Privacy Policy

Last updated: 02/06/2026

1. Who we are

This Privacy Policy explains how we collect and use your personal information when you visit lisavonhallwylmillinery.com, buy or hire from us, or get in touch.

The data controller is Lisa von Hallwyl, trading as Lisa von Hallwyl Millinery, a sole trader of Beckford Silks, Ashton Road, Beckford, Tewkesbury, GL20 7AU, United Kingdom.

For any privacy question or to exercise your rights, contact us at lisa@lisavonhallwylmillinery.com or 07738 223791.

We process personal data in line with the UK GDPR and the Data Protection Act 2018, and we are registered with the Information Commissioner's Office (ICO).

2. The information we collect

Identity and contact details — your name, email address, telephone number, billing and delivery addresses.
Order and hire information — the items you buy or hire, your order history, and correspondence about your orders.
Bespoke consultation information — details you share so we can create your piece, which may include head measurements, outfit details and photographs or images you send us, and notes from your consultation (in person or by video call).
Payment information — payments are taken by our payment processor, Wix Payments. We receive confirmation that a payment was made; we do not see or store your full card details.
Marketing preferences — whether you have agreed to receive our emails.
Technical and usage information — collected through cookies when you use the website (see our Cookies Policy).

3. How we collect it

directly from you — when you order, book a hire or bespoke consultation, buy a gift card or Season Privilege, contact us, or sign up to our emails;
automatically — through cookies and similar technologies on the website;
from our platform and processors — for example, order and payment confirmations through Wix.

4. How we use your information, and our lawful bases

We use your personal information for the following purposes, relying on the lawful basis shown:

Taking and fulfilling your order, hire or bespoke commission, and arranging delivery — performance of our contract with you.
Responding to enquiries and providing customer support — our legitimate interests (helping and replying to you).
Taking payment and keeping financial records — performance of our contract, and compliance with our legal obligations (tax and accounting).
Sending marketing emails about our hats, collections and offers — your consent (you can withdraw it at any time).
Measuring and improving the website and our advertising — your consent (through cookies — see our Cookies Policy).
Keeping records and dealing with complaints or legal claims — our legitimate interests, and compliance with our legal obligations.

Where we rely on legitimate interests, we have considered your rights and only proceed where they are not overridden.

5. Marketing

If you have agreed to receive our emails, we send them using Wix Email Marketing. Every marketing email includes an unsubscribe link, and you can opt out at any time by using it or contacting us. Withdrawing marketing consent does not affect emails we need to send you about an order or a hire you have placed.

6. Who we share your information with

We do not sell your personal information. We share it only with organisations that help us run the business, and only as needed:

Wix — our website platform, which hosts the site and processes orders and website data on our behalf.
Wix Payments — to process your payment securely.
Wix Email Marketing — to send our marketing emails (where you have consented).
Delivery carriers — to deliver your order (they receive your name, delivery address and contact details).
Google and Meta — through cookies and tags on the website, where you have consented (see the Cookies Policy).
Professional advisers (such as an accountant) and authorities — where we are required to share information by law.

These organisations act as our processors (or, where they decide how they use data such as for their own analytics/advertising, as separate controllers), and are required to keep your information secure.

7. International transfers

Some of our providers — including Wix and the Google and Meta services above — may process personal data outside the UK. Where data is transferred outside the UK, we rely on an appropriate safeguard recognised under UK data protection law, such as a UK adequacy decision, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses, so that your information stays protected.

8. How long we keep your information

We keep personal information only as long as we need it:

Order, hire and payment records: 6 years after the transaction, to meet tax/accounting requirements and the limitation period for contract claims.
Bespoke consultation notes, measurements and images: kept for the duration of your commission and for six years afterwards, so we can repeat or adapt a design for you. We will only use images for marketing with your separate consent.
Enquiries that do not lead to an order: 24 months.
Marketing data: until you withdraw your consent.

When we no longer need information, we delete or anonymise it.

9. Your rights

Under UK data protection law you have the right to:

access the personal data we hold about you;
ask us to correct inaccurate data;
ask us to erase data in certain circumstances;
restrict or object to our processing in certain circumstances;
request portability of data you gave us;
withdraw consent at any time, where we rely on consent (such as marketing).

To exercise any of these, contact lisa@lisavonhallwylmillinery.com. We will respond within one month. There is normally no charge.

If you are concerned about how we handle your data, please tell us first so we can help. You also have the right to complain to the Information Commissioner's Office (ICO): www.ico.org.uk, helpline 0303 123 1113.

10. Security

We take reasonable steps to keep your information secure. Online payments and the website are handled through Wix's secure systems. No method of transmission over the internet is completely secure, but we work to protect your data and to deal with any breach appropriately.

11. Children

Our products and website are intended for adults. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. The current version is always available on the website, with the date it was last updated shown at the top.