Privacy Policy
Privacy Policy
1. Information About the Collection of Personal Data and the Data Controller
1.1 General Information
Thank you for visiting Harper's Collection. We value your privacy and want you to understand how personal information is collected, used and handled when you visit or interact with our website.
For the purposes of this Privacy Policy, “personal data” means any information that identifies you directly or indirectly or that can reasonably be linked to you as an individual.
1.2 Data Controller
For purposes of the General Data Protection Regulation (GDPR), the party responsible for processing personal data through this website is:
Harper's Collection
The data controller is the person or organization that independently, or together with others, determines why and how personal information is processed.
If you have questions regarding the processing of your personal information, you may contact us at:
1.3 Website Security
Our website uses SSL or TLS encryption to help protect personal information and other confidential data transmitted through the website, including order information and customer inquiries.
You can generally identify a secure connection by the “https://” prefix and the padlock symbol displayed in your browser's address bar.
We do not use automated decision-making or profiling that produces legal effects or similarly significant consequences for users within the meaning of Article 22 GDPR.
2. Data Collected When Visiting Our Website
When you visit our website solely to browse information without creating an account, placing an order or otherwise actively submitting personal information, certain technical information may automatically be transmitted by your browser to our servers.
This information may include:
-
The webpage or page visited
-
Date and time of access
-
Amount of data transferred
-
Referring website or source
-
Browser type
-
Operating system
-
IP address, which may be anonymized where applicable
This information is processed where applicable under Article 6(1)(f) GDPR, based on our legitimate interest in maintaining the stability, functionality and security of our website.
Server information is generally not used for unrelated purposes or disclosed unnecessarily.
However, we reserve the right to review server logs if there are reasonable indications of unlawful, fraudulent or abusive activity involving the website.
3. Cookies
We use cookies and similar technologies to improve the functionality of our website and provide customers with a smoother browsing and shopping experience.
Cookies are small text files that are stored on your device.
Some cookies are automatically deleted when you close your browser. These are commonly referred to as session cookies.
Other cookies may remain stored on your device for a specified period and can allow us or third-party providers to recognize your browser during future visits. These are generally referred to as persistent cookies.
Depending on their purpose, cookies may process information such as:
-
Browser information
-
Device information
-
Approximate location information
-
IP address
-
Shopping cart information
-
Website preferences
-
Interaction data
Persistent cookies are automatically removed after the applicable retention period, which may differ depending on the type and purpose of the cookie.
Certain cookies are necessary to provide important website functionality, including preserving products placed in your shopping cart.
Where personal information is processed through cookies, the legal basis may include Article 6(1)(b) GDPR when processing is required to perform a contract, or Article 6(1)(f) GDPR where processing is based on our legitimate interest in maintaining a functional and customer-friendly website.
We may also cooperate with advertising or marketing partners that use third-party cookies to help us understand website performance or display more relevant advertising.
Where applicable, additional information regarding these technologies and providers is included in the relevant sections of this Privacy Policy.
When you first visit our website, you may be presented with a cookie consent banner allowing you to accept, reject or manage cookies that are not strictly necessary.
You may change your cookie preferences where this functionality is available.
You can also configure your browser to notify you when cookies are being used, accept or reject individual cookies, or block certain categories of cookies.
Please note that restricting or disabling cookies may affect the functionality of certain parts of our website.
4. Contacting Harper's Collection
When you contact us through email, a website form or another communication method, we may collect personal information that you voluntarily provide.
The specific information collected depends on the method used and the information you include in your message.
This information is used primarily to:
-
Respond to your inquiry
-
Provide customer support
-
Communicate with you regarding your request
-
Perform necessary administrative or technical tasks
Where applicable, processing is based on our legitimate interest in responding to customer communications under Article 6(1)(f) GDPR.
If your communication relates to entering into or performing a contract, Article 6(1)(b) GDPR may also serve as the applicable legal basis.
Information related to your inquiry will generally be deleted after the matter has been fully resolved unless legal, accounting, contractual or regulatory retention requirements require us to retain it for a longer period.
5. Data Processing When Creating a Customer Account or Completing a Contract
When you provide personal information for the purpose of placing an order, entering into a contract or creating a customer account, we process that information in accordance with Article 6(1)(b) GDPR, where applicable.
The specific information collected will be shown in the relevant registration, checkout or account forms.
