1. Introduction

1.1 This is the privacy policy of LEMONGOLD LIMITED (Trading as LANDYS CHEMIST), an English registered company (number 1684749, VAT number 370 982 628). Our trading address is at 1189-1191 Finchley Road, London, NW11 0AA and our registered office is at 8 Durweston Street, London, W1H 1EW. Its purpose is to tell you how we process your “Personal Data” (i.e. data about any identified or identifiable living person). In particular: a) what Personal Data we collect; b) how we use it; c) how we protect it; d) to whom we disclose it; e) how you can access and rectify it.

1.2 If you have any queries concerning this policy, please contact us by using the details on the “contact us” page on our website.

1.3 We don't plan to make many changes to it, but please do feel free to stop by this page any time if you're not sure or concerned about how your data might be handled. 

2. What Personal Data do we collect?

2.1 When you register with us or place an order, we collect and store basic information such as your name, contact and order details, username and password, and payment information including credit card number. You may provide us with additional information on the site (e.g. if you store a list of favourites or complete a questionnaire or contest entry form) or if you communicate with us by phone / email or otherwise. In addition to this, we use Google Analytics to understand more about where our orders originate from.

2.2 We may receive and store certain information automatically when you interact with us. Examples include the internet protocol (IP) address used to connect your computer to the Internet, login, e-mail address, password, computer and connection information such as browser type and version, your operating system and platform, purchase history, which we may aggregate with similar information from other customers, the full Uniform Resource Locators (URL) click stream to, through and from our site (including date and time), cookie number, goods or services you viewed or searched for, parts of our site you visited and any phone number used to contact us.

2.3 Like many websites we use cookies. A cookie is a small amount of data that is sent to your browser from a web server and stored on your computer’s hard drive. A session cookie enables us to identify you (only) throughout a session on our site, so that you can use features such as the basket and are able to place orders. A session cookie is essential to our service. We may also use a cookie so that our web server will recognize your browser when you visit our site again. This will enable us to provide features such as personalized greetings and storage of items in your shopping basket between visits. The Help menu bar of most browsers tells you how to modify your browser to accept or reject all cookies or be notified when a cookie is set. However, cookies allow you to take full advantage of the most useful features of our site and we recommend that you leave them turned on. In any case you cannot use our service if you reject session cookies.

2.4 We may obtain information about you from other sources including credit and/or credit card information from credit bureaus.

3. How do we use your Personal Data? (Updated for new GDPR regulations)

3.1 We use your Personal Data to process your order.

3.2 We may use IP addresses for customer profiling purposes. 

3.3 We may use your Personal Data to provide a more personalized and user-friendly visit to our website, to streamline future orders, to help track user traffic patterns, to communicate with you about orders, goods, services and promotional offers, to update records and maintain your account, to display content such as favourites, to recommend goods and services that might be of interest to you and to enable targeted promotions when you visit our site. We may also use this information to improve our store and platform, prevent or detect fraud or abuses of our site and to enable third parties to carry out technical, logistical or other functions on our or their behalf.

3.4 We may access, copy, preserve, or delete any Personal Data where we or they are required to so by any applicable laws, statutes, regulations, standards or codes of conduct or competent authority or to protect our rights or those of our or their partners or customers.

4. How do we protect Personal Data?

4.1 Security is a high priority for us. We take appropriate precautions to protect Personal Data from loss, misuse, unauthorised access or disclosure, alteration or destruction.

4.2 All payments are processed securely using Sage Pay. Sagepay are a secure payment gateway provider. All transaction information passed between landyschemist.com and Sage Pay’s systems is encrypted using 128-bit SSL certificates. No cardholder information is ever passed unencrypted and any messages sent to your servers from Sage Pay are signed using MD5 hashing to prevent tampering. You can be completely assured that nothing you pass to Sage Pay’s servers can be examined, used or modified by any third parties attempting to gain access to sensitive information.

5. Who do we share your data with? (Updated for new GDPR regulations)

We share data with the following companies and for the following reasons:

5.1 Reviews.co.uk and Trustpilot - For the purposes of review collection. No other personal data is ever passed on to these or any other companies.

5.2 Royal Mail - For deliveries. We provide them with the name and address provided to us for an order, along with a phone number and email address so they can provide additional delivery status updates. 

5.3 DPD - For selected deliveries in Europe. We provide them with the name and address provided to us for an order, along with a phone number and email address so they can provide additional delivery status updates. 

5.4 Sagepay and Paypal - For taking payments. These are large and well established companies and we feel more secure knowing that they are handling your payments and we think you do too. We are not responsible for how they collect or use your personal data but please do take a look at their websites if you'd like to know more. https://www.paypal.com/uk/webapps/mpp/ua/privacy-full and https://www.sagepay.co.uk/policies/privacy-policy

6. How can you access and rectify Personal Data?

6.1 You can access and rectify certain of your Personal Data (including contact and payment details) by logging into your account or by contacting us using the details provided on our website.

6.2 For information about your rights under UK data protection laws, see the website of the UK Data Protection Commissioner