Privacy Policy
Last Updated: June 2026
1. Introduction
At Lavender Hill Clothing, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how IFR Holdings Ltd, trading as Lavender Hill Clothing ("Lavender Hill Clothing", "we", "us", or "our"), collects, uses, stores, shares and protects your personal information whenever you interact with us.
This includes when you:
- visit our websites;
- create an account;
- purchase our products;
- contact our Customer Services team;
- subscribe to receive marketing communications;
- participate in competitions, surveys or promotions;
- leave reviews;
- engage with us on social media; or
- otherwise interact with our business.
Please read this Privacy Policy carefully.
By using our Website or providing your personal information, you acknowledge that you have read and understood this Privacy Policy.
2. Who We Are
The websites:
are owned and operated by:
IFR Holdings Ltd
Trading as Lavender Hill Clothing
Company Number: 08745470
Registered Office:
HGC Accountants
First Floor
30 London Road
Sawbridgeworth
Hertfordshire
CM21 9JS
United Kingdom
Email:
enquiries@lavenderhillclothing.com
For the purposes of UK data protection legislation, IFR Holdings Ltd is the Data Controller responsible for your personal information.
3. Our Commitment to Privacy
We recognise that your personal information is important.
We are committed to:
- collecting only the information we genuinely need;
- being transparent about how we use your information;
- keeping your information secure;
- never selling your personal information to third parties;
- giving you control over your marketing preferences;
- complying with UK data protection legislation.
4. The Laws We Follow
We process your personal information in accordance with applicable UK data protection legislation, including:
- UK General Data Protection Regulation (UK GDPR);
- Data Protection Act 2018;
- Privacy and Electronic Communications Regulations 2003 (PECR);
- any future legislation replacing or supplementing these laws.
5. Personal Information We Collect
The information we collect depends upon how you interact with us.
Identity Information
This may include:
- title;
- first name;
- surname;
- date of birth (where voluntarily provided).
Contact Information
This may include:
- billing address;
- delivery address;
- email address;
- telephone number.
Account Information
If you create an account with us, we may collect:
- login details;
- encrypted password;
- saved addresses;
- wishlist information;
- order history;
- account preferences.
Transaction Information
When you place an order we collect information including:
- products purchased;
- order value;
- payment status;
- refunds;
- exchanges;
- delivery method;
- promotional codes used.
Please note that we never receive or store your complete payment card details.
Technical Information
When you browse our Website we automatically collect certain technical information.
This may include:
- IP address;
- browser type;
- browser version;
- operating system;
- device type;
- language settings;
- time zone;
- referring website;
- pages visited;
- session duration;
- click behaviour;
- website performance information.
Marketing Information
We may collect information about:
- newsletter subscriptions;
- email engagement;
- products viewed;
- products added to basket;
- shopping preferences;
- marketing preferences;
- survey responses;
- competition entries.
Customer Service Information
If you contact us we may keep records of:
- emails;
- telephone calls;
- live chat conversations;
- social media messages;
- photographs you send us regarding products or orders.
6. How We Collect Your Information
We collect personal information in a number of ways.
Information You Provide Directly
You may provide personal information when you:
- place an order;
- create an account;
- subscribe to our newsletter;
- complete a contact form;
- request customer support;
- leave a review;
- participate in competitions;
- respond to surveys;
- communicate with us by telephone, email or social media.
Information Collected Automatically
When you use our Website we automatically collect certain technical information using:
- cookies;
- pixels;
- website analytics tools;
- server logs;
- similar technologies.
Further details can be found in our Cookie Policy.
Information Received from Third Parties
We may also receive information from trusted third parties including:
- Shopify;
- payment providers;
- delivery companies;
- advertising partners;
- analytics providers;
- fraud prevention services;
- customer review platforms.
7. Why We Use Your Information
We only process your information where we have a lawful basis under UK GDPR.
The lawful basis depends upon the purpose for which we are using your information.
To Fulfil Your Orders
Lawful Basis
Performance of a Contract.
This includes:
- processing orders;
- arranging payment;
- dispatching products;
- managing returns;
- processing refunds;
- exchanging products;
- communicating with you regarding your order.
