Legal Information

Gert Lush Designs is owned and operated by Sharon Fielding

My correspondence address:

Sharon Fielding, T/A Gert Lush Designs, 7 Burchells Green Road, Kingswood, Bristol, BS15 1DT

Email – gertlushdesigns@gmail.com

Terms & Conditions

Placing An Order

Ordering from a PC

Browse the website and if you see something you wish to purchase then click on the ‘add to cart’ button next to that item.  If you would like to view your cart at any time then click on the ‘view cart’ button on the top right of the website. Items can be removed from cart if required.  When you have finished shopping click on ‘checkout’ on the view cart page and this will take you to the PayPal website to compete your purchase.

Ordering from a smart phone or tablet

My hosting package changes the look of the website when viewing it on a smart phone or tablet and also removes all the shopping widgets.  If you are having problems trying to place an order using a smart phone or tablet then please make a note of the names of the products you wish to purchase and email the names to gertlushdesigns@gmail.com along with your PayPal email address and I can send you an invoice via PayPal

Making A Payment

Payments go through PayPal using credit / debit card details or by using your PayPal balance if you already have an active account.  Using PayPal means that your details will be processed securely on their server.  You do not have to have a PayPal account to make a payment.

If you live in Bristol and would prefer to collect your items in person rather than pay for delivery then drop me an email to let me know and this can be arranged.

Postage Costs & Delivery Times

Postage charges include packaging costs. I send all orders via Royal Mail Signed For so that I know they will reach you!

Postage costs depend which option you choose and how much you spend.

If your complete order is less than £50 postage will be: £3.70 for 2nd class or £4.10 for first class.

All orders over £50 are send by Royal Mail Special Delivery and postage costs per order are £8.70

I reserve the right to update postal charges at any time in accordance with increase of postage costs.

If actual postal costs work out to be significantly less than the customer has paid then a partial refund will be offered to cover the difference in cost.

I aim to dispatch all orders within 3 working days of payment notification.

Overseas Postage

I am more than happy to accept purchases from outside the UK. Please contact me via email at gertlushdesigns@gmail.com with details of which products you would like to purchase and where in the world you would like products sent and I will confirm charges per individual enquiry.

Custom Orders

Please allow at least 1-2 weeks for the creation of custom items.  If I am currently experiencing a busy period then I will email to advise if I will need longer to create your item.  Custom items will then be dispatched within four working days of completion.  My policy on custom orders is to email to confirm when your order has been received, I will email again to let you know when your order has been created and then email again to let you know when it has been dispatched.

Cancelling An Order

Orders can be cancelled at any time.  

Where goods have not yet been dispatched a full refund will be offered if payment has been made including postage costs.

If goods have been dispatched and you wish to cancel an order then products should be returned unopened in original packaging.  Buyer will be responsible for return postage costs if this is not a faulty item. A refund will be issued, minus the original postage costs, once the returned package has been received and inspected.

Please be aware that personalised/custom items are NOT subject to cancellation.

Refunds & Returns

If you are not entirely happy with your purchase, in accordance with the distance selling regulations you have 30 days from recieving the products to change your mind and return them to me. Please contact me as soon as possible via sharon@gertlushdesigns.co.uk to let me know so I can resolve any issues or rectify any problems.

If an item is faulty, damaged or not as expected then it can be returned to me and a replacement or full refund will be offered on receipt of returned goods.  I will also refund the cost of return postage on receipt of returned goods if the item is faulty or damaged.

Refunds CANNOT be offered on personalised items this includes items that have been made to a specific size and/or colour request.

Returns should be sent via signed for delivery within seven working days of recieving them at a cost of £4.10/£7.95 to Sharon Fielding, T/A Gert Lush Designs, 7 Burchells Green Road, Kingswood, Bristol, BS15 1DT.  If returned items are not sent via signed for delivery then the buyer accepts responsibility for the return item if it is not received by me. Proof of postage should always be obtained.

Privacy Policy

This privacy policy sets out how Gert Lush Designs uses and protects any information that you provide when you use this website.

Gert Lush Designs is committed to ensuring that your privacy is protected.  Should I ask you to provide certain information by which you can be identified when using this website then you can be assured that it will only be used in accordance with this privacy statement.

All personal information provided to me when you purchase an item or contact me is used in regard to that particular enquiry or sale.  I will not sell, distribute or lease your personal information to third parties….we all hate spam!!  

