Who we are

Our website address is: https://www.loveandbeyond.co.uk.
Love & Beyond is a UK-based bridal subscription box service. For any questions about this policy, you can contact us at:

• Email: [email protected]

• Address: Sunnydale, Dorrington, Shrewsbury, SY5 7JD

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string to help with spam detection.

An anonymised string (hash) created from your email address may be sent to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available at: https://automattic.com/privacy/. After your comment is approved, your profile picture becomes publicly visible next to your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors to the site can download and extract location data from images displayed on the site.

Cookies

We use cookies to improve your experience and support key website functions. Cookies are small text files stored on your device.

If you leave a comment:

You may opt in to saving your name, email address, and website in cookies for your convenience. These cookies will last for one year.

If you log in:

• A temporary cookie will determine if your browser accepts cookies (deleted when you close your browser).

• Login cookies last two days (or two weeks if “Remember Me” is selected).

• Screen option cookies last one year.

• When editing/publishing content, an extra cookie stores the post ID and expires after one day.

Additional Cookies:

We also use cookies to:

• Track usage of our store (e.g. cart activity, checkout progress)

• Remember products in your cart

• Power marketing and analytics (e.g., Google Analytics, Facebook Pixel)

• Send email reminders if you’ve opted in (e.g., Klaviyo or Mailchimp)

For more information or to manage your cookie preferences, please refer to our Cookie Policy.

Embedded content from other websites

Articles on this site may include embedded content (e.g., videos, images, articles). Embedded content behaves as if the visitor had visited the original website.

These external websites may collect data about you, use cookies, embed third-party tracking, and monitor your interaction with their content—especially if you are logged in to their service (e.g., YouTube, Instagram, or Facebook).

Who we share your data with

We only share your data with trusted third-party services essential for operating our business, such as:

• Payment Processors (e.g., Stripe, PayPal)

• Email Marketing Tools (e.g., Mailchimp, Klaviyo)

• Shipping and Fulfilment Partners

• Analytics Providers (e.g., Google Analytics)

• Spam detection services (e.g., Akismet)

If you request a password reset, your IP address will be included in the reset email for security..

How long we retain your data

f you leave a comment, the comment and its metadata are retained indefinitely to allow automatic approval of follow-ups.

For registered users, we store the personal information you provide in your profile. All users can see, edit, or delete their personal info at any time (except for their username). Site administrators can also access and edit this information.

For customers, we retain order and billing information for at least 6 years, as required by UK tax and legal regulations.

What rights you have over your data

You have the right to:

• Access the personal data we hold about you

• Request correction of any inaccurate information

• Request deletion of your personal data (excluding data we must retain for legal, administrative, or security purposes)

• Request a copy of your data in a portable format

To exercise your rights, please contact us at [email protected].

Where your data is sent

Visitor comments may be checked through an automated spam detection service.

Your data may also be transferred and stored outside the UK or European Economic Area (EEA) when processed by third-party services. We ensure that adequate protections (such as Standard Contractual Clauses) are in place when this occurs.

Legal Basis for Processing

Under the UK GDPR, we rely on the following lawful bases:

• Consent – e.g., for email marketing

• Contract – e.g., fulfilling a subscription or processing an order

• Legal obligation – e.g., tax reporting

• Legitimate interests – e.g., improving site performance or preventing fraud