1. Who We Are

D'MUR ESSENCE LTD is a private limited company registered in England and Wales.

• Company number: 16819302
• Registered office: 92a King Street, Great Yarmouth, England, NR30 2PR
• Trading name: D'Mur Essence
• Contact email: [email protected]

For the purposes of UK GDPR and the Data Protection Act 2018, D'MUR ESSENCE LTD is the data controller responsible for your personal information.

2. Information We Collect

We collect different types of information depending on how you interact with us:

Information you give us directly

• Name, email address, phone number, and delivery/billing address — when you place an order, create an account, or sign up to our newsletter
• Payment details — processed securely by Stripe (we don't store full card numbers ourselves)
• Account credentials — if you create an account or join our members club
• Messages and correspondence — when you contact us by email, social media, or contact form

Information we collect automatically

• Device and browser information — IP address, browser type, operating system, device type
• Usage data — pages visited, time on site, referral source, links clicked
• Cookie data — see Section 5 for full detail

Information from third parties

• Order and fulfilment updates from our shipping carriers
• Payment confirmation from Stripe
• Engagement data from our email platform (opens, clicks)

3. How We Use Your Information

We only use your information where we have a lawful basis to do so under UK GDPR. Here's how that breaks down:

4. Who We Share Your Information With

We do not sell your personal information. We only share it with trusted service providers who help us run our business, and only with the data they need to do their job.

5. Cookies and Tracking

We use cookies and similar technologies on our website. When you first visit, you'll see a cookie consent banner that lets you choose which types you accept.

Strictly necessary cookies

Required for the website to work (e.g. shopping cart, checkout, login). These don't need your consent.

Analytics cookies

We use Google Analytics 4 to understand how visitors use the site, which pages are popular, and where improvements can be made. These only load if you accept them in the banner.

Marketing cookies

Currently not in use. If we add them in future, we'll update this policy and your consent will be requested.

You can change your cookie preferences at any time using the cookie settings link in our website footer, or by clearing cookies in your browser.

6. Marketing Communications and the Members Club

When you join our members club or opt in to our newsletter, you'll receive:

• New product launches and restocks
• Members-only promotions and early access
• Newsletters and brand stories
• Abandoned cart reminders if you leave items in your basket

You can unsubscribe at any time using the link at the bottom of any marketing email, or by emailing us directly. Unsubscribing from marketing won't affect transactional emails (order confirmations, shipping updates, etc.) which we're required to send as part of fulfilling your order.

7. How Long We Keep Your Information

We keep your data only as long as we need it:

After these periods, data is either deleted or anonymised.

8. Where Your Data Is Stored

Most of your data is stored on servers in the United States, operated by HighLevel Inc. (GoHighLevel) and its hosting providers (AWS, Google Cloud). These transfers are protected by:

• HighLevel's certification to the UK Extension to the EU-US Data Privacy Framework
• UK International Data Transfer Addendum and Standard Contractual Clauses
• Encryption in transit (TLS 1.2+) and at rest (AES-256)

Stripe processes payments through infrastructure in the EEA, UK, and US, with equivalent safeguards.

9. Your Rights

Under UK GDPR, you have the following rights:

To exercise any of these rights, email us at [email protected]. We'll respond within one month.

If you're not happy with how we've handled your data, you can complain to the UK's data protection regulator:

10. Data Security

We take security seriously. Our website and customer data are protected by:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls — only people who need access have it
• Secure infrastructure provided by GoHighLevel, AWS, and Google Cloud
• PCI-DSS compliant payment processing via Stripe

No system is 100% secure, but we follow industry standards to protect your information. If a data breach ever occurred that affected your rights, we'd notify both the ICO and any affected customers within 72 hours as required by law.

11. Children's Privacy

Our website and products are not directed at children under 16. We don't knowingly collect data from anyone under 16. If you believe we've collected information from a child, please contact us and we'll delete it.

12. Changes to This Policy

We may update this policy from time to time — for example, if we add new services or the law changes. When we make significant changes:

• We'll update the "Last Updated" date at the top of the page
• We'll notify members club subscribers by email
• We'll display a notice on the website where appropriate

Your continued use of our website and services after changes take effect means you accept the updated policy.

13. Contact Us

For any questions about this policy, your data, or to exercise any of your rights: