Ruby Balm is the data controller and referred to in this policy as “we” or “us”.
This policy applies to data we process in relation to:
· visitors to our website;
· people who do business with us or visit our store; and
· people who we direct market to.
The information we collect about you
When you do business with us we may collect the following personal information from you: name, postal address, email address, telephone number, credit card and/or other payment information. We may also sometimes obtain personal information from third parties, but only where this is lawful to do so.
How we will use the information about you
We gather this information to allow us to process your registration, process any orders you may make and provide the goods requested. The relevant information may then used by us, our agents and sub-contractors to provide you with information about your account with us or any transactions with us and to communicate with you on any matter relating to the conduct of your account in general.
We may also use aggregate information and statistics for the purposes of monitoring website usage in order to help us to develop our website and our services. We may also provide such aggregate information to third parties. These statistics will not include information that can be used to identify you.
From time to time we may provide your information to our customer service agencies for research and analysis purposes so that we can monitor and improve the goods and/or services we provide. We or our agents and sub-contractors may contact you by post, email or telephone to ask you for your feedback and comments on our goods and/or services
We may provide you with information about products, services or promotions, which we think may be of interest to you. However, you can always opt out from receiving directing marketing from us.
We direct market to individuals on our marketing database under the legal basis of legitimate interest (see below). There is also a legitimate interest in individuals receiving such marketing communications so they may be appraised of products, services or promotions of which they may be interested.
However, if at any time you opt out of receiving further marketing communications from us we will not send future marketing communications to you, unless you request us to do so. We make opting out as easy as possible by providing easy click opt out links, where possible. You may also opt out of future marketing communications by emailing us at or telephone us 01625 251 457
On this basis we consider that our direct marketing policy is proportionate and balanced and complaint with the requirements of the General Data Protection Regulation (EU) 2016/679.
Use of your personal data is based on ours, and your, “legitimate interests”, which is to:
service customer needs;
promote and market products and services;
service customer accounts;
manage complaints and resolve disputes;
understand customer behaviour;
protect and support our business, employees and shareholders;
prevent and detect crime; and
test and develop products and services.
Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. The information is used to track visitor use of the website and to compile statistical reports on website activity. For further information about cookies visit or www.allaboutcookies.org. You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However, in a few cases some of our website features may not function if you remove cookies from your browser.
How we protect your information
We will use all reasonable efforts to safeguard your personal information. However, you should be aware that the use of the Internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal information which is transferred from you, or to you, via the Internet.
The information you provide may be transferred to countries outside the European Economic Area ('EEA') that do not have similar protections in place regarding your data and restrictions on its use as set out in this policy. However, we will take steps to ensure adequate protections are in place to ensure the security of your information. The EEA comprises the EU member states plus Norway, Iceland and Liechtenstein.
Access to your information and updating and correcting your information
You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please contact us using the contact details below. We may charge and administration fee, where this is permitted by law.
We want to ensure that your personal information is accurate and up to date. If any of the information that you have provided to us changes, for example if you change your email address, name or payment details, or if you wish to cancel your registration, please let us know the correct details by contacting us using the contact details below. You may ask us, or we may ask you, to correct information you or we think is inaccurate, and you may also ask us to remove information which is inaccurate.
Sale of business
If our business is sold or integrated with another business your details may be disclosed to our advisers and any prospective purchasers and their advisers and will be passed on to the new owners of the business.
How to contact Us