Privacy policy

We are committed to protecting and respecting the privacy of our clients. We take responsibility for complying with the Data Protection Act 1998 (DPA), the Privacy and Electronic Regulations 2003 (PECR), and the General Data Protection Regulation 2018 (GDPR).

This privacy policy details what personal data we collect, how we will use that data and how we will protect it. Please also read our Terms & Conditions for additional information regarding our services.

For any questions that may not be answered here, you may contact us by email, info@prometeolondon.co.uk.

1. What personal data we collect and why

We collect your personal data when you place an order, return an order, contact us directly, sign up for our marketing communications, sign up to create an account, browse our website or use the other services offered by our website, www.prometeolondon.co.uk. The data we collect includes details you provide to us, such as your first and surname, and your shipping and billing addresses. We also collect data regarding your shopping habits and the pages and products you have viewed from your use of the website.

We use this data to:
- Take your orders, process your payments and deliver the items you have purchased.
- Process return and refund for items you have purchased.
- Provide any additional services you have requested, such as our newsletter.
- Provide you with help and assistance, including contacting you about your order.
- Personalise your visit to the website and ensure that content from our site is relevant and presented in the most optimised manner for you and the device you are viewing from.

Under the law, we must have a valid legal basis to process your data. In most instances, we will process your data because we have a contract with you (e.g. to deliver your purchases or to provide services you have requested). We may also send you sales and marketing communications if we have your explicit consent, or if you're an existing customer with whom we have a legitimate interest in communicating. You can opt out at any time.

2. Who will process your data

Your personal data will be processed by Prometeo London Limited, a company organised and existing under the laws of the United Kingdom, and registered at Companies House. Our registered office address is [insert your company address here].

We may retain external service providers to support our business needs, and may share your data with them. These providers are carefully vetted and will only process your data based on our instructions and in compliance with the law, including any necessary international data transfers.

3. How long we keep your data

We will not retain your personal data longer than necessary for the purposes it was collected, unless legally required. Retention times vary depending on why the data was collected.

4. Your rights regarding your personal data

You have the right to:
- Know what personal data we hold about you and how we use it.
- Ask us to update or correct inaccuracies.
- Withdraw consent for specific uses.
- Request deletion of your data.
- Limit or object to processing.
- Request a copy of your data in electronic format.

You can exercise your rights by contacting info@prometeolondon.co.uk.

This privacy policy may be updated from time to time. Please review it periodically. The date of the latest update is under clause 13.

5. The Data Controller

For purposes of UK Data Protection laws, the data controller is Prometeo London Limited. By visiting and using www.prometeolondon.co.uk, you agree to the terms of this policy. References to "we", "our", or "us" mean Prometeo London Limited. The term "you" refers to visitors, users, and customers.

6. What personal data we collect

We collect only the data necessary to provide our services. This includes:
- Name, billing and delivery address, payment details, email, and phone number.
- Email address for marketing if opted in.
- Data to respond to inquiries or support requests.
- Browsing data including pages viewed and interaction behavior.
- Data of others provided by you (e.g. gift recipient information).

7. How we use personal data

Legal bases for use include:
- Contractual necessity (e.g. processing orders and payments).
- Legal obligations (e.g. tax compliance).
- Legitimate interests (e.g. fraud prevention, service improvement).
- Consent (e.g. marketing communications, cookies).

Details on how we use your data in these contexts refer to www.prometeolondon.co.uk and Prometeo London throughout.

8. Who will process your data

Your personal data will be handled by authorised staff of Prometeo London Limited and trusted third parties including payment processors, hosting providers, logistics companies, IT support, marketing services, and legal authorities if required. Data sharing complies with privacy legislation and is tightly controlled.

9. Data retention

We retain your personal data as long as necessary to meet contractual, legal, or service obligations. Once that period has passed, data will be securely erased or anonymised.

10. Your rights

You may:
- Request a copy of your data (free of charge).
- Correct inaccurate data.
- Withdraw marketing consent at any time.
- Object to certain types of processing.
- Request erasure of your data.
- Request data portability to another provider.

Identity verification may be required to process your requests. Contact info@prometeolondon.co.uk to exercise your rights.

11. Security

We protect your data with strict technical and organisational measures, including:
- Encryption
- Access controls
- Infrastructure resilience
- Data recovery measures
- Regular testing and evaluation of our security practices

12. Complaints

If you believe Prometeo London Limited has violated data protection laws, you may file a complaint with the ICO (Information Commissioner's Office). Visit www.ico.org.uk for more information.

13. Using Klarna

To offer Klarna’s payment methods, we may pass your personal data (contact and order details) to Klarna during checkout. Klarna processes this data according to their privacy notice.

14. Changes to this notice

We keep our privacy policy under regular review in order to reflect changes in our services and in privacy regulation. This privacy policy was last updated in February 2021.