PRIVACY POLICY

Suzi Wong Creations Limited

This Privacy Policy explains in detail the types of personal data we may collect when using this website. It also outlines how we store and handle that data, plus the measures we have in place to keep it safe.

We are committed to safeguarding the privacy of our website visitors and service users. We hope the details on this page will answer any questions you have regarding Personal Data or Security but if not, please do get in touch with us.

The term ‘Suzi Wong’ or ‘us’ or ‘we’ refers to the owner of the website – Suzi Wong Creations Limited.

The term ‘you’ refers to the user or viewer of our website.

This Privacy Policy sets out how Suzi Wong uses and protects any information that you give when you use suziwong.co.uk, referred to as ‘this website’ or ‘the website’ throughout this policy.

Who is Suzi Wong?

Suzi Wong Creations Limited is the data controller for the personal data collected through this website. This means we decide how and why your personal data is used.

Suzi Wong Creations Limited
Unit 15, Adlington South Business Village
Huyton Road, Adlington, PR7 4HJ
Telephone: 01257 229 009
Email: [email protected]
Company number: 08036820

Who is this website intended for?

Intended website users

This website is directed at consumers, to inform them about our products and services. The site and its content are directed at adults over the age of 16. While those under 16 can view the site and its content, users of our services are consumers above this age.

What information is collected?

Any Personally Identifiable Information (PII) given to us while using our website is only shared with our trusted data processors and the third parties named in this policy. The data may be processed for the purposes of operating our website, providing our services, marketing (if consent is given), measuring our advertising (if consent is given), analysis, security, back-ups and communicating with you.

Data is collected in the following ways:

Orders and online customer accounts

This website does not require a user account to be used, so we do not collect profile information or registration information by default.

When you place an order, and if you choose to create an online account during the Checkout process, information will be collected such as:

• First name
• Last name
• Email address
• Telephone number
• Billing address
• Shipping address

This data will be used for the purposes of operating our website and providing our customers with our services, maintaining back-ups of our databases and communicating with you.

Card and payment details are entered directly with our payment providers and are not stored on our website.

You can update the details held from the My Account page on this website.

Bespoke design appointments and the 3D Designer

If you book a bespoke design appointment, we collect the details you give us (such as your name, email address, telephone number and appointment details) so we can manage your booking and take any deposit. If you use our 3D Product Designer, your design choices (such as names, logos and colours) are saved so we can make your order.

Email marketing

Data such as, but not limited to, the following may be collected and used for email marketing purposes when consent is given by the user.

• First name
• Last name
• Email address
• Geographic location

SMS marketing

If you choose to opt in to receive SMS messages from Suzi Wong Creations Ltd, the following information may be collected and used:

• First name
• Last name
• Mobile phone number
• Purchase and browsing activity (to provide relevant updates or offers)
• Abandoned cart information (to send cart reminder messages if consent has been given)

This data is used solely for the purposes of sending you marketing messages, promotional updates, order notifications, or customer service information related to Suzi Wong.

Your phone number and SMS consent data will not be shared or sold to any third party, except where required to deliver SMS messages (for example, through our SMS service provider).

Our website also uses cookies to help track items placed into your shopping basket, including when a cart has been abandoned. This information may be used to determine when to send cart reminder messages via SMS.

Contact forms

Any information submitted through our contact forms will be held securely on our servers. Clear consent must be given to this Policy when submitting any data through our contact forms. All data will be stored for up to 24 months and used to contact you regarding your enquiry.

Site backups

User account information and contact form information may also be held in a backup of the website. Backups are stored for 30 days, after which they are deleted permanently.

Analytics and tracking

To deliver the best possible web experience, we collect technical information about your internet connection and browser as well as the country and telephone code where your computer is located, the web pages viewed during your visit, the buttons clicked on, and any search terms you entered. This is done with standard tracking technologies such as cookies that are stored within your web browser (find out more about how we use cookies).

We ask for your consent through our cookie banner before analytics and advertising cookies are set. If you decline, Google may still receive limited information that does not use cookies (for example, that a page was viewed), so that it can estimate website and advertising results without identifying you. You can change your choice at any time using the cookie settings link on this website.

Who is the data shared with?

Data processors

We will sometimes share your data with trusted Third Parties who act as Data Processors on our behalf. Data will only be processed for the purposes of operating our website, providing our services, or marketing our products and services across third party platforms, measuring our advertising, security, back-ups and communicating with you.

Data Processors are a person or organisation who deals with personal data as instructed by the controller for specific purposes and services offered to the controller that involve personal data processing.

The types of Data Processors we use include:

• Website hosting and maintenance (WP Engine,  and our website management agency, We Manage Web)
• Payment providers (Stripe, Amazon Pay, ApplePay, GooglePay)
• Appointment booking (Amelia booking system, with deposits taken through Stripe)
• 3D Product Designer (Zakeke)
• Email and SMS marketing (Klaviyo)
• Cookie consent management (CookieYes)
• Our website tracking server (Stape)
• Website analytics (Google Analytics)

To keep your data safe and protect your privacy, we have a strict policy with these organisations:

• The only data given to the Processor will be what they need to perform their specific services.
• We only give them permission to use the data for the exact purposes we agree in our contract with them.
• We only use trusted Data Processors with clear terms and conditions and policies to ensure full compliance with privacy legislation.
• If we stop using any of our Data Processors, all of the data held by them will either be deleted or rendered anonymous.

