Cashmere Lovers Club respects your privacy. This Privacy Policy explains how we collect, use, store and protect personal data when you visit our membership portal, register as a member, subscribe to newsletters or use our services.
Cashmere Lovers Club is operated by Cashmere House Limited, a company registered in Ireland. We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Irish data protection legislation.
The controller responsible for the processing described in this policy is:
This policy applies to Cashmere Lovers Club, including membership administration, newsletters, member benefits, content and activities in the membership portal.
When you purchase products from the online store, the store's privacy information also applies. If another business is responsible for a purchase or service, this will be clearly stated when you place your order.
When you register, update your profile or contact us, we may process:
Required fields are marked during registration. If you do not provide necessary information, we may be unable to create your membership or provide the relevant service.
We may process information about:
Payments are handled through our payment providers. The payment information we receive depends on the payment solution used in each region.
When you use Cashmere Lovers Club features, we may record:
If a contribution is to be published with your name or other identifying information, we will inform you before publication and establish any necessary permission.
When you visit the membership portal, we may process:
If you consent to optional analytics tools, we may also collect information about how you use the portal.
Where necessary to administer your membership, we may receive information from connected systems, such as Shopify and our newsletter provider, Mailchimp. This may include a customer reference, payment status, relevant order information and newsletter subscription status.
We use necessary information to create your membership account, verify logins, display your membership status and provide access to member benefits.
Legal basis: Performance of the membership agreement.
We use relevant information to record payments, administer membership periods and send membership gifts where these are included in your membership.
Legal basis: Performance of the agreement and compliance with legal obligations where applicable.
We use information about favourites, votes and other choices to provide the portal features you use and administer participation in accordance with the membership terms.
Legal basis: Performance of the membership agreement where processing is necessary for the relevant feature.
We may use your country of residence, membership level and language selection to display relevant information and available member benefits. The use of this information for marketing is subject to the rules below.
Legal basis: Performance of the agreement where tailoring is necessary for the service, or our legitimate interest in making the membership portal relevant and user-friendly.
We may send information about payments, membership status, security, changes to terms and other matters necessary for your membership.
Legal basis: Performance of the agreement, compliance with legal obligations or our legitimate interest in ensuring proper operation.
We send newsletters, offers and other electronic marketing where you have consented or another lawful basis permits this. Membership does not automatically constitute consent to marketing. You can unsubscribe at any time using the link in our emails or by contacting us.
Legal basis: Consent where required. Any exceptions for existing customer relationships are used only where the applicable conditions are met.
We use subscribers’ names and email addresses to create a Newsletter Member profile and a basic customer record so they can access the portal.
Legal basis: Legitimate interest.
We use contact details and messages to answer questions and help you with your membership.
Legal basis: Performance of the agreement or our legitimate interest in responding to enquiries.
We use necessary technical information to protect accounts, investigate errors and prevent unauthorised access or misuse.
Legal basis: Our legitimate interest in operating a secure and reliable membership portal.
We process information where necessary to comply with legal requirements, including accounting and record-keeping requirements.
Legal basis: Compliance with a legal obligation.
Cashmere Lovers Club distinguishes between membership registration, access to the membership portal and consent to marketing.
Newsletter subscribers are registered as Newsletter Members using the name and email address held by our newsletter provider, including a basic customer record in our online store so they can log in. No message is sent and marketing consent is not changed. If you unsubscribe, your newsletter status is removed; your profile is not deleted automatically, and you can ask us to delete it at any time.
Registration does not authorise the use of their information for new marketing purposes without a valid legal basis.
Access to the membership portal requires the applicable login or verification process.
Unsubscribing from marketing does not automatically terminate a paid membership. You may still receive necessary messages about your membership. You can unsubscribe from marketing under Personal Information in the app.
The membership portal uses or may use cookies and similar technologies for login, security and necessary settings. Optional analytics and advertising technologies are activated only after consent where required.
Our separate Cookie Policy explains the technologies used, their providers, purposes and durations, and how you can manage your choices.
You can reject optional technologies and withdraw consent through the cookie settings. Blocking necessary cookies may affect login and other features.
We may share necessary personal data with providers that assist us with:
Providers acting as processors process data under our instructions and in accordance with data processing agreements.
Some providers may act as independent controllers for parts of their services. In those cases, their privacy information also applies.
Access for staff and partners is limited to what they need for their duties.
Producers and designers do not gain access to the membership register simply because they collaborate with Cashmere Lovers Club.
We may also share data where required by law or necessary to establish, exercise or defend legal claims.
If personal data is transferred or made accessible to recipients outside the European Economic Area (EEA), we ensure that a valid transfer mechanism is in place.
This may be a European Commission adequacy decision or the EU Standard Contractual Clauses, together with any necessary supplementary measures.
Access by staff or partners in countries outside the EEA is also assessed under these rules.
You can contact us for information about relevant transfers and to obtain a copy of the relevant safeguards.
We retain personal data for as long as necessary for the purpose for which it was collected.
Personal data is retained for up to one year, or in accordance with applicable law in the EU and EEA.
When an account is deleted, certain information may be retained to comply with legal obligations or handle legal claims. Backups are deleted or overwritten in accordance with our established procedures.
We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure and loss.
Access is limited to authorised individuals who need the information for their work.
No method of transmission over the internet or electronic storage can be guaranteed to be completely secure.
Subject to the conditions of applicable data protection law, you may have the right to:
You can object at any time to the use of your personal data for direct marketing.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
You can contact us at privacy@cashmerehouse.no or use the privacy features in your membership profile where available.
We may request information necessary to verify your identity. We normally respond within one month. If a permitted extension is necessary, we will inform you of the extension and the reasons within the first month.
You have the right to complain to the Data Protection Commission in Ireland at dataprotection.ie, or to the relevant supervisory authority where you live or work. Users in Norway may contact Datatilsynet at datatilsynet.no.
We do not use your personal data for decisions based solely on automated processing that produce legal effects or similarly significantly affect you.
Automatic updates to membership status following payment are used to administer membership. If you believe your status is incorrect, you can contact us for review.
You must be at least 18 years old to become a member of Cashmere Lovers Club.
If you believe a child has registered or provided us with personal data contrary to the applicable age requirements, please contact us. We will investigate and take any necessary action.
The membership portal may contain links to online stores, producers, designers and other websites.
These websites have their own privacy policies. We recommend reading them before providing personal data.
We may update this Privacy Policy following changes to the membership portal, our services or applicable legal requirements.
The current version is published with an updated date. For material changes, we provide additional information and obtain fresh consent where necessary.
If you have questions about this Privacy Policy or wish to exercise your rights, you can contact: