Privacy policy

Last updated: 14 October 2025

This Privacy Policy describes how Rose & Keith London (“we”, “us”, or “our”), operating under the brand Rose & Keith, collects, uses, and discloses your personal information when you visit or make a purchase from https://www.roseandkeith.co.uk (the “Site”) or otherwise interact with us through any of our services (collectively, the “Services”).

For purposes of this Privacy Policy, "you" and "your" mean you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we collect pursuant to this Privacy Policy. Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect updates in our practices or to comply with operational, legal, or regulatory requirements. Whenever we make changes, we will publish the updated version on our Site, revise the "Last updated" date, and take any additional steps required by applicable law.

Collection and Use of Personal Information

To deliver our Services, we collect personal data from multiple sources depending on how you interact with us. In addition to the specific purposes outlined below, we may use your personal data to communicate with you, operate and improve our Services, comply with legal obligations, enforce our terms, and protect our business and users.

Types of Personal Information We Collect

Data You Provide Directly

  • Contact details such as name, address, email address, and phone number.
  • Order information such as billing and shipping addresses, email, phone number, and payment confirmation.
  • Account credentials such as usernames and passwords.
  • Customer support messages and other communications.

Certain features of the Site require specific information to function properly. You may choose not to provide such data, but this may limit your use of those features.

Data We Automatically Collect

We may automatically gather information about your interactions with our Site (“Usage Data”) using cookies and similar technologies. This includes device and browser details, IP address, network and usage data, and Site interaction metrics.

Data from Third Parties

We may also receive personal data from third parties, including:

  • Shopify, our e-commerce platform provider.
  • Payment processors such as Shopify Payments, PayPal, or Klarna.
  • Marketing and analytics partners who collect data via cookies, web beacons, and similar tools.

All third-party data is handled in accordance with this Privacy Policy. Please also see the section “Third-Party Sites.”

Uses of Personal Information

1. Service Delivery

  • Process payments and complete your transactions.
  • Send order updates and shipping confirmations.
  • Manage returns, refunds, and exchanges.
  • Provide customer support and account management.
  • Enhance your shopping experience through Shopify services.

2. Marketing Purposes

We may use your information to send promotional emails, SMS, or postal mail, and to show you relevant ads. If you are based in the EEA, this processing is done under our legitimate interest in promoting our business (Art. 6(1)(f) GDPR). You can opt out at any time.

3. Security and Fraud Prevention

We use data to detect and prevent fraud, unauthorised access, and illegal activity. For EEA users, this processing is based on our legitimate interest in maintaining security (Art. 6(1)(f) GDPR).

4. Customer Support and Optimisation

We use your data to respond to enquiries and continuously improve our Site and Services. This processing is also based on legitimate interest (Art. 6(1)(f) GDPR).

Cookies

We use cookies to operate and enhance the Site, store preferences, and collect analytics. For information on cookies used by Shopify, please visit https://www.shopify.com/legal/cookies. You can control cookie settings via your browser; however, some features may not function correctly if you disable them.

Disclosure of Personal Information

We may share personal data in the following cases:

  • With trusted service providers who perform services such as payment processing, shipping, hosting, analytics, or support.
  • With affiliates or marketing partners for operational or promotional purposes.
  • As required by law, to comply with legal requests or protect our rights.
  • In connection with business transfers such as mergers or acquisitions.
  • With your consent or as otherwise disclosed at the time of collection.
Category Shared With
Identifiers (name, contact info) Service providers, affiliates
Commercial data (order history) Payment and logistics partners
Usage & device data Analytics and marketing vendors
Geolocation data (via IP or device) Hosting providers, Shopify

We do not disclose sensitive personal data for profiling or inferencing purposes.

Third-Party Sites

Our Site may contain links to websites not operated by us. Please review their privacy terms, as we are not responsible for their practices. Any content you share publicly (for example via social media) may be visible to others and subject to third-party platform policies.

Children’s Privacy

Our Services are not directed to children under 16, and we do not knowingly collect their data. If you believe a child has provided personal information, please contact us for deletion.

Security and Retention

We use appropriate technical and organisational safeguards to protect your data. However, no system is entirely secure. We retain data only as long as necessary to provide our Services, comply with legal obligations, or resolve disputes.

Your Rights

Depending on your location, you may have the right to access or receive a copy of your personal data, request correction or deletion, object to or restrict processing, withdraw consent (where applicable), opt out of targeted advertising, and file a complaint with a data protection authority.

To exercise your rights, please contact us using the details below. We may require verification to confirm your identity. You may authorise an agent to act on your behalf where permitted by law.

Complaints

If you have concerns about our data use, please contact us first so we can resolve the matter. EEA residents may also contact their local Data Protection Authority (DPA) for further assistance.

International Data Transfers

Your information may be processed in countries outside your residence. When transferring data from the UK or EEA, we rely on approved legal safeguards, such as Standard Contractual Clauses (SCCs), unless the destination country provides adequate data protection.

Contact Information

If you have any questions about this Privacy Policy or our data handling practices, or if you wish to exercise your rights, please contact us at:

Rose & Keith London
Email: support@roseandkeith.co.uk
Website: https://www.roseandkeith.co.uk

Unless otherwise specified, we act as the data controller for your personal information under applicable data protection laws.