Privacy Policy

 

This Privacy Policy outlines the practices of House of Douglas regarding the collection, use, and disclosure of personal information in compliance with the General Data Protection Regulation (GDPR) and the Office of the Data Protection Commissioner (ODPC) guidelines. This policy applies to all customers and users of our services, both in local and global markets.

House of Douglas is committed to protecting the privacy of our customers. We ensure that personal data is processed lawfully, transparently, and for specific purposes. Personal data refers to any information that relates to an identified or identifiable individual, including but not limited to names, addresses, email addresses, and payment information.

We collect personal data through various means, including when customers create an account, place an order, or subscribe to our newsletter. The data collected is limited to what is necessary for the purposes of processing orders, providing customer support, and enhancing user experience. According to GDPR Article 5, we adhere to the principles of data minimization and purpose limitation.

In compliance with GDPR, individuals have the right to access their personal data, rectify inaccuracies, and request the deletion of their data under certain circumstances. Specifically, customers can request access to their data by contacting our customer service team. We will respond to such requests within one month, as stipulated by GDPR Article 15.

House of Douglas employs appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing personal data. This includes encryption, access controls, and regular security assessments. According to GDPR Article 32, we take the protection of personal data seriously and implement measures to prevent unauthorized access, loss, or destruction of data.

We may share personal data with third-party service providers who assist us in operating our website, conducting our business, or servicing our customers, as long as those parties agree to keep this information confidential. In compliance with GDPR Article 28, we ensure that any third-party processors we engage provide sufficient guarantees to implement appropriate technical and organizational measures to protect personal data.

For international data transfers, House of Douglas adheres to GDPR Article 44, ensuring that any transfer of personal data outside the European Economic Area (EEA) is conducted in accordance with the legal requirements, including the use of Standard Contractual Clauses or other approved mechanisms.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, in accordance with GDPR Article 5(1)(e). After this period, we will securely delete or anonymize the data.

Customers have the right to lodge a complaint with a supervisory authority if they believe that their data protection rights have been violated. For more information on your rights under GDPR, please visit the official website of the Office of the Data Protection Commissioner.

This Privacy Policy may be updated periodically to reflect changes in our practices or applicable laws. We encourage customers to review this policy regularly to stay informed about how we are protecting their information.