Third parties

We may share your personal information with selected third party advertising platforms in order to deliver personalised advertising and marketing communications that may be relevant to you.

This may include using your email address or mobile number to create advertising audiences on platforms such as Google Ads and Meta. When this happens, your data is securely transferred in hashed form so that it can be matched against users of those platforms. This allows us to show relevant advertisements to existing customers and to people with similar interests.

We rely on your consent as the lawful basis for this type of personalised advertising. You may withdraw your consent at any time by updating your marketing preferences or contacting us directly.

Personalised advertising technologies, including cookies and similar tracking tools, are only activated after you provide consent through our cookie consent manager.

These Third Parties include:

• Google LLC
• Meta Platforms Inc

We will never share your data with third parties for their own purposes unless you have given explicit consent for us to do so.

Text messaging opt-in data is not sold or shared with third parties for their own marketing purposes.

SMS opt-in information is collected and stored securely for the purpose of delivering SMS communications you have consented to receive.

Advertising measurement

When you place an order and have accepted marketing cookies, we share details of that purchase with Google and Meta so we can measure which of our adverts led to sales. This includes your order number, order value and the items bought, together with your email address, phone number, name and address. These personal details are converted into a coded form (hashed) before they are sent. We also send your IP address, basic browser information and an advertising identifier stored in a cookie. Google and Meta use this to match your purchase to an advert you saw or clicked and to report the results to us.

On the same basis, we may share the pages you view and the items you add to your basket. If you are logged in to your account, your coded account details may be included with this activity.

This information is sent from your browser and from our own tracking server, which is run for us by Stape, a data processor, and hosted in the United Kingdom. Stape keeps a record of these requests for up to 3 days for troubleshooting, after which it is deleted.

If you decline marketing cookies, no information is sent to Meta and no personal details are shared with Google for advertising.

We rely on your consent as the lawful basis for this processing. You can change your choice at any time using the cookie settings link on this website.

Where is the data held and processed?

Data location

This website is hosted on servers located in London, United Kingdom, where the website data is held.

Data transfers outside the UK

Some of our trusted Data Processors and the third parties named in this policy (including Google, Meta and Klaviyo) may transfer or store data outside the United Kingdom when acting on our behalf. Where this happens, the transfer is protected by safeguards recognised under UK data protection law, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum. We regularly check that these organisations meet these requirements.

This may include marketing and communication data (such as email and SMS messaging information) processed through secure third-party platforms like Klaviyo, which comply with applicable data protection and privacy frameworks when transferring data internationally.

What measures are in place to keep this website secure?

Site security

This website is scanned daily for Malware, which is removed immediately if found.

• All security is handled at server level, rather than relying on third-party security plugins
• Secure password best practices are enforced on the site for Administrators
• Login attempts are limited at both site and server level, to protect against brute-force attacks
• Intelligent IP blocking detects intruders and blocks them across all sites on the servers within seconds
• All core updates are handled automatically by our hosting provider to ensure the site is running the most up-to-date and secure version of the system

What are your rights as a website user?

User rights and choices

Under UK data protection law you have the right to:

• Ask for a copy of the personal data we hold about you
• Ask us to correct data that is wrong or incomplete
• Ask us to delete your data
• Ask us to restrict how we use your data
• Object to us using your data, including for marketing
• Ask us to transfer your data to you or another organisation
• Withdraw your consent at any time, where we rely on consent (this does not affect anything we did before you withdrew it)

If you wish to use any of these rights, please contact us. Once notified we can then initiate the process required. We will respond within one month.

Your data can be removed from our Email Marketing system by unsubscribing via the link at the bottom of any of our marketing emails.

You can change your cookie choices at any time using the cookie settings link on this website.

Your data may also be held within a site backup. Backups are stored for 30 days, after which they are deleted permanently.

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

How is personal data used for marketing?

Email marketing

We will only send email marketing to customers that have given consent. Registration for the Email Marketing list can be given via the Contact Page on this website. All emails submitted to our marketing list will receive a confirmation email, once accepted this acts as consent and you will receive Newsletters and Marketing from us.

You are free to unsubscribe from our Email Marketing List by clicking the unsubscribe link at the bottom of any of the emails that have been sent to you.

Remarketing

With your consent, we may use cookies (find out more about how we use cookies) to track your interactions with this website. This data may be shared with our Digital Marketing providers and Data Processors to present you with the most relevant advertisements when browsing third party websites.

Contact us with any questions

If you have any questions about this policy, your data, how it is used and protected or deletion of this data, please contact us at [email protected], call 01257 229 009, or write to us at Suzi Wong Creations Limited, Unit 15, Adlington South Business Village, Huyton Road, Adlington, PR7 4HJ.