but is not limited to:

· Email address

· First name and last name

· Phone number

· Address, State, Province, ZIP/Postal code, City

For clients who work with the company, we may also collect further, voluntary information to enable us to provide our service in an optimized manner. Some data collected from clients may include:

· Sensitive Information

· Goals and Aspirations

· Business Details

Information Collected Automatically

Like many websites, we and our service providers, such as Facebook, use cookies, web beacons and other technologies to receive and store certain types of information when you interact with us through your computer or mobile device. Using these technologies helps us recognize you, customize your experience and make relevant marketing messages. Here are some of the types of information we collect:

· Log & Device data. When you visit our site, we may automatically record information (“log data”), including information that your browser sends whenever you visit our site. This log data may include your web address you came from or are going to, your device model, operating system, browser type, unique device identifier, IP address, mobile network carrier, and time zone or location.

· Cookie data. We may use “cookies” (a small text file sent by your computer each time you visit our site) or similar technologies to record log data. When we use cookies, we may use “session” cookies (that last until you close your browser) or “persistent” cookies (that last until you or your browser delete them). To help us make e-mails more useful and interesting, we often receive a confirmation when you open e-mail from us if your computer supports such capabilities. You can opt out of receiving emails from us. Please see the Your Choices section below.

HOW WE USE YOUR INFORMATION

We may use information that we collect about you to:

· Provide our Products and Services. We will use your information to provide our products and services to you.

· Understand and improve our products. We will perform research and analysis about your use of, or interest in, our products, services, or content, or products, services or content offered by others. We do this to help make our products better and to develop new products.

· Communicate with you. We may send you emails about new product features or other news about us or on topics we think would be relevant to you. You may opt out of these at any time. Visit the Your Choices section below.

· Responding to your requests. We will also use your information to respond to your questions or comments.

We may contact you to inform you about changes in our services, our service offering and other important service related notices such as changes to the privacy policy or about security or fraud notices.

We may develop and display content and advertising tailored to your interests on our products and services on our site and on other sites;

We also may use your information to manage our business or perform functions as otherwise described to you at the time of collection.

Sharing and Disclosure

We do not share your personal information with others except as indicated within this policy or when we inform you and give you an opportunity to opt out of having your personal information shared.

We will share your information in the following ways

· With third party service providers, agents, or contractors. We use other companies, agents or contractors (“Service Providers”) to perform services on our behalf or to assist us with providing services to you. For example, we may engage Service Providers to process credit card transactions or other payment methods. Or, we may engage Service Providers to provide services such as marketing, advertising, communications, infrastructure and IT services, to provide customer service, to collect debts, and to analyse and enhance data (including data about users’ interactions with our service). These Service Providers may have access to your personal or other information in order to provide these functions. In addition, some of the information we request may be collected by third party providers on our behalf. We do not authorize them to use or disclose your personal information except in connection with providing their services.

Analytics: Specifically for analytics providers, we use Google Analytics Google Analytics which is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.

You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: http://www.google.com/intl/en/policies/privacy/ Google also recommends installing the Google Analytics Opt-out Browser Add-on – https://tools.google.com/dlpag... – for your web browser. Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics.

Advertising:

We may use third-party Service Providers to show advertisements, which may include targeted advertisements on a third party site after you have visited our website. We and the third party service providers use cookies to inform, optimize, measure performance serve ads based on your previous visits to our site.

Please note at this time, we do not recognize automated browser signals regarding tracking mechanisms, which may include “do not track” instructions.

We work with Google AdSense & DoubleClick Cookie Google, as a third party vendor, uses cookies to serve ads on our site. Google’s use of the DoubleClick cookie enables it and its partners to serve ads to our users based on their visit to our Service or other websites on the Internet. You may opt out of the use of the DoubleClick Cookie for interest-based advertising by visiting the Google Ads Settings web page: http://www.google.com/ads/preferences/

Facebook: You can learn more about interest-based advertising from Facebook by visiting this page: https://www.facebook.com/help/516147308587266/

To opt-out from Facebook’s interest-based ads follow these instructions from Facebook: https://www.facebook.com/help/568137493302217

To see more about Facebook’s participation in the Digital Advertising Alliance please visit the Choices section of this notice.

For more information on the privacy practices of Facebook, please visit Facebook’s Data Policy: https://www.facebook.com/privacy/explanation

Payment Providers: We may provide paid products and/or services within the site. When we do, we use third-party services for payment processing (e.g. payment processors). We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their own privacy notice. The payment processors we work with adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

The payment processors we work with are:

Stripe – Please view their privacy policy here

Paypal – Please view their privacy policy here

· To comply with legal process or to protect Lorna Taylor. If we believe that disclosure is reasonably necessary to comply with a law, regulation, legal or governmental request; to enforce applicable terms of use, including investigation of potential violations thereof; to protect the safety, rights, or property of the public, any person, or Lorna Taylor as required by law; or to detect, prevent, or otherwise address, security or technical issues or illegal or suspected illegal activities (including fraud).

· Business Transfers.

We may engage in a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction or proceeding that involves the transfer of the information described in this Policy. In such transitions, customer information is typically one of the business assets that is transferred or acquired by a third party. In the unlikely event that we or substantially all of our assets are acquired or enter a court proceeding, you acknowledge that such transfers may occur and that your personal information can continue to be used as set forth in this privacy policy.

