While this is possibly the most unglamorous corner of Elsa Rose Boutique, it means a lot to me that you know that your information is safe when you visit my site, visit my social media pages, read my blog or subscribe to my mailing list. I've put together this privacy policy to help you understand how I use and process your data.

On my website

My website is hosted by Squarespace and has a valid SSL certificate. SSL ensures three security benefits:

  • Privacy: Encrypts the connection between the browser and web server and securely transmits information (like login credentials) to prevent unauthorized parties from eavesdropping.
  • Data integrity: Prevents unauthorized parties from altering data during transmission (like during a Form Block submission).
  • Authentication: Protects against impersonation by requiring web server proof of identity.

Quoted from https://support.squarespace.com/hc/en-us/articles/205815898-Squarespace-and-SSL, where you can find out more information about SSL

To help me understand my audience, Squarespace stores data when you visit my site (recorded automatically with cookies, for example), to help me understand how you interact with my site. This data includes your IP address, which provides general location data, for example the country you live in, although is otherwise anonymous. I use this data to see which content is most popular on my site and where my audience is based, which helps me to produce content that is more relevant to you.

All other data is provided by yourself, for example your name and email address when you sign up for my newsletter or submit a contact form, and is therefore provided with your consent. 

You can read Squarespace's privacy policy to find out how and why they use and store your data and how they keep it safe.


Subscribing to my newsletter

I have enabled GDPR friendly forms for all of my mailing lists, which are managed through Mailchimp. You will be requested to consent to your information being processed and, if you choose not to, you will not be subscribed to my mailing list.

The data I collect from sign up forms and contact forms consists of your name and your email address. I do not request any other information, although you may be able to provide your phone number if you choose to when completing a contact form. This is done at your discretion and enables me to communicate with you, for example to arrange an appointment.

I take sign ups very seriously. I state my intentions on all sign up forms so that you know what to expect when you join me. I myself have been the subject of mailing lists that have not met my expectations and so I work hard to make sure that I only share content that you have requested, depending on the form you've completed, and not to overwhelm you or fill your mailbox with junk that will cause you stress or frustration. I also don't believe in hard sells and will never put pressure on you to pay for a product or service from me. I do not pass your details on to colleagues and would never sell your details to another company. You are free to unsubscribe at any time and you'll find a link at the end of each of my emails to update your preferences or unsubscribe.

Read Mailchimp's privacy policy for more information about how your data is processed and stored.


Social Media Channels

You can connect with me on Facebook, Instagram and Pinterest. I am able to see information that you put on your profile if you choose to connect with me, for example your name, website, etc, which is information that you have consented to be made public. In other words, what is visible to anybody who visits your profile.

I use data on Facebook to target my adverts so that I can reach an audience that I feel would benefit from my services. The data I use when creating an audience consists of marital status, age and location, to target my advertising where I feel that it is most appropriate and won't be seen as a nuisance. The data collected by Facebook to enable businesses to target adverts comes from the data you choose to share on your profile, for example your date of birth, your marital status, your location, etc and content that you interact with regularly. I only see who you are if you choose to comment on my advert or post or like my page and I do not have access to any other information unless you choose to share it with me, for example your email address via a message on my page. Facebook enables you to view the data that is stored for your personal profile, download and delete it if you choose.

You can find out how Facebook is complying with GDPR and read Facebook's Privacy Principles for more information about how your data is processed and safeguarded.


Google Analytics

Google Analytics helps me to understand how visitors to my site interact with my content. This enables me to produce more content that is relevant and interesting to you and see how I can improve the functionality of my site.

Read how Google Analytics safeguards your data for more information


This policy will be updated regularly to reflect any changes or introduction of new services.