This page applies to purchases made through littlemaison.net (the “Website”). The Website is operated by ACTIONS BRIGHT LTD, Company number 16861246, registered at 20 Wenlock Road, London, England, N1 7GU. For customer support, order questions, returns or legal notices, contact info@littlemaison.net.
1. Who controls your personal data
The controller responsible for personal data collected through the Website is ACTIONS BRIGHT LTD, Company number 16861246, registered at 20 Wenlock Road, London, England, N1 7GU. Contact us at info@littlemaison.net for privacy questions, access requests or data protection concerns.
2. Personal data we collect
We collect information that customers provide directly, information generated through use of the Website and information received from service providers involved in payments, delivery, fraud prevention or customer support.
- Identification and contact details: name, email address, phone number where provided, billing and shipping address.
- Order information: products purchased, order value, delivery method, returns, refunds, customer support messages and invoices.
- Payment-related information: payment status, transaction reference, last digits or tokenised identifiers supplied by the payment provider, chargeback or fraud-screening information where relevant.
- Technical information: IP address, device data, browser type, cookie identifiers, approximate location, language settings and Website activity.
- Marketing preferences: consent records, newsletter subscription status and communication preferences.
3. Why we use personal data
We use personal data only where we have a lawful basis to do so, such as performance of a contract, compliance with legal obligations, legitimate interests, consent or the establishment, exercise or defence of legal claims.
- To process and fulfil orders, payments, deliveries, returns and refunds.
- To provide customer service and respond to enquiries or complaints.
- To prevent fraud, abuse, payment disputes and unauthorised transactions.
- To maintain accounting, tax, business and compliance records.
- To improve the Website, product range, user experience and security.
- To send service emails such as order confirmations, delivery updates and policy notices.
- To send marketing communications only where permitted by law or consented to by the customer.
4. Payment and checkout processing
Payments are processed by third-party payment providers. We do not normally receive or store full card details. The payment provider may process payment credentials, authentication data, transaction risk signals and payment method information according to its own technical and regulatory obligations.
5. Delivery and fulfilment partners
To deliver orders, we may share the customer name, delivery address, email address, phone number where required, order reference and shipping details with fulfilment partners, warehouses, couriers, postal operators, customs brokers or logistics technology providers.
6. Cookies and analytics
We use cookies and similar technologies to operate the Website, remember preferences, analyse performance, secure checkout and, where consent is given, support marketing or advertising measurement. Details are set out in our Cookie Policy.
7. Marketing communications
We may send newsletters, product updates or offers if you have subscribed, consented or where soft opt-in rules allow it. You can unsubscribe using the link in the email or by contacting customer support. Transactional messages about orders, security or policy updates are not marketing messages.
8. Data sharing
We may share personal data with carefully selected service providers acting on our behalf or as independent controllers where necessary for payment processing, delivery, hosting, analytics, customer support, accounting, legal compliance, anti-fraud review, IT security or business administration.
We do not sell customer personal data to advertisers. If advertising or analytics tools are used, they are governed by consent settings, provider terms and applicable privacy laws.
9. International transfers
Some service providers may process data outside the customer’s country of residence. Where required, we rely on appropriate safeguards such as adequacy decisions, standard contractual clauses, transfer risk assessments or other lawful transfer mechanisms.
10. Data retention
We keep personal data only for as long as necessary for the purposes described in this Policy. Order, invoice, tax and accounting records may be retained for legally required periods. Customer support records are retained for a reasonable period to manage disputes and service history. Marketing data is retained until consent is withdrawn or the contact becomes inactive according to our internal retention rules.
11. Your rights
Depending on your location and applicable law, you may have rights to access, rectify, erase, restrict, object to processing, request portability, withdraw consent and lodge a complaint with a data protection authority. These rights may be subject to identity verification, legal limitations and the need to retain certain records.
12. Security
We use reasonable technical and organisational measures to protect personal data, including access controls, secure checkout flows, service provider due diligence and operational safeguards. No online system is completely risk-free, so customers should also protect their account credentials and avoid sharing sensitive data through insecure channels.
13. Children’s privacy
The Website is intended for use by adults. We do not knowingly collect personal data from children for account creation or purchasing. Purchases for children must be made by an adult parent, guardian or authorised purchaser.
14. Automated decision-making
We may use automated or semi-automated fraud and payment risk tools to identify suspicious transactions, address inconsistencies or unusual order patterns. These tools do not replace customer support review where a customer contacts us about an order decision.
15. Contact and updates
Privacy questions should be sent to info@littlemaison.net. We may update this Privacy Policy to reflect changes to our Website, service providers, legal requirements or operating practices.