Information supplied by you may be stored and used for purposes including:
-
Managing your customer account
-
Processing purchases
-
Completing contractual obligations
-
Providing customer support
-
Handling returns or refunds
-
Meeting applicable legal obligations
You may request deletion of your customer account by contacting Harper's Collection.
Following completion of the relevant contract or deletion of your account, certain information may be restricted from further use and subsequently deleted after applicable statutory retention periods have expired.
This may include retention periods required under commercial, accounting or tax laws.
Information may be retained for longer where you have expressly consented to additional processing or where continued processing is otherwise legally permitted.
6. Use of Personal Data for Direct Marketing
6.1 Email Newsletter Subscription
If you subscribe to the Harper's Collection email newsletter, we may periodically send you information about our products, promotions, updates and offers.
The primary information required to subscribe is your email address.
Any additional information you provide may be voluntary and may be used to personalize communications.
Where applicable, we may use a double opt-in process.
This means that after subscribing, you may receive a confirmation email requiring you to confirm your subscription before promotional emails are sent.
By confirming your subscription, you consent to the processing of your personal information for newsletter purposes in accordance with Article 6(1)(a) GDPR.
For security and verification purposes, we may also store information such as:
-
Your IP address
-
Subscription date
-
Subscription time
This information may be used to demonstrate consent and help prevent unauthorized use of an email address.
Information collected specifically for newsletter registration will primarily be used for newsletter and promotional purposes.
You may unsubscribe at any time by using the unsubscribe function included in marketing emails or by contacting us at:
After unsubscribing, your email address will be removed from the relevant marketing distribution list unless continued processing is legally permitted or you have separately consented to another use.
6.2 Marketing Emails to Existing Customers
If you provide your email address when purchasing products or services from us, we may, where legally permitted, use that email address to send information about products or services similar to those you previously purchased.
Where permitted, this processing may be based on our legitimate interest in direct marketing under Article 6(1)(f) GDPR.
If you have previously objected to this type of marketing, we will not use your email address for this purpose.
You may object to receiving direct marketing communications at any time by contacting:
Once we receive and process your objection, we will stop using your email address for the relevant direct marketing purpose.
7. Processing Personal Data for Orders
7.1 Fulfilment and Delivery
When necessary to complete your order, personal information may be shared with shipping companies, fulfilment providers or other service partners responsible for delivering your products.
Only information necessary to complete the relevant service should be provided.
Where required for payment processing, payment-related information may also be transmitted to financial institutions or payment service providers involved in your transaction.
Such processing may be carried out under Article 6(1)(b) GDPR because it is necessary for performing the purchase contract.
7.2 Payment Service Providers
PayPal
If you select a payment option provided through PayPal, relevant payment information may be transmitted to:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
The transmission of information is generally limited to what is necessary to complete payment processing and may be based on Article 6(1)(b) GDPR.
For certain payment methods, PayPal may also carry out creditworthiness or risk assessments.
For this purpose, PayPal may share or obtain information from credit agencies where permitted by applicable law.
Such processing may be based on PayPal's legitimate interest in assessing payment risk under Article 6(1)(f) GDPR.
Any scoring or credit assessment used by PayPal may influence whether a particular payment method is offered.
You should review PayPal's own privacy documentation for additional details regarding its processing activities.
You may contact PayPal directly to exercise rights relating specifically to information processed independently by PayPal.
PayPal may nevertheless continue processing information where necessary to perform payment-related contractual obligations.
SOFORT
If you choose a payment method offered through SOFORT, payment processing may be carried out by SOFORT GmbH, part of the Klarna Group.
Information supplied during checkout, together with relevant order details, may be provided to SOFORT where necessary to process the payment.
Such processing may take place under Article 6(1)(b) GDPR.
For more information regarding data processed by SOFORT or Klarna, please review the applicable privacy information made available by those providers.
8. Review Reminder Communications
Where you have expressly consented, we may use your email address to send a one-time reminder asking you to provide feedback or review your purchase.
Such processing is based on your consent under Article 6(1)(a) GDPR.
You may withdraw your consent at any time by contacting Harper's Collection at:
Withdrawal of consent will apply to future processing.
9. Social Media Features and Plugins
9.1 Facebook
Our website may contain buttons or links associated with Facebook.
Where these buttons are implemented using a privacy-conscious linking method rather than a fully active social plugin, visiting a page containing the button does not automatically establish a connection with Facebook's servers.
A connection may instead occur when you actively click the Facebook button or link.
You may then be redirected to Facebook, where interactions will be governed by Facebook's own privacy and data-processing practices.
