Privacy Policy

Last updated: 2026

At Margaret York, we place great importance on protecting your privacy and the security of your personal data. This Privacy Policy explains how we collect, use, disclose and protect your information when you visit our website or shop with us. This policy is in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for processing your personal data through this website is:

Margaret York
Email: info@margaretyork.com

2. Website Security

For security reasons, this website uses SSL/TLS encryption to protect the transmission of personal data and other confidential content, such as orders or enquiries. You can recognise an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.

3. Data Collected When You Visit

If you visit our website purely for informational purposes — without registering or otherwise submitting any information — we only collect the data that your browser automatically sends to our server (known as "server log files"). This includes:

• Pages visited
• Date and time of access
• Amount of data transferred (in bytes)
• Referrer URL (the page you came from)
• Browser type and version
• Operating system
• IP address (anonymised where applicable)

This data is processed on the basis of our legitimate interest in improving the stability and functionality of our website. This data is not shared or used for any other purpose.

4. Cookies

We use cookies on various pages of our website to make your visit more convenient and to enable certain features. Cookies are small text files stored on your device. There are two main types:

• Session cookies: Automatically deleted once you close your browser.
• Persistent cookies: Remain on your device for a set period, allowing us or our partners to recognise your browser on your next visit.

Cookies may collect and process certain information, such as browser data, location data and IP address. We may also work with advertising partners who place cookies on your device during your visit (third-party cookies) to help us provide more relevant content and offers.

Managing Cookies

You can manage or disable cookies in your browser settings. Please note that disabling cookies may affect the functionality of certain elements of our website.

5. Contact Forms and Communication

If you contact us via a contact form or by email, we collect the personal data you provide. This data is stored and used solely to respond to your enquiry and for related technical administration purposes.

Your data will be deleted once your enquiry has been fully dealt with, unless we are legally required to retain it for longer.

6. Customer Accounts and Contract Data Processing

If you create a customer account or provide personal data in order to place an order, we collect and process this information in order to fulfil the contract. The specific data collected can be found on the relevant input forms.

You may delete your customer account at any time by contacting us at info@margaretyork.com. Once your order has been fully processed or your account has been deleted, your data will only be retained for the period required under tax and commercial law.

7. Email Newsletter

If you sign up for our newsletter, we will regularly send you information about our offers and promotions. The only information required is your email address. We use the double opt-in procedure, meaning we will only send the newsletter once you have expressly confirmed your consent by clicking a confirmation link.

You can unsubscribe at any time using the unsubscribe link included in every message.

8. Product Recommendations by Email

If you provided your email address when purchasing goods or services, we may send you email offers for similar products from our range. You have the right to object to the use of your email address for this purpose at any time, either by contacting us or by using the unsubscribe link.

9. Sharing of Data

We only share your personal data with third parties to the extent necessary to fulfil our contractual obligations to you:

• Delivery providers: We pass on delivery information to the courier responsible for delivering your order.
• Payment providers: We share payment data with the relevant payment institution to ensure your transaction is processed securely.

10. Advertising and Analytics Tools

Our website uses tools such as Google Analytics and Facebook Pixel to track user behaviour after an advert has been shown or clicked. This is used to assess the effectiveness of our advertising for statistical and market research purposes. The data collected is anonymous to us, but may be stored and processed by the relevant social media platforms.

11. Your Data Protection Rights

Under applicable data protection law (UK GDPR), you have the following rights in relation to your personal data:

• Right of access: You have the right to request information about the personal data we hold about you.
• Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data.
• Right to erasure ("right to be forgotten"): You have the right to request the deletion of your data, provided no legal retention obligations apply.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time.
• Right to complain: You have the right to lodge a complaint with the relevant data protection supervisory authority, in particular the Information Commissioner's Office (ICO).

12. Data Retention

Personal data is retained for the period required under applicable statutory retention periods (e.g. tax and commercial law obligations). Once these periods have expired, the data is routinely deleted unless it is still required to fulfil a contract.

13. Changes to This Privacy Policy

We reserve the right to update or amend this Privacy Policy at any time. Any changes will be published on this page along with the updated version date. Continued use of our website after such changes take effect constitutes acceptance of the updated policy.