PEARLS OF SCOTLAND

Privacy Policy

Version 1.1 | Last updated: August 23, 2026

1. Who we are

Pearls of Scotland
Kievitstraat 10
1221 KZ Hilversum
The Netherlands
Chamber of Commerce (KVK): 32113889
VAT identification number: NL001972710B78
Email: info@pearlsofscotland.com

For the purposes of applicable data protection law, Pearls of Scotland is generally the data controller for personal information processed in connection with our website and online store, except where a service provider acts as an independent controller for its own processing.

2. Personal information we collect

Depending on how you use our services, we may collect contact and delivery details, account information, order and transaction information, communications, device and browser information, IP address, website usage information, marketing preferences and information required to prevent fraud and secure the store.

3. How we collect information

We collect information directly from you, when you create an account, place an order, subscribe to our newsletter or contact us; automatically through website technologies; and through service providers that support our website, payments, fulfilment, delivery and marketing.

4. How we use personal information

• to operate our webshop and customer accounts;

• to process orders, payments, production, fulfilment and delivery;

• to provide customer service and handle returns, refunds and complaints;

• to send transactional communications;

• to send newsletters and marketing communications where permitted;

• to measure and improve our website and marketing where permitted;

• to prevent fraud and maintain security;

• to comply with legal, tax and accounting obligations; and

• to establish, exercise or defend legal claims.

5. Legal bases

Where the GDPR or UK GDPR applies, we rely on appropriate legal bases including performance of a contract, compliance with legal obligations, legitimate interests and consent. Where processing depends on consent, you may withdraw that consent at any time without affecting processing already carried out lawfully.

6. Shopify

Our online store is operated through Shopify. Shopify provides ecommerce functionality, hosting, checkout, customer accounts, security and related services and may process personal information in accordance with its own privacy documentation and contractual arrangements.

7. Gelato and fulfilment providers

We use Gelato and other fulfilment and logistics providers to produce and deliver certain products. Where necessary to fulfil an order, we may provide information such as your name, delivery address, email address, telephone number, order details and product information.

8. Mollie and PayPal

Payments may be processed by Mollie or PayPal. These providers may process personal and transaction information for payment processing, fraud prevention, security, regulatory compliance and related financial services under their own privacy arrangements.

9. Facebook, Instagram and Meta advertising

Pearls of Scotland uses or may use Facebook and Instagram services provided by Meta for product promotion, shopping features and advertising. Depending on our Shopify configuration, Meta advertising technologies may include the Meta Pixel and/or Conversions API to measure advertising performance, website interactions, purchases and conversions and to support relevant advertising.

Depending on the selected Meta data-sharing level, information shared with Meta can include browsing behaviour and, at higher sharing levels, information such as name, location, email address and telephone number for matching and measurement purposes.

For visitors in regions where prior consent is required, including the EEA and UK, non-essential marketing and analytics technologies must not be activated for those purposes until the required consent has been obtained. We configure Shopify customer privacy settings and relevant pixels or integrations to respect applicable consent choices.

10. Google Search Console

We use Google Search Console to monitor and improve the technical performance and visibility of our website in Google Search. We do not currently use Google Ads. If we introduce additional Google advertising or analytics services, this policy and our consent configuration will be updated where required.

11. Newsletter

You may voluntarily subscribe to the Pearls of Scotland newsletter. We use your email address and, where provided, your name to send newsletters and marketing communications in accordance with applicable law. You can unsubscribe at any time using the unsubscribe mechanism in our emails. Transactional emails relating to orders or accounts may still be sent.

12. Cookies, pixels and consent

Our website uses cookies and similar technologies. Some are necessary for operation, security, checkout and account functionality. Other technologies may be used for analytics, preferences, personalisation or advertising.

In regions requiring opt-in consent, non-essential data collection for marketing, analytics or personalisation is activated only after the relevant consent is obtained. Shopify's cookie banner and customer privacy settings can govern Shopify cookies and Shopify Pixels. If third-party or manually installed pixels are used, they must also be configured to honour the customer's consent choices.

Customers can change available cookie preferences through the consent controls provided on the store where this functionality is available.

13. Customer accounts

If you create a customer account, we process information necessary to provide account functionality, which can include your name, email address, saved addresses, order history and preferences. You may request deletion of your account subject to information we are legally required or permitted to retain.

14. Who we share information with

We may share personal information where necessary with Shopify, Gelato and other fulfilment partners, shipping providers, Mollie, PayPal, Meta, newsletter or communication providers, technology providers, professional advisers, authorities where legally required and other service providers necessary to operate our business.

We do not sell personal information as a standalone commercial product. Certain privacy laws use broader definitions of 'sale' or 'sharing' in the context of targeted advertising; where those laws apply, we provide the rights and opt-out mechanisms required by law.

15. International transfers

Some service providers operate internationally. Personal information may therefore be processed outside the EEA, United Kingdom or your country of residence. Where required, we rely on recognised safeguards such as adequacy decisions, Standard Contractual Clauses or other lawful transfer mechanisms.

16. Data retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as required by law. Order and financial records may be retained for tax and accounting obligations. Account information may be retained while an account remains active. Marketing information is generally retained while you remain subscribed or until consent is withdrawn, subject to legal requirements.

17. Your privacy rights

Depending on applicable law, you may have rights to access, correct or delete personal information, restrict or object to processing, request portability, withdraw consent and lodge a complaint with a supervisory authority. Some rights are subject to statutory conditions and exceptions.

18. EEA and United Kingdom

If you are in the EEA or UK, GDPR or UK GDPR rights may apply. In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens. UK residents may also complain to the Information Commissioner's Office.

19. Other jurisdictions

Depending on where you live, additional privacy rights may apply. We will comply with mandatory privacy requirements applicable to our processing.

20. Children's privacy

Our services are not specifically directed at children. We do not knowingly collect personal information from children where doing so is prohibited by applicable law.

21. Security

We use reasonable technical and organisational measures to protect personal information. No internet transmission or storage system can be guaranteed to be completely secure.

22. Third-party websites

Our website may contain links to third-party websites. Those websites operate under their own privacy policies and terms, and Pearls of Scotland is not responsible for privacy practices of websites we do not control.

23. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technologies, suppliers, legal requirements or business practices. The last-updated date will be changed when the policy is revised.

24. Contact

Pearls of Scotland
Kievitstraat 10
1221 KZ Hilversum
The Netherlands
Chamber of Commerce (KVK): 32113889
VAT identification number: NL001972710B78
Email: info@pearlsofscotland.com