Please consult Facebook's privacy information for additional details about how Facebook processes personal information.
Any exceptional customs-clearance charges or import duties relating to your purchase are separate from social media processing and, where applicable, remain the responsibility of the customer.
9.2 Google+ References
Our website policy may reference functionality historically associated with Google's Google+ social platform.
Where social buttons are implemented as simple links rather than directly loaded plugins, data is generally not transmitted to the relevant provider until the user actively clicks the link.
Any interaction with a Google service is subject to Google's applicable privacy terms and policies.
9.3 Instagram
Our website may also include buttons or links that direct users to Instagram.
Where these features are implemented using standard links rather than automatically loaded social plugins, a connection with Instagram's servers is generally established only after you click the relevant button or link.
After being redirected to Instagram, any interaction with the platform is governed by Instagram's own privacy practices and terms.
Please consult Instagram's privacy information if you would like additional details regarding its collection and processing of personal information.
10. Online Marketing
10.1 DoubleClick by Google
Our website may use DoubleClick by Google or related Google advertising technologies for online marketing purposes.
These technologies may use cookies or similar identifiers to:
-
Display advertising that is more relevant to users
-
Measure the performance of advertising campaigns
-
Limit repetitive display of identical advertisements
-
Record conversions associated with advertising interactions
Where applicable, processing may be based on our legitimate interest in marketing and improving our website under Article 6(1)(f) GDPR, subject to applicable consent requirements.
Google may receive information indicating that your browser accessed a particular page of our website or interacted with an advertisement.
If you are signed into a Google account, Google may be able to associate certain activity with your account.
Even when you are not logged in, technical information such as your IP address may be processed.
You can manage advertising and cookie preferences through your browser and applicable Google advertising settings.
Blocking advertising cookies may reduce tracking functionality but can also affect certain website features.
Additional information regarding Google's data-processing activities is available through Google's privacy documentation.
10.2 Google Ads Conversion Tracking
Our website may use Google Ads conversion tracking to evaluate the effectiveness of advertising campaigns.
When you click a Google advertisement, a conversion cookie or similar identifier may be stored on your device.
This can allow Google and Harper's Collection to understand whether an advertisement resulted in an action such as visiting a particular page or completing a purchase.
Conversion information is generally used in aggregated campaign statistics and is not intended to directly identify individual users to us.
Where applicable, our use of conversion tracking is based on our legitimate interest in effective online advertising under Article 6(1)(f) GDPR, subject to any consent requirements that apply.
You may prevent participation in conversion tracking by adjusting your browser or advertising cookie preferences.
Please note that blocking cookies may affect certain website functions.
11. Web Analytics
Google Analytics
Our website may use Google Analytics, a web analytics service offered by Google.
Google Analytics uses cookies or similar technologies to help analyze how visitors interact with our website.
Information generated through these technologies may include:
-
Pages visited
-
Time spent on pages
-
Approximate location
-
Device information
-
Browser information
-
IP address or an anonymized version of your IP address
Where IP anonymization is enabled, IP addresses may be shortened before further processing in order to reduce the possibility of direct identification.
In certain technical circumstances, information may be transferred to Google servers outside your country of residence.
Where applicable, the processing of analytics information may be based on our legitimate interest in statistical analysis, website optimization and marketing under Article 6(1)(f) GDPR, subject to applicable consent requirements.
Google may process this information on our behalf to:
-
Analyze website usage
-
Prepare website activity reports
-
Provide analytics-related services
-
Help us understand customer interaction with the website
You may restrict cookies through your browser settings.
You may also use available Google Analytics opt-out tools where applicable.
Disabling analytics cookies may affect certain website features or reduce our ability to measure website performance.
Where Google Analytics uses cross-device or User-ID functionality, interactions from different sessions or devices may potentially be associated with a pseudonymous identifier.
Where available, you may object to or disable this type of tracking using your cookie preferences, browser settings or Google-provided opt-out mechanisms.
12. Retargeting, Remarketing and Recommendation Advertising
Facebook Custom Audience and Pixel Technologies
Our website may use advertising technologies provided by Facebook or its related companies, including technologies commonly known as the Facebook Pixel.
Where required, these technologies are used only after obtaining the appropriate consent.
They may allow us to understand how users interact with our website after viewing or clicking an advertisement.
This information can help us:
-
Measure advertising effectiveness
-
Conduct statistical analysis
-
Improve future campaigns
-
Create relevant advertising audiences
Information made available directly to Harper's Collection through these tools may be aggregated or pseudonymous.
