Privacy Policy

01 Introduction & Data Controller

This Privacy Policy describes how Surrati Since 1929, operating from the United Kingdom, collects, utilizes, and protects your personal data when you engage with our digital flagship, surratisince1929.co.uk.

We are dedicated to safeguarding your privacy and ensuring full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

02 Data We Collect

In our pursuit of providing a bespoke luxury experience, we may collect the following categories of personal data:

• Identity Data: Name, username, title, and date of birth.
• Contact Data: Billing and shipping addresses, email, and telephone numbers.
• Financial Data: Securely processed payment card details.
• Technical Data: IP address, login data, browser settings, and device technology used to access the site.
• Usage Data: Insights into how you interact with our boutique and heritage collections.

03 Legal Basis for Processing

We process data only when permitted by law, primarily under the following grounds:

• Contractual Necessity: To fulfill and deliver your luxury fragrance orders.
• Legitimate Interests: For brand protection, fraud prevention, and service refinement.
• Legal Obligation: To comply with UK tax and accounting regulatory frameworks.
• Consent: Where you have explicitly opted to receive our heritage insights and marketing communications.

04 Your Legal Rights

Under UK GDPR, you possess specific rights regarding your personal information, including the right to request access, rectification, or erasure (the "right to be forgotten"). You may also object to processing or request the transfer of your data to another party.

To exercise these rights, please contact our Data Protection Officer via the inquiries section below.

05 Security & Retention

Data Security

We have implemented rigorous security measures to prevent unauthorized access, accidental loss, or disclosure of your personal data.

Data Retention

Personal data is retained only for as long as necessary to satisfy the purposes of collection, including legal, accounting, and reporting requirements.