Postal address information is requested for dispatch purposes.    This will be stored for internal record keeping and as a reference if you need replacement products in the event that you are not happy with your purchase.

Email addresses may be stored by me to keep you informed of progress of your current order, request feedback on goods purchased and to notify you of future updates to my services.  All email contact will have an opt out facility.  If you wish to no longer be contacted by me you just have to reply to an email with ‘remove me’ as the subject or in the body of the email and I will remove your contact details from my database.

You may request details of personal information which I hold about you under the Data Protection Act 1998.  A small fee will be payable.  If you would like a copy of the information held on you please write to me at : Sharon Fielding T/A Gert Lush Designs, 7 Burchells Green Road, Kingswood, Bristol, BS15 1DT.

If you believe that any information I am holding on you is incorrect or incomplete, please write to or email me as soon as possible at the above address.  I will promptly correct any information found to be incorrect.

Cookies Policy

Cookies and how I use them

What is a cookie?

A cookie is a small file placed on your computer's hard drive. It enables my website to identify your computer as you view different pages on my website. Cookies allow websites and applications to store your preferences in order to present content, options or functions that are specific to you. They also enable me to see information like how many people use the website and what pages they tend to visit.

How I use cookies

I may use cookies to:

Analyse my web traffic using an analytics package - Aggregated usage data helps me improve the website structure, design, content and functions.

Test content on my website - For example, 50% of my users might see one piece of content, the other 50% a different piece of content.

To recognise when you return to my website - This helps me gauge how much traffic I am getting and helps me see which marketing is working.

Cookies do not provide me with access to your computer or any information about you, other than that which you choose to share with me.

Controlling cookies

You can use your web browser’s cookie settings to determine how my website uses cookies. If you do not want my website to store cookies on your computer or device, you should set your web browser to refuse cookies. However, please note that doing this may affect how my website functions. Some pages and services may become unavailable to you. Unless you have changed your browser to refuse cookies, my website will issue cookies when you visit it. To learn more about cookies and how they are used, visit All About Cookies.

Data Protection Policy

Introduction

[Gert Lush Designs] needs to gather and use certain information about individuals. These can include customers, suppliers, business contacts, and other people the organisation has a relationship with or may need to contact. This policy describes how this personal data must be collected, handled and stored to meet the company’s data protection standards — and to comply with the law.

Why this policy exists

This data protection policy ensures [Gert Lush Designs]:

Complies with data protection law and follow good practice

Protects the rights of customers and Is open about how it stores and processes individuals’ data

Protects itself from the risks of a data breach

Data protection law

The Data Protection Act 1998 describes how organisations — including [Gert Lush Designs]— must collect, handle and store personal information. These rules apply regardless of whether data is stored electronically, on paper or on other materials. To comply with the law, personal information must be collected and used fairly, stored safely and not disclosed unlawfully. The Data Protection Act is underpinned by eight important principles. These say that personal data must:

Be processed fairly and lawfully

Be obtained only for specific, lawful purposes

Be adequate, relevant and not excessive

Be accurate and kept up to date

Not be held for any longer than necessary

Processed in accordance with the rights of data subjects

Be protected in appropriate ways

Not be transferred outside the European Economic Area (EEA), unless that country or territory also ensures an adequate level of protection

Policy scope

This policy applies to:

The head office of [Gert Lush Designs]

All contractors, suppliers and other people working on behalf of [Gert Lush Designs]

It applies to all data that the company holds relating to identifiable individuals, even if that information technically falls outside of the Data Protection Act 1998. This can include:

Names of individuals

Postal addresses

Email addresses

Telephone numbers …plus any other information relating to individuals

Data protection risks

This policy helps to protect [Gert Lush Designs] from some very real data security risks, including:

Breaches of confidentiality. For instance, information being given out inappropriately.

Failing to offer choice. For instance, all individuals should be free to choose how the company uses data relating to them.

Reputational damage. For instance, the company could suffer if hackers successfully gained access to sensitive data.

Responsibilities

[Gert Lush Designs] has some responsibility for ensuring data is collected, stored and handled appropriately. Plus ensure that it is handled and processed in line with this policy and data protection principles.

As company director Sharon Fielding is ultimately responsible for ensuring that [Gert Lush Designs] meets its legal obligations. Key Responsibilities include:

Keeping herself updated about data protection responsibilities, risks and issues.