However, Facebook may independently process information and associate it with user accounts in accordance with its own privacy terms.
Where consent is required, processing is based on Article 6(1)(a) GDPR.
You can manage or disable advertising cookies through your browser, website cookie settings and applicable advertising preference tools.
Disabling cookies may affect certain website functionality.
Google Ads Remarketing
Our website may also use Google Ads Remarketing features.
These technologies allow us to display advertisements to previous website visitors through Google search results or third-party websites.
For this purpose, Google may place cookies or similar identifiers in your browser to create pseudonymous interest profiles based on the pages you have visited.
Where applicable, this processing may be based on our legitimate interest in marketing our website under Article 6(1)(f) GDPR, subject to applicable consent requirements.
If you are signed into your Google account and have permitted Google to use browsing information for personalized advertising, Google may combine relevant account information with analytics data to support cross-device advertising audiences.
You can manage personalized advertising through Google advertising settings or by changing your browser cookie preferences.
Blocking cookies may limit certain features of our website.
13. Your Data Protection Rights
Applicable data protection law may provide you with several rights regarding your personal information.
13.1 Your Rights Under the GDPR
Right of Access – Article 15 GDPR
You have the right to request information regarding personal data we process about you.
This may include information about:
-
The purposes of processing
-
Categories of personal data
-
Recipients or categories of recipients
-
Expected storage periods
-
Your rights regarding correction or deletion
-
Your right to restrict or object to processing
-
Your right to lodge a complaint
-
The source of data that was not obtained directly from you
-
Automated decision-making or profiling where applicable
-
Safeguards used for applicable international data transfers
Right to Rectification – Article 16 GDPR
You have the right to request correction of inaccurate personal information and completion of incomplete personal information relating to you.
Right to Erasure – Article 17 GDPR
You may request deletion of your personal information where the applicable legal requirements are satisfied.
This right may be restricted when continued processing is necessary for reasons such as:
-
Compliance with a legal obligation
-
Exercise of freedom of expression and information
-
Public interest
-
Establishment, exercise or defense of legal claims
Right to Restriction of Processing – Article 18 GDPR
You may have the right to request restriction of personal-data processing in circumstances including where:
-
You dispute the accuracy of the information
-
You object to deletion and instead request restriction
-
You require information for a legal claim
-
You have objected to processing and a balancing assessment remains pending
Right to Notification – Article 19 GDPR
Where applicable, if your personal information has been corrected, deleted or restricted, we may be required to notify recipients to whom that information was previously disclosed.
You may also have the right to receive information about those recipients.
Right to Data Portability – Article 20 GDPR
Where legally applicable, you may request personal information you provided to us in a structured, commonly used and machine-readable format.
You may also have the right to request transmission of that information to another controller where technically feasible.
Right to Withdraw Consent – Article 7(3) GDPR
Where processing is based on your consent, you may withdraw that consent at any time for future processing.
Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.
Where no other legal basis applies, the relevant processing will be discontinued following withdrawal.
Right to Lodge a Complaint – Article 77 GDPR
If you believe your personal information has been processed in violation of applicable data protection law, you may have the right to submit a complaint to an appropriate supervisory authority.
This may include the supervisory authority in the country of your habitual residence, workplace or the location where the alleged infringement occurred.
13.2 Right to Object
Where we process personal information on the basis of legitimate interests, you may have the right to object to such processing based on circumstances relating to your particular situation.
If you submit a valid objection, we will stop the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless continued processing is required for the establishment, exercise or defense of legal claims.
If your personal information is processed for direct marketing purposes, you may object to that processing at any time.
Once your objection is received and processed, your information will no longer be used for the relevant direct marketing purpose.
14. Retention of Personal Information
The length of time we retain personal information depends on the nature of the information, why it was collected and any applicable legal retention requirements.
Certain records may need to be retained for periods required under:
-
Commercial law
-
Accounting requirements
-
Tax regulations
-
Contractual obligations
-
Other applicable legal requirements
After the relevant retention period expires, personal information will generally be securely deleted or anonymized unless it remains necessary for completing a contract, establishing or defending legal claims, complying with legal obligations or pursuing another legally permitted purpose.
Contact
If you have questions about this Privacy Policy, our privacy practices or the way Harper's Collection handles personal information, or if you wish to exercise any applicable data protection rights, please contact us at:
Harper's Collection
Email: info@harpers-collection.com