To Provide Customer Support
Lawful Basis
Performance of a Contract and Legitimate Interests.
This includes:
- answering questions;
- resolving complaints;
- processing warranty enquiries;
- responding to product queries.
To Improve Our Website
Lawful Basis
Legitimate Interests.
We analyse how customers use our Website in order to:
- improve navigation;
- improve page performance;
- understand customer behaviour;
- identify technical issues;
- improve the overall shopping experience.
Fraud Prevention
Lawful Basis
Legal Obligations and Legitimate Interests.
We process information to:
- detect fraudulent activity;
- prevent payment fraud;
- protect our customers;
- protect our business.
Legal Compliance
Lawful Basis
Legal Obligations.
We may process your information to comply with:
- tax legislation;
- accounting requirements;
- consumer protection legislation;
- court orders;
- regulatory obligations.
8. Marketing Communications
We love keeping our customers updated with new collections, styling inspiration and exclusive offers.
Where permitted by law, we may send you information about:
- new product launches;
- seasonal collections;
- exclusive promotions;
- early access sales;
- styling inspiration;
- competitions;
- events;
- company news.
Where required by law, we will only send marketing communications where you have given your consent.
You may unsubscribe at any time by:
- clicking the "Unsubscribe" link included in every marketing email;
- updating your account preferences; or
- contacting us directly at enquiries@lavenderhillclothing.com.
We aim to process all unsubscribe requests promptly, although it may take a short period for our systems to update.
9. Children's Privacy
Our Website is intended for individuals aged 18 years and over.
We do not knowingly collect personal information from children.
If we become aware that personal information has been collected from a child without appropriate consent, we will take reasonable steps to delete that information as soon as practicable.
10. Cookies and Similar Technologies
Our Website uses cookies and similar technologies to improve your browsing experience, personalise content, remember your preferences and help us understand how visitors use our Website.
Cookies are small text files that are stored on your computer or mobile device when you visit a website.
We use cookies to:
- ensure our Website functions correctly;
- remember your shopping basket and account preferences;
- recognise returning visitors;
- improve website performance;
- analyse visitor behaviour;
- personalise advertising and marketing;
- measure the effectiveness of our advertising campaigns;
- protect against fraud and malicious activity.
Where required by law, non-essential cookies will only be placed on your device after you have given your consent through our Cookie Banner.
You may withdraw or amend your cookie preferences at any time through our Cookie Settings.
Further information about the cookies we use can be found in our separate Cookie Policy.
11. Third-Party Service Providers
We work with trusted third-party providers who help us operate our business, process payments, deliver orders, improve our Website and communicate with our customers.
These providers only receive the personal information necessary to perform the services they provide.
They are contractually required to protect your information and to process it only in accordance with applicable data protection legislation.
Shopify
Our online store is hosted by Shopify Inc.
Shopify provides the ecommerce platform that enables us to sell our products online.
When you place an order or create an account, your information is securely stored within Shopify's infrastructure.
Shopify processes information including:
- customer account details;
- order history;
- delivery information;
- shopping basket information;
- customer preferences.
Shopify maintains robust technical and organisational security measures to protect customer information.
You can learn more by visiting:
https://www.shopify.com/legal/privacy
Payment Providers
We use trusted payment providers to process payments securely.
These include:
- Shopify Payments;
- Stripe;
- PayPal.
When you purchase from us, your payment information is transmitted directly to the relevant payment provider using encrypted technology.
Lavender Hill Clothing does not receive or store your full payment card details.
Payment providers process your information in accordance with their own privacy policies and applicable financial regulations.
Email Marketing – Klaviyo
We use Klaviyo to help us communicate with customers who have chosen to receive marketing communications.
Klaviyo enables us to send:
- newsletters;
- product launches;
- exclusive offers;
- styling inspiration;
- abandoned basket reminders;
- browse abandonment emails;
- post-purchase communications;
- customer surveys.
Klaviyo may process information including:
- your name;
- email address;
- purchase history;
- products viewed;
- products added to your basket;
- email engagement;
- website activity.
This allows us to send communications that are more relevant to your interests.