Reviewing all data protection procedures and related policies, in line with an agreed schedule.

Handling data protection questions from anyone covered by this policy.

Dealing with requests from individuals to see the data [Gert Lush Designs] holds about them (also called ‘subject access requests’).

Checking and approving any contracts or agreements with third parties that may handle the company’s sensitive data.

Ensuring all systems, services and equipment used for storing data meet acceptable security standards.

Performing regular checks and scans to ensure security hardware and software is functioning properly.

Evaluating any third-party services the company is considering using to store or process data. For instance, cloud computing services.

General guidelines

Data should not be shared informally.

Strong passwords must be used and they should never be shared.

Personal data should not be disclosed to unauthorised people, either within the company or externally. Data should be regularly reviewed and updated if it is found to be out of date. If no longer required, it should be deleted and disposed of.

Data storage

These rules describe how and where data should be safely stored.

When data is stored on paper, it should be kept in a secure place where unauthorised people cannot see it. These guidelines also apply to data that is usually stored electronically but has been printed out for some reason:

When not required, the paper or files should be kept in a locked drawer or filing cabinet.

Data printouts should be shredded and disposed of securely when no longer required.

When data is stored electronically, it must be protected from unauthorised access, accidental deletion and malicious hacking attempts:

Data should be protected by strong passwords that are changed regularly and never shared.

If data is stored on removable media (like a CD or DVD), these should be kept locked away securely when not being used.

Data should only be stored on designated drives and servers, and should only be uploaded to an approved cloud computing services.

Servers containing personal data should be sited in a secure location, away from general office space.

Data should be backed up frequently. Those backups should be tested regularly, in line with the company’s standard backup procedures.

Data should never be saved directly to laptops or other mobile devices like tablets or smart phones.

All servers and computers containing data should be protected by approved security software and a firewall.

Data use

Personal data is of no value to [Gert Lush Designs] unless the business can make use of it. However, it is when personal data is accessed and used that it can be at the greatest risk of loss, corruption or theft:

When working with personal data, the company director should ensure the screens of their computers are always locked when left unattended.

Personal data should not be shared informally. In particular, it should never be sent by email, as this form of communication is not secure.

Data must be encrypted before being transferred electronically.

Personal data should never be transferred outside of the European Economic Area.

The company director should not save copies of personal data to their own computers. Always access and update the central copy of any data.

Data accuracy

The law requires [Gert Lush Designs] to take reasonable steps to ensure data is kept accurate and up to date. The more important it is that the personal data is accurate, the greater the effort [Gert Lush Designs] should put into ensuring its accuracy. It is the responsibility of the company director to take reasonable steps to ensure it is kept as accurate and up to date as possible.

Data will be held in as few places as necessary.

[Gert Lush Designs] should take every opportunity to ensure data is updated. For instance, by confirming a customer’s details when they call.

Data should be updated as inaccuracies are discovered. For instance, if a customer can no longer be reached on their stored telephone number, it should be removed from the database.

It is the marketing manager’s responsibility to ensure marketing databases are checked against industry suppression files every six months.

Subject access requests

All individuals who are the subject of personal data held by [Gert Lush Designs] are entitled to:

Ask what information the company holds about them and why.

Ask how to gain access to it.

Be informed how to keep it up to date.

Be informed how the company is meeting its data protection obligations.

If an individual contacts the company requesting this information, this is called a subject access request.

Subject access requests from individuals should be made by post, addressed to the data controller at [Sharon Fielding T/A Gert Lush Designs, 7 Burchells Green Road, Kingswood, Bristol, BS15 1DT].

The data controller can supply a standard request form, although individuals do not have to use this.

Individuals will be charged £10 per subject access request.

The data controller will aim to provide the relevant data within 14 days.

The data controller will always verify the identity of anyone making a subject access request before handing over any information.

Disclosing data for other reasons

In certain circumstances, the Data Protection Act allows personal data to be disclosed to law enforcement agencies without the consent of the data subject.

Under these circumstances, [Gert Lush Designs] will disclose requested data. However, the data controller will ensure the request is legitimate, seeking assistance from the board and from the company’s legal advisers where necessary.

Providing information

[Gert Lush Designs] aims to ensure that individuals are aware that their data is being processed, and that they understand:

How the data is being used

How to exercise their rights

To these ends, the company has a privacy statement, setting out how data relating to individuals is used by the company. This is available on request. A version of this statement is also available on the company’s website.