Links to Other Sites

We may have links on our site to other sites that we do not operate. If you click on a third party link, you will be taken directly to that site which is governed by its own privacy notice. We strongly encourage you to read that privacy notice. We do not control that site and assume no responsibility for the content, policies or its practices.

Retention

Lorna Taylor will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Notice. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Lorna Taylor will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.

Choices and Individual Rights:

We aim to take reasonable steps so you can correct, amend, delete or limit the use of your Personal Data.

You have the following choices:

· E-mail. As described above, if you do not wish to receive promotional e-mails from us, you may opt out at any time.

· Your browser’s help function should contain instructions on how to set your computer to accept all cookies, to notify you when a cookie is issued, or to not receive cookies at any time.

· You can opt out of online targeted advertising by opting out within the advertisement itself or by visiting Digital Advertising Alliance, http://www.aboutads.info/, the Digital Advertising Alliance of Canada in Canada http://youradchoices.ca/ or the European Interactive Digital Advertising Alliance in Europe http://www.youronlinechoices.eu/. You can also opt out of the Digital Advertising Alliance using your mobile device settings.

Your rights under certain circumstances:

To access and receive a copy of the Personal Data we hold about you.

To rectify any Personal Data held about you that is inaccurate

To request the deletion of Personal Data held about you

You have the right to data portability for the information you have provided to us. You can request to obtain a copy of this information in a commonly used electronic format so that you can manage and move it. We will need to verify your identity before being able to respond to such requests. Please contact us at lorna@lornaandthegram.co.uk

Security

We believe we use reasonable administrative, logical, physical and managerial measures to safeguard your personal information against loss, theft and unauthorized access, use and modification. Unfortunately, no measures can be guaranteed to provide 100% security. Accordingly, we cannot guarantee the security of your information.

Our policy on children’s information

Our site is not directed to children under 16. If you learn that your minor child has provided us with personal information without your consent, please contact us.

Changes to the Policy

We may change this policy from time to time, and if we do make changes, we’ll post any changes on this page. If you continue to visit our site after those changes are in effect, you agree to the revised policy. If the changes are significant, we may provide more prominent notice or get your consent on the new policy.

Contacting Us

If you have any questions or comments about this policy, please contact us at lorna@lornaandthegram.co.uk

Cookies Policy

Last updated: August 2021

Lorna Taylor(“us”, “we”, or “our”) uses cookies on the Website https://www.lornaandthegram.co...

(the “Service”). By using the Service, you consent to the use of cookies.

Our Cookies Policy explains what cookies are, how we use cookies, how third-parties we may partner with may use cookies on the Service, your choices regarding cookies and further information about cookies.

What are cookies

Cookies are small pieces of text sent to your web browser by a website you visit. A cookie file is stored in your web browser and allows the Service or a third-party to recognize you and make your next visit easier and the Service more useful to you.

Cookies can be “persistent” or “session” cookies. Persistent cookies remain on your personal computer or mobile device when you go offline, while session cookies are deleted as soon as you close your web browser.

How Lorna Taylor uses cookies

When you use and access the Service, we may place a number of cookies files in your web browser.

We use cookies for the following purposes:

· To enable certain functions of the Service

· To provide analytics

We use both session and persistent cookies on the Service and we use different types of cookies to run the Service:

· Essential cookies. We may use cookies to remember information that changes the way the Service behaves or looks, such as a user’s language preference on the Service.

· Analytics cookies. We may use analytics cookies to track information how the Service is used so that we can make improvements. We may also use analytics cookies to test new advertisements, pages, features or new functionality of the Service to see how our users react to them.

Third-party cookies

In addition to our own cookies, we may also use various third-parties cookies to report usage statistics of the Service, deliver advertisements on and through the Service, and so on.

What are your choices regarding cookies

If you’d like to delete cookies or instruct your web browser to delete or refuse cookies, please visit the help pages of your web browser.

Please note, however, that if you delete cookies or refuse to accept them, you might not be able to use all of the features we offer, you may not be able to store your preferences, and some of our pages might not display properly.

· For the Chrome web browser, please visit this page from Google: https://support.google.com/accounts/answer/32050

· For the Internet Explorer web browser, please visit this page from Microsoft: http://support.microsoft.com/kb/278835

· For the Firefox web browser, please visit this page from Mozilla: https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored

· For the Safari web browser, please visit this page from Apple: https://support.apple.com/kb/PH21411?locale=en_US

· For any other web browser, please visit your web browser’s official web pages.

Where can you find more information about cookies

You can learn more about cookies and the following third-party websites:

· AllAboutCookies: http://www.allaboutcookies.org/

· Network Advertising Initiative: http://www.networkadvertising.org/

Disclaimer:

This policy may be changed at any time at Lorna Taylor discretion. If we should update this policy, we will post the updates to this page on our Website.

This policy was last updated: August 2021

If you have any questions or concerns regarding our privacy policy please direct them to lorna@lornaandthegram.co.uk You may also send a letter to:

Lorna Taylor, Romford, Essex, UK.

Thank you