You may unsubscribe from marketing communications at any time using the unsubscribe link contained in every marketing email or by contacting us directly.
Customer Reviews – Yotpo
We use Yotpo to collect independent customer reviews.
Following a purchase, we may invite you to review your shopping experience.
If you choose to submit a review, Yotpo will process your information in accordance with its own Privacy Policy.
Submitting a review is entirely voluntary.
Website Analytics
Understanding how customers use our Website helps us continually improve the shopping experience.
To achieve this we use:
- Google Analytics 4;
- Microsoft Clarity.
These services help us understand:
- which pages are visited;
- how visitors navigate our Website;
- where technical issues may occur;
- which products are most popular;
- how we can improve usability and accessibility.
The information collected generally includes:
- anonymised IP information where applicable;
- browser type;
- operating system;
- device type;
- approximate location;
- session duration;
- click behaviour;
- scrolling behaviour;
- pages viewed.
This information is used to improve our Website and customer experience and is not used to identify individual visitors.
Advertising Technologies
We use advertising technologies to measure the effectiveness of our marketing and to display advertisements that are relevant to our customers.
These technologies include:
- Google Ads;
- Meta Pixel (Facebook and Instagram);
- Rakuten Advertising (where applicable).
These providers may use cookies, pixels and similar technologies to:
- measure advertising performance;
- understand customer journeys;
- improve marketing campaigns;
- personalise advertising;
- prevent advertising fraud.
Advertising cookies are only used where you have provided the necessary consent through our Cookie Banner.
12. Delivery Partners
To deliver your orders we share the minimum information necessary with our trusted logistics providers.
These currently include:
- Royal Mail;
- DPD;
- TNT;
- DHL.
Information shared may include:
- your name;
- delivery address;
- email address;
- telephone number;
- order reference.
This information enables our delivery partners to:
- deliver your order;
- provide tracking information;
- contact you regarding delivery where necessary.
Our delivery partners process your information solely for the purpose of fulfilling your order and related delivery services.
13. Professional Advisers and Service Providers
In the normal course of business we may share personal information where necessary with carefully selected professional advisers and service providers.
These may include:
- accountants;
- auditors;
- legal advisers;
- insurers;
- IT support providers;
- website developers;
- fraud prevention services;
- regulatory authorities where required by law.
Each recipient is required to process your information securely and only for the purposes for which it has been provided.
14. Legal Requirements
We may disclose your personal information where required to do so by law or where we reasonably believe disclosure is necessary to:
- comply with a legal obligation;
- respond to lawful requests from public authorities;
- prevent fraud or financial crime;
- enforce our Terms & Conditions;
- protect the rights, property or safety of Lavender Hill Clothing, our customers or others;
- establish, exercise or defend legal claims.
15. Business Transfers
If IFR Holdings Ltd undergoes a merger, acquisition, investment, corporate restructuring or sale of all or part of its business or assets, your personal information may be transferred as part of that transaction.
Any successor business will continue to protect your information in accordance with this Privacy Policy or notify you of any material changes where required by law.
16. International Transfers of Personal Information
Some of the trusted service providers we use operate internationally.
As a result, your personal information may be transferred to countries outside the United Kingdom.
Whenever we transfer personal information internationally, we ensure appropriate safeguards are in place in accordance with UK data protection legislation.
These safeguards may include:
- UK International Data Transfer Agreements (IDTAs);
- the UK Addendum to the European Commission's Standard Contractual Clauses;
- adequacy regulations recognised by the UK Government; or
- other lawful transfer mechanisms permitted under UK GDPR.
We take reasonable steps to ensure that all international transfers maintain an appropriate level of protection for your personal information.
17. How We Protect Your Personal Information
The security of your personal information is important to us.
We maintain appropriate technical and organisational measures designed to protect your information against accidental loss, unauthorised access, misuse, disclosure, alteration or destruction.
These measures include, where appropriate:
- encrypted connections using Secure Socket Layer (SSL) technology;
- secure cloud hosting environments;
- firewalls and intrusion detection systems;
- password-protected systems and restricted staff access;
- role-based access controls;
- multi-factor authentication where appropriate;
- regular software updates and security patching;
- staff training on data protection and information security;
- regular monitoring of our systems and service providers.
