PRIVACY POLICY

Douglas Creative Limited trading as Ember Drift
Effective Date: 01 June 2026
Last Updated: 01 June 2026

1. Introduction
Douglas Creative Limited, trading as Ember Drift ("Ember Drift", "we", "us", or "our"), is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you:
  • Visit our website;
  • Create an account;
  • Purchase products from us;
  • Subscribe to our newsletters or marketing communications;
  • Contact us; or
  • Interact with our services in any other way.
We are committed to processing your personal data fairly, lawfully, and transparently in accordance with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations ("PECR"), and other applicable data protection laws.
By using our website and services, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
For the purposes of UK data protection legislation, the data controller is:
Douglas Creative Limited
Trading as Ember Drift
9 Raynham Close
Bishops Stortford
Hertfordshire
CM23 5PJ
Email: studio@emberdrift.co.uk
Telephone: 01279 655661
If you have any questions about this Privacy Policy or your personal information, please contact us using the details above.
3. Personal Information We Collect
We may collect and process the following categories of personal data.
Identity Data
  • Full name
  • Username or account identifier
  • Date of birth (if provided)
Contact Data
  • Billing address
  • Delivery address
  • Email address
  • Telephone number
Transaction Data
  • Products purchased
  • Order history
  • Payment information
  • Refund information
  • Delivery details
Technical Data
  • Internet Protocol (IP) address
  • Browser type and version
  • Device information
  • Operating system
  • Time zone settings
  • Website usage information
Profile Data
  • Purchase history
  • Product preferences
  • Account settings
  • Customer feedback
  • Survey responses
Marketing and Communications Data
  • Marketing preferences
  • Newsletter subscriptions
  • Communication history
4. Information Collected Automatically
When you visit our website, we may automatically collect technical information through cookies and similar technologies, including:
  • IP address
  • Browser information
  • Device identifiers
  • Referring website addresses
  • Pages visited
  • Session duration
  • Clickstream data
This information helps us improve website functionality, security, and customer experience.
5. Payment Information
We use trusted third-party payment processors to process payments.
We do not store full payment card details on our own servers.
Payment providers may collect and process:
  • Cardholder name
  • Card details
  • Billing address
  • Transaction information
Such providers process information in accordance with their own privacy policies and applicable legal requirements.
6. How We Use Your Personal Information
We may use your personal information for the following purposes:
Order Fulfilment
  • Processing orders
  • Delivering products
  • Managing payments
  • Issuing refunds
  • Providing order updates
Customer Service
  • Responding to enquiries
  • Resolving complaints
  • Providing support
Account Administration
  • Managing customer accounts
  • Authenticating users
  • Maintaining account security
Business Operations
  • Website administration
  • Fraud prevention
  • Security monitoring
  • Business analytics
Marketing
Where permitted by law, we may use your information to:
  • Send newsletters
  • Notify you of promotions
  • Inform you of new products
  • Conduct customer surveys
Legal Compliance
  • Comply with legal obligations
  • Maintain financial records
  • Defend legal claims
  • Enforce contractual rights
7. Legal Bases for Processing
Under UK GDPR, we rely upon one or more of the following lawful bases:
Performance of a Contract
Processing necessary to fulfil orders and provide services.
Legitimate Interests
Processing necessary for:
  • Running our business
  • Improving our website
  • Fraud prevention
  • Customer support
  • Security monitoring
Consent
Where required, we rely on consent for:
  • Marketing communications
  • Non-essential cookies
  • Certain promotional activities
Legal Obligation
Where processing is required to comply with legal or regulatory obligations.
8. Marketing Communications
If you opt in to receive marketing communications, we may send information about:
  • New products
  • Promotions
  • Special offers
  • News and updates
You may withdraw consent or unsubscribe at any time by:
  • Clicking the unsubscribe link in any marketing email; or
  • Contacting us directly.
Withdrawal of consent will not affect the lawfulness of processing undertaken before withdrawal.
9. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Cookies may be categorised as:
Strictly Necessary Cookies
Required for website functionality and security.
Analytics Cookies
Used to understand website usage and improve performance.
Functional Cookies
Enable enhanced website functionality and user preferences.
Marketing Cookies
Used to deliver relevant advertising and measure campaign effectiveness.
Where required by law, we obtain consent before placing non-essential cookies.
A separate Cookie Policy may provide further details.
10. Disclosure of Personal Information
We may share your personal information with:
Service Providers
Including:
  • Payment processors
  • Delivery companies
  • Hosting providers
  • Cloud service providers
  • Analytics providers
  • Email marketing providers
Professional Advisers
Including:
  • Solicitors
  • Accountants
  • Auditors
  • Insurers
Regulatory and Government Authorities
Where required by law or regulation.
Business Transfers
In connection with mergers, acquisitions, restructuring, or sale of business assets.
All third parties are required to respect the security and confidentiality of personal data.
11. International Data Transfers
Some of our suppliers may process personal information outside the United Kingdom.
Where transfers occur internationally, we ensure appropriate safeguards are implemented, including:
  • UK adequacy regulations;
  • International Data Transfer Agreements (IDTAs);
  • Standard Contractual Clauses (SCCs); or
  • Other approved transfer mechanisms.
12. Data Security
We implement appropriate technical and organisational security measures designed to protect personal data against:
  • Unauthorised access;
  • Accidental loss;
  • Alteration;
  • Disclosure;
  • Destruction; and
  • Misuse.
Despite our efforts, no internet transmission or storage system can be guaranteed to be completely secure.
13. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including:
  • Order fulfilment;
  • Customer service;
  • Legal compliance;
  • Accounting requirements;
  • Dispute resolution.
Certain records may be retained for up to six years or longer where required by law.
14. Your Rights
Under UK GDPR, you may have the following rights:
Right of Access
To obtain a copy of personal information we hold about you.
Right to Rectification
To correct inaccurate or incomplete information.
Right to Erasure
To request deletion of personal information in certain circumstances.
Right to Restrict Processing
To limit how we use your information.
Right to Object
To object to processing based on legitimate interests or direct marketing.
Right to Data Portability
To receive your data in a structured, machine-readable format.
Right to Withdraw Consent
Where processing is based on consent.
Rights Relating to Automated Decision-Making
To challenge certain automated decisions where applicable.
Requests can be made by contacting us using the details in this Privacy Policy.
15. Children's Privacy
Our website and services are not intended for children under the age of 13.
We do not knowingly collect personal information from children. If we become aware that we have received information from a child without appropriate consent, we will delete such information.
16. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy from time to time.
Changes will be published on this page with an updated revision date.
Where legally required, we will notify users of material changes.
17. Complaints
If you have concerns regarding our handling of personal information, please contact us first so that we can attempt to resolve the matter.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters.
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: https://ico.org.uk/
Contact Details
Douglas Creative Limited
Trading as Ember Drift
9 Raynham Close
Bishops Stortford
Hertfordshire
CM23 5PJ
Email: studio@emberdrift.co.uk
Telephone: 01279 655661