Lace & Legacy

Privacy Policy

Last updated: [14 January 2026]

This Privacy Policy explains how Lace & Legacy LTD (“we”, “us”, or “our”) collects, uses, and protects your personal data when you use our website www.laceandlegacy.co.uk (the “Website”).

We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Data Controller:
Lace & Legacy LTD
2 Orwell Place, Ipswich, IP4 1BB.
Email: enquiries@laceandlegacy.co.uk
Telephone: 01473 978 095

If you have any questions about this Privacy Policy or how we handle your data, you can contact us using the details above.

2. What Personal Data We Collect

We may collect and process the following personal data:

a) Information you provide to us

  • Name
  • Email address
  • Phone number
  • Postal address
  • Any information you submit via contact forms, account registration, or enquiries

b) Information collected automatically

When you use our Website, we may automatically collect:

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and time spent on the Website
  • Referring website links

This data is collected using cookies and similar technologies.

c) Others

  • Payment details (processed securely by third-party providers – we do not store card details)

3. How We Use Your Personal Data

We use your personal data for the following purposes:

  • To provide and operate our Website
  • To respond to enquiries and contact requests
  • To provide products or services you request
  • To manage user accounts
  • To improve our Website and user experience
  • To comply with legal and regulatory obligations

4. Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases:

  • Consent – where you have given clear consent
  • Contract – where processing is necessary to perform a contract with you
  • Legal obligation – where required by law
  • Legitimate interests – to operate and improve our business, provided your rights do not override these interests

5. How We Share Your Personal Data

We do not sell your personal data.

We may share your data with:

  • Service providers (e.g. website hosting, analytics, email services)
  • Payment processors
  • Professional advisers (e.g. accountants, legal advisers)
  • Authorities or regulators where legally required

All third parties are required to respect the security of your personal data and to process it lawfully.

6. International Data Transfers

Some of our service providers may be based outside the UK.
Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

  • Adequacy regulations
  • Standard contractual clauses

7. Data Security

We take appropriate technical and organisational measures to protect your personal data against:

  • Unauthorised access
  • Loss
  • Misuse
  • Alteration

However, no method of transmission over the internet is completely secure.

8. How Long We Keep Your Data

We retain personal data only for as long as necessary:

  • To fulfil the purposes outlined in this policy
  • To comply with legal, accounting, or reporting requirements

When data is no longer required, it is securely deleted or anonymised.

9. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request erasure of your data (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent at any time

To exercise your rights, please contact us at enquiries@laceandlegacy.co.uk.

10. Cookies

Our Website uses cookies to:

  • Improve functionality
  • Analyse Website traffic
  • Remember user preferences

You can manage or disable cookies via your browser settings.
For more information, please see our Cookie Policy.

11. Third-Party Links

Our Website may contain links to third-party websites.
We are not responsible for the privacy policies or practices of those websites.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
Any changes will be posted on this page with an updated “Last updated” date.

13. Complaints

If you are unhappy with how we handle your personal data, you have the right to complain to the Information Commissioner’s Office (ICO):

Website: https://www.ico.org.uk
Telephone: 0303 123 1113