Only employees, contractors and trusted third-party providers who have a genuine business need to access personal information are permitted to do so.
They are subject to confidentiality obligations and are required to process personal information only in accordance with our instructions and applicable data protection legislation.
Although we take appropriate security measures, no internet transmission or electronic storage system can be guaranteed to be completely secure. For this reason, while we work hard to protect your information, we cannot guarantee absolute security.
18. How Long We Keep Your Information
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting and reporting requirements.
Retention periods vary depending on the nature of the information.
Typical retention periods include:
| Category | Typical Retention Period |
|---|---|
| Customer orders and invoices | 6 years after the end of the relevant financial year |
| Customer accounts | Whilst your account remains active and for a reasonable period afterwards |
| Customer service enquiries | Up to 3 years |
| Marketing records | Until you unsubscribe or withdraw consent |
| Product reviews | Until removed by you or where no longer required |
| Website analytics | In accordance with the retention settings of the relevant analytics provider |
| Cookie preferences | As set out in our Cookie Policy |
Where personal information is no longer required, we will securely delete, anonymise or destroy it.
19. Your Rights
Under UK data protection legislation you have a number of important rights.
These include the right to:
Access
Request a copy of the personal information we hold about you.
Rectification
Request that inaccurate or incomplete information is corrected.
Erasure
Request that your personal information is deleted in certain circumstances.
This is sometimes known as the "Right to be Forgotten."
Restrict Processing
Request that we temporarily suspend processing of your personal information in certain circumstances.
Data Portability
Request a copy of certain personal information in a structured, commonly used and machine-readable format.
Object
Object to our processing of your personal information where we rely upon legitimate interests.
You also have the right to object to direct marketing at any time.
Withdraw Consent
Where processing is based upon your consent, you may withdraw that consent at any time.
This will not affect processing carried out before consent was withdrawn.
Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing where those decisions have legal or similarly significant effects.
Lavender Hill Clothing does not currently make decisions of this nature without appropriate safeguards.
20. Exercising Your Rights
If you wish to exercise any of your rights, please contact us using the details provided at the end of this Privacy Policy.
We may ask you to verify your identity before responding to your request.
We aim to respond to all valid requests within one month, although complex requests may take longer where permitted by law.
There is normally no charge for exercising your rights.
However, where requests are clearly unfounded, excessive or repetitive, we may charge a reasonable administrative fee or refuse the request where permitted by law.
21. Marketing Preferences
You remain in control of the marketing communications you receive from us.
You may:
- unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link included in every email;
- update your marketing preferences through your customer account where available;
- contact us directly to request removal from our mailing list.
Please note that even if you opt out of marketing communications, we may still contact you regarding:
- orders;
- deliveries;
- returns;
- account security;
- product recalls;
- important service updates.
These communications are considered necessary for the performance of our contract with you or to comply with our legal obligations.
22. Third-Party Websites
Our Website may contain links to third-party websites, including social media platforms, partner websites and other external services.
We do not control these websites and are not responsible for their privacy practices or content.
We recommend that you read the privacy policy of every website you visit before providing any personal information.
23. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- changes in legislation;
- improvements to our Website;
- changes to our products or services;
- new technology;
- changes to our business operations.
The latest version will always be available on our Website.
Where changes are significant, we may notify you by email or by placing a prominent notice on our Website.
Your continued use of our Website after any updates have been published constitutes your acknowledgement of the revised Privacy Policy.
24. Complaints
If you have any questions or concerns about how we process your personal information, we encourage you to contact us first so that we can try to resolve the matter.
If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent authority responsible for data protection.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website:
Telephone:
0303 123 1113
Lodging a complaint with the ICO will not affect any other legal rights or remedies available to you.
25. Contact Us
If you have any questions about this Privacy Policy or how we process your personal information, please contact us.
IFR Holdings Ltd
Trading as Lavender Hill Clothing
Registered Office
HGC Accountants
First Floor
30 London Road
Sawbridgeworth
Hertfordshire
CM21 9JS
United Kingdom
Company Number
08745470