Last updated on 02 September 2025

Who we are.
Elluse.Biz (“Elluse”, “we”, “us”, “our”) provides a UK-based, made-to-order shop. We are the data controller for data collected via our website and shop.

  • Controller: Elluse.Biz (UK)

  • Contact: helen@ellusedesign.com

  • Data protection contact: helen@ellusedesign.com (use this for privacy requests)

  • Supervisory authority: UK Information Commissioner’s Office (ICO). You can complain to the ICO at any time. ICO

What this covers.
This policy explains what we collect, why, who we share it with (including our UK manufacturer Contrado Imaging Ltd), how long we keep it, and your rights.

We do not knowingly collect data from anyone under 18; if you’re under 18, please do not use our services. Contact us if you think a minor has provided data.

The short version (plain English)

  • We only collect what we need to take and fulfil your order, run the site, and improve the experience. Contrado USA

  • Your items are handmade to order in London by our UK manufacturing partner Contrado and shipped on a tracked service. Contrado USA+1

  • We don’t sell your personal data. Ever. Contrado USA

  • You can access, correct, delete, or object to our use of your data. You can also complain to the ICO. ICO

What we collect

  • Identifiers: name, email, phone, billing/delivery address.

  • Order & payment info: items ordered, totals, status; last four digits/payment token from our payment processor (we don’t store full card numbers).

  • Device & usage data: IP, device/browser, pages viewed, referrers, and cookie IDs (see Cookies).

  • Content you send us: messages, reviews, photos (e.g. for custom work).

We get this from you at checkout/contact forms, automatically via cookies/analytics, and from our partners when needed to complete an order (payment providers, delivery couriers, manufacturer). ICO expects you to list categories and sources; we do. ICO

Why we use your data (lawful bases)

  • To take payment, make your order, and deliver it (contract).

  • To send service emails (order updates, delivery, support) (contract/legitimate interests).

  • Fraud prevention & site security (legitimate interests/legal obligation).

  • Customer support (contract/legitimate interests).

  • Analytics & performance to improve the site (consent where required; otherwise legitimate interests, using aggregated/limited data).

  • Marketing email (only if you opt in; you can unsubscribe any time).

Stating purposes and lawful bases is required. ICO+1

Who we share data with (processors & recipients)

We share what’s necessary with:

  • Manufacturing & fulfilment: Contrado Imaging Ltd (London, UK) to make and dispatch your order fast (typically 1–3 working days to produce). Contrado USA+1

  • Payment processing & fraud screening: secure PCI-compliant providers.

  • Couriers & postal services: for delivery/tracking.

  • Email & website hosting/IT/security: to run our site and send order emails.

  • Analytics & cookies: to measure and improve performance (see Cookies).

We do not sell your personal data. Contrado USA

International transfers

Our core production and dispatch is UK-based via Contrado. Some partners (e.g. email, analytics, CDNs) may process data outside the UK/EEA. Where that happens, we use appropriate safeguards (e.g. Standard Contractual Clauses) to protect your data. (This mirrors standard UK/EU practice.) ICO

How long we keep it

  • Orders & invoices: typically 6 years (tax/accounting).

  • Support email/chat: up to 12 months after resolution unless needed for disputes.

  • Marketing email lists: until you unsubscribe or your address bounces.

  • Analytics cookies: see Cookies for specific lifetimes.

Retention periods must be explained in plain terms. ICO

Your rights (UK/EU)

You can access, correct, delete, object to or restrict processing, and port your data. Where we rely on consent, you can withdraw it. Contact helen@ellusedesign.com. If we can’t resolve it, you can complain to the ICO. ICO

Cookies & similar tech

We use cookies for:

  • Essential: cart, checkout, login, security.

  • Performance/analytics: to understand website usage and improve it.

  • Marketing (optional): only if you consent.

Your banner should let people accept/reject non-essential cookies and manage choices. (This mirrors Contrado’s privacy/cookie stance and ICO guidance.) Contrado USA+2Contrado UK+2

Children

Our services are not intended for anyone under 18. Do not submit data for a minor. If you believe a minor has provided data, contact us and we’ll delete it.

Security

We use technical and organisational measures to keep data secure (TLS encryption in transit, access controls, least-privilege admin, and vetted processors). Contrado states a security-first commitment to customer privacy; we hold our partners to that. Contrado USA

Custom orders, images & rights

Only upload content you have the right to use (e.g. images with permission). Don’t include other people’s personal data without consent (names, addresses, faces, etc.). This mirrors Contrado’s content rules. Bags of Love

UK-specific delivery notes (for transparency)

  • Items are made to order in London and dispatched on a tracked service. Production is typically 1–3 working days; delivery time is in addition to production. Contrado UK

  • UK orders are not subject to customs/import fees. International customers may pay local duties/taxes.

  • Delivery times are estimates; busy periods can extend timelines. Contrado USA

Updates to this policy

We’ll update this page when we change how we process data. If changes are material, we’ll notify you (e.g. by email or on-site notice).

Optional: non-UK/EEA disclosures (short form)

  • EEA/UK GDPR: we’ve listed your rights and our lawful bases above.

  • US (CCPA/other state laws): we are a small UK business and do not sell personal information. If you’re a US resident and want to exercise access/deletion/opt-out rights, email helen@ellusedesign.com and we’ll honour applicable rights. (We avoid sharing for cross-context behavioural advertising.)

  • Nevada: we don’t sell personal information as defined by Nevada law.

Many successful UK Contrado stores keep non-UK sections short or omit them entirely. If your audience is mostly UK/EU, this “short form” is enough. If you truly need the full US state-by-state schedule, say the word and I’ll add an annex.

How We Use Your Information

I retain project-related data for 6 years to comply with UK tax and professional insurance requirements. General enquiry data is deleted after 2 years if no project is initiated.Your data is used strictly for:

  • Delivering branding, design, and marketing services.
  • Communicating regarding project milestones and technical support.
  • Complying with UK Data (Use and Access) and tax regulations.

Your Rights

Under UK GDPR, you have the right to access, rectify, or delete your personal data. You also have the right to ensure that final creative and strategic decisions are made by a human professional, in line with CIM’s 2026 foundational principles.

To change your cookie preferences at any time, please click the ‘Cookie Settings’ link in the footer of this website.

How to Complain:

If you have any concerns about my use of your personal information, you can make a complaint to me directly at helen@elumin.co.uk. In line with the Data (Use and Access) Act 2025, I will acknowledge your complaint within 30 days and provide a full response without undue delay. If you remain unhappy, you can then complain to the ICO (Ref: ZC114192).

Talk to us

Questions or requests about your data? Email helen@ellusedesign.com.