Privacy and Security

Last updated: 14 September 2025

Your privacy and security are our top priority. We will never rent or sell your information to any other party. Our policy is fully compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy and Security Policy explains how your personal information is collected, used, shared, and protected when you visit or make a purchase from cello-hazorg.nl (the “Site”).

Who we are and how to contact us

The Loving Nature LLP (Company Reg No. OC450885, England and Wales) is the data controller for cello-hazorg.nl. Our registered office address is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Our trading address is The Loving Nature, 8 Hilton Crest, Nolton Haven, Haverfordwest, SA62 3NW, Wales, United Kingdom. All written correspondence, returns, and posted mail should be sent to our trading address.

You can easily reach out to us anytime by messaging customer support, by emailing us directly at [email protected], or via Live Chat (Tawk) (Mon–Fri, 9 am–5 pm). We use Tawk to make it quick and easy for you to get in touch with us and receive support. When you use the chat, Tawk may process information such as your name, email address, and the messages you send. All chat data is stored securely in line with UK GDPR, and tawk.to acts as our data processor under a Data Processing Agreement. For more details, please see the tawk.to Privacy Policy

You have rights over your data, including: access, rectification, erasure, restriction, objection, and portability. To exercise these rights, please contact us at the above details. If you are dissatisfied, you also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk.

Security

We enforce HTTPS with modern TLS and follow industry good practice to protect personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction. Our site is regularly monitored for security issues.

We support Strong Customer Authentication (SCA) for online payments in the UK, including 3-D Secure where required by card issuers.

Secure payment processing

All payments are handled by trusted third-party providers:

  1. Stripe (including Apple Pay, Google Pay, Klarna, Clearpay) – PCI DSS Level 1 certified.
  2. PayPal.
  3. Amazon Pay.

When you pay, we share only the data required to process the transaction (purchase total, name, email, billing/shipping details). We never see or store full card numbers or CVV codes. We and our providers retain payment-related data only as long as necessary for your transaction and to meet legal, regulatory, and fraud-prevention obligations. Transaction records are kept for up to 6 years for tax and accounting.

More details:

Hosting company

The Site is hosted by SiteGround Hosting Ltd. Data is stored securely behind firewalls using the latest technologies.

Personal information we collect

  • Device information (IP address, browser type, time zone, cookies, pages viewed, referring sites).
  • Order information (name, address, email, phone number, payment details).
  • Cookies & tracking (see below).

Cookies

We use cookies to improve your browsing experience, understand how our site is used, and share only relevant updates.

  • Essential cookies – always active.
  • Non-essential cookies (analytics, marketing) – only set with your consent.

You can manage or withdraw your cookie consent anytime using the Manage Consent banner (bottom-right corner of the site) or through our Cookie Policy page.

International transfers

Some providers process data outside the UK. Where this happens, we use safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to EU Standard Contractual Clauses (SCCs).

How we use your personal information

  • Orders: process payments, arrange shipping, and provide invoices.
  • Customer support: respond to your enquiries.
  • Risk and fraud prevention: check orders against fraud.
  • Marketing (with consent): send product updates and offers.
  • Website improvements: monitor browsing behaviour to improve services.

Lawful bases for processing

  • Contract – fulfilling orders, customer accounts.
  • Legal obligation – keeping tax and accounting records.
  • Consent – marketing communications, non-essential cookies.
  • Legitimate interests – fraud prevention, site improvements.

Where we rely on legitimate interests, we always balance these against your rights and freedoms.

Sharing your personal information

We share information only with trusted providers to help us run our services:

Once you leave our site or interact with a third-party provider, their own privacy policies apply.

Data retention

  • Order and invoice records – up to 6 years.
  • Marketing subscriptions – until you unsubscribe.
  • Other data – only as long as necessary for the purpose collected.

Consent and your rights

  • Implied consent when completing transactions.
  • Express consent is required for marketing.
  • Withdrawal – you can withdraw consent anytime by contacting us or via unsubscribe links.

You also have the right to object to certain processing, request data deletion, or portability. We will respond within 30 days.

Personal data breach

If a breach occurs, we will assess and, if required, notify the ICO within 72 hours. If there is a high risk to your rights, we will also notify you without delay.

Children’s privacy

Our services are not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us, and we will delete it.

Automated decision-making

We do not use automated decision-making or profiling.

Changes to this policy

We may update this policy from time to time. Changes take effect immediately when posted. If significant, we will notify you. We will update the ‘Last updated’ date at the top of this page whenever we make changes.

Business information

Business name: The Loving Nature LLP (Reg No. OC450885 in England and Wales).

  • Registered office address: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
  • Workshop address: 8 Hilton Crest, Nolton Haven, Haverfordwest, SA62 3NW, United Kingdom

Email: [email protected]

Live Chat (Mon–Fri, 9 am–5 pm).