Privacy Policy

In order to deliver our services to you effectively, we may ourselves, collect store and process the following categories of data when you give them to us directly:

(i) contact data (e.g. name, address, city, postcode, telephone number, email address);

(ii) financial data (e.g. bank account number, sort code, credit card details, debit card details).

We may also collect the following categories of data as a result of you interacting with the Website:

(i) user identification data (e.g. IP address, login information, browser type and version, time zone setting, browser plug-in types, operating system and version); and

(ii) user behaviour data (e.g. URL clickstreams, products/services viewed, page response times, download errors, page visit lengths, page interaction data, telephone numbers used to call us)

We hold only the necessary data to process your order and to issue personalised emails. We hold it only for as long as it is still relevant, while you are actively engaging with our newsletters or website.

Certain third party service providers we use may collect and process your data on our behalf. Below are
details of the relevant data collected, the purposes for which it is collected and the third party providers we
use.

• Google Analytics: a web analytics service which allows us to track use of the Website and prepare
  reports on user activity (service provider: Google LLC; place of processing: USA).
• PayPal: processes payments for us (service provider: PayPal, Inc.; place of processing: USA).
• Meta: provides online advertising and re-marketing services for us (service provider: Meta Platforms
  Ireland Limited; place of processing: EU and USA).
• Klaviyo: our email marketing platform (service provider: Klaviyo, Inc.; place of processing: USA).
• Anthropic: provides our AI assistant, Claude (service provider: Anthropic PBC; place of processing:
  USA).
• Rakuten Advertising may collect personal information when you interact with our digital property, including
  IP addresses, digital identifiers, information about your web browsing and app usage, and how you interact
  with our properties and ads, for a variety of purposes such as personalisation of offers or advertisements,
  analytics, and other commercial purposes. For more information about the collection, use and sale of your
  personal data and your rights, please see rakutenadvertising.com/legal-notices/services-privacy-policy and rakutenadvertising.com/legal-notices/services-privacy-rights-request-form.

We use cookies to store and collect information regarding your use of our website, which allows us to personalise your experience. Cookies may be either "persistent" cookies or "session" cookies. Session cookies allow customers to carry information across website pages without re-entering it, and delete themselves when you leave the website or close your browser. Persistent cookies allow a website to recognise you when you return and remember certain preferences, and stay on your device until you delete them.

We (or our third party service providers) may use strictly necessary cookies (required for the operation of the Website, for example to log in, use a shopping cart or use e-billing), analytical or performance cookies (to recognise and count visitors and see how they move around the Website), and functionality cookies (to recognise you when you return and personalise content). Where third parties use cookies we have no control over how they use them.

You can manage your cookie preferences through the cookie banner on our website and through your browser settings. If you disable, reject or block cookies (including essential cookies), certain parts of our
website may not function fully. For more information, or to delete cookies, please visit www.allaboutcookies.org, or email us at info@gigiandolive.com.

We use artificial intelligence (AI) and automated tools to help us run our business and improve your experience. We use these tools to draft and refine marketing emails, product descriptions and other communications; to personalise the emails, offers and product recommendations you see, based on what you have viewed and purchased; to analyse shopping behaviour to understand preferences and group customers into audiences (a form of profiling); and to help us respond to customer enquiries more quickly.

Where these tools process personal data, that data may be handled on our behalf by the technology providers that supply them, including Anthropic (the provider of the Claude AI assistant), Klaviyo (our email
marketing platform) and Shopify (our store platform). These providers act as our processors and may only process your data on our instructions and for the purposes set out in this policy. Our providers do not use
your personal data to train their own AI models.

We do not make decisions that have a legal or similarly significant effect on you by automated means alone. You have the right to contest any decision that involves automated processing and to ask a member of our team to review it, by emailing info@gigiandolive.com.

We do not knowingly provide special category data (such as information about your health, ethnicity or beliefs) to these AI tools, and we ask you not to send us such information. Our lawful basis for the
personalisation and profiling described above is our legitimate interest in marketing our products and improving our service, or your consent where required. You can object at any time, or withdraw consent, by
unsubscribing from our emails or by emailing info@gigiandolive.com.

Some of our service providers, including our AI, analytics, payment and advertising providers, are based inor process data in the United States and other countries outside the UK and European Economic Area. Where we transfer your personal data outside the UK or EEA, we make sure it is protected by appropriate safeguards, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an equivalent approved mechanism, so that your data receives an equivalent level of protection.

We may use your data to fulfil our legitimate interests by using or disclosing data to third parties for the following purposes:

• For the purposes of enabling the fulfilment of orders by third party providers.
• Marketing purposes. e.g. advertising, newsletters, public relations, providing information, products and services that you ask for or which we think may interest you, creating a profile for you to help us predict what products you may like, permitting certain third parties to provide information about goods or services that we feel may interest you.
• Improving your experience of the Website. e.g. ensuring that our website content is presented to you in an effective manner, notifying you of any changes to our service, optimising the pages you are directed to.
• Recording calls to improve our service or to protect our interests.
• Protecting ourselves or third parties against fraud or credit risks and to protect our rights.
• Selling our business to a third-party.
  
  We may also use your data to fulfil our contractual terms with you, for example carrying out our obligations
  under any contract entered into with you, measuring our performance, and maintaining accounts and records

You can opt out of our email marketing at any time by unsubscribing from our newsletter or emailing info@gigiandolive.com asking us to remove you from our mailing list.

If you have opted out of our email marketing services, you may still continue to see targeted adverts on or produced by social media platforms. You should look at your privacy settings on these platforms to stop this.

You may choose not to provide us with personal data and you may turn off cookies in your browser by changing its settings. If you make these decisions, you may continue to use the website and browse its pages. However, we may not be able to process transactions without personal data. You can ask us not to use your data for marketing. You can do this by ticking the relevant boxes on our forms, or by contacting us at any time at info@gigiandolive.com

Under the UK GDPR and the Data Protection Act 2018, you have the right to access, rectification, erasure, restriction of processing, objection to processing, and data portability. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk/your-data-matters). If we change our privacy and cookies policy, we will post any changes on this page and, where appropriate, notify you by email.