Privacy policy

About this policy

This Privacy Policy explains how SAMA collects, uses, stores and protects your personal information when you visit our website, browse or purchase from our online store, contact us or subscribe to our marketing communications.

We only collect and use personal information where we have a proper reason to do so. We do not sell your personal information.

Who we are

SAMA is the trading name of Georgina Clements, a sole trader established in England and Wales.

• Trading name: SAMA
• Legal name: Georgina Clements
• Business address: Unit 1, Graveoak Lane, Leigh, WN7 3SE, United Kingdom
• Email: info@samacollective.uk
• Website: samacollective.uk

For the purposes of UK data-protection law, Georgina Clements trading as SAMA is the controller responsible for your personal information.

Information we collect

Depending on how you interact with us, we may collect:

• your name;
• email address and telephone number;
• billing and delivery addresses;
• order, payment, return and refund information;
• messages and customer-service enquiries;
• marketing preferences;
• reviews, survey responses or feedback you provide;
• IP address, browser and device information;
• approximate location based on your IP address;
• pages viewed and links selected;
• shopping-basket and checkout activity; and
• cookie, analytics and website-usage information.

Payment information

Payments are processed securely through Shopify and the payment provider selected at checkout.

We do not normally receive or store your complete payment-card number or security code. We may receive limited information such as confirmation that payment was successful, the payment method, card type and the final digits of the card.

How we use your information

We may use your personal information to:

• process and deliver your order;
• take payment and prevent fraudulent transactions;
• send order confirmations, delivery updates and service messages;
• provide customer support;
• process cancellations, returns and refunds;
• operate, secure and improve our website and Shopify store;
• maintain tax, accounting and business records;
• comply with consumer-protection, product-safety and other legal obligations;
• establish or defend legal claims; and
• send marketing where you have agreed to receive it or where the law otherwise permits.

Our lawful bases for using your information may include:

• performing or preparing to enter into our contract with you;
• complying with a legal obligation;
• pursuing our legitimate interests in operating, improving and protecting SAMA; and
• your consent, where consent is required.

Marketing communications

Where you have subscribed to our mailing list, we may send you information about SAMA products, collections, events, offers, restocks and brand news.

In limited circumstances, we may contact existing customers about similar SAMA products where the law permits this and an opportunity to opt out was provided.

You can unsubscribe at any time by selecting the unsubscribe link in a marketing email or contacting info@samacollective.uk.

Order confirmations, dispatch notifications, return updates and other messages necessary to manage your order are service communications rather than marketing.

Shopify and other service providers

Our online store and checkout are provided by Shopify. Shopify may process personal information to host and operate our online store, provide checkout and customer-account functions, process and manage orders, facilitate payments, prevent fraud, support deliveries and returns, provide store analytics and protect the security of the store.

We may also share relevant information with trusted organisations that help us operate SAMA, including:

• payment processors;
• banks and fraud-prevention providers;
• delivery, postal and fulfilment companies;
• website, IT and security providers;
• email and marketing platforms;
• analytics and cookie-service providers;
• accountants, insurers and professional advisers; and
• regulators, courts or public authorities where required by law.

These organisations only receive information reasonably necessary to provide their services. Some act on our instructions, while others may process information under their own privacy policies.

We do not sell or rent your personal information.

International transfers

Shopify and some of our other service providers may store or access personal information outside the United Kingdom.

Where information is transferred internationally, appropriate protections will be used as required by applicable data-protection law. These may include transferring information to a country recognised as providing adequate protection or using approved contractual safeguards.

Cookies

We use cookies and similar technologies to operate and protect our website and online store.

Essential cookies may be used for purposes such as:

• operating the shopping basket;
• providing checkout;
• processing payments;
• maintaining website security;
• preventing fraud; and
• remembering your privacy choices.

We may also use optional cookies for analytics, performance, personalisation, advertising or social-media functions.

Where consent is required, optional cookies will not be used until you have made a choice through our cookie banner. You can accept, reject or adjust optional cookies through the cookie settings available on our website.

How long we retain information

We keep personal information only for as long as reasonably necessary.

Order, payment, transaction and accounting records may normally be retained for up to six years where necessary to meet tax, accounting or legal requirements.

Customer-service correspondence is retained for as long as reasonably necessary to resolve the enquiry and maintain an appropriate record.

Marketing information is retained until you unsubscribe, withdraw your consent or we determine that it is no longer required. We may keep limited information on a suppression list to ensure that we continue to respect an unsubscribe request.

Information connected with a dispute or legal claim may be retained until the matter and any relevant limitation period have ended.

Security

We use reasonable technical and organisational measures intended to protect personal information against loss, misuse, unauthorised access, alteration and disclosure.

However, no internet transmission, website or electronic storage system can be guaranteed to be completely secure.

Your rights

Depending on the circumstances, you may have the right to:

• access the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete certain information;
• ask us to restrict how information is used;
• object to certain uses of your information;
• receive certain information in a portable format;
• withdraw consent where we rely on consent; and
• object to direct marketing at any time.

These rights are subject to legal conditions and exemptions.

To exercise a right, contact info@samacollective.uk. We may ask for information to confirm your identity before responding.

Data-protection complaints

To complain about how we have collected or used your personal information, email info@samacollective.uk with the subject line "Data Protection Complaint."

Please include enough information for us to understand and investigate your concern.

We will acknowledge your complaint within 30 days, investigate it appropriately, keep you informed where necessary and communicate the outcome without undue delay.

You also have the right to complain to the Information Commissioner's Office, the UK regulator responsible for data protection.

Changes to this policy

We may update this policy when our business practices, service providers or legal obligations change. The latest version will be published on this page with the date it was last updated.

Contact us

• SAMA — Georgina Clements trading as SAMA
• Unit 1, Graveoak Lane, Leigh, WN7 3SE, United Kingdom
• Email: info@samacollective.uk
• Website: samacollective.uk