top of page


This is a data protection statement and privacy policy for Foundation of Colours. Our company number is XXXXXX. Our website address is: XXXXXXX
The data controller is responsible for the data that is collected through the website and the business.
This policy helps explain what data we collect, how we use any personal data that we might collect and how you can update, manage and delete your own data.


Your personal data is precious and if you give it to us you have entrusted us to look after it. We abide by the following principles:

  • We always consider your rights before processing personal data.

  • We gather the minimal amount of data required for processing.

  • We will not store your personal data for longer than needed.

  •  We will do our best to ensure the accuracy of data.

  • We will do our best to ensure the integrity and confidentiality of data.


Information we hold comes from you


Visit our website – this includes information that is automatically stored by cookies, e.g your shopping cart information, your IP address, your shopping history (if any). This information is used to improve your customer experience. When you use our services or look at the contents of our website, your activities may be logged.

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.


This can include your email address, name, billing address, home address etc – largely information that is necessary to deliver a product or service to you.

We also receive personal data when you take part in our surveys and questionnaires.


We gather data from our trusted partners once we have established that they can legally share that information with us. Generally you have supplied the data to them but sometimes they gather information about you on other legal grounds.

We may have reason to gather data about you that is publicly available.

The types of information that we hold

1. We hold data that relates to you personally such as:

  • Personal contact details

  • Demographic information

  • Social media usernames

  • Personal goals/ intentions

  • Internet address (IP addresses are collected in our webserver log files)

  • Materials we have produced for you

  • Digital correspondence with us

2. We also hold information that pertains to your business.


We use your personal data to:

  • Provide our service to you and primarily for billing and administration purposes

  • Enhance your customer experience

  • Identify you

  • Send/ offer you a product

  • Send you personalised offers

  • Provide you with relevant information that may be of use to you or your business

  • Recommend your business to contacts of ours

  • With your permission, ask contacts in our network to connect with you

  • Inform you of our products, services or promotions

  • Ways we may contact you include; email, post, telephone, SMS text message or social media

  • Keep you updated about services that you have subscribed to

  • Administer and analyse our client base (purchasing behaviour and history) so we can improve the quality, variety, and availability of products/ services offered/provided;

We reserve the right to anonymise personal data gathered and to use any such data. We will use data outside the scope of this Policy only when it is anonymised.

We save your billing information and other information gathered about you for as long as needed for accounting purposes or other legal obligations but not longer than 7 years.

We might process your personal data for additional purposes that are not mentioned here, but are compatible with the original purpose for which the data was gathered. However we will inform you of any further Processing and purposes.


We do not share your Personal Data with strangers. Personal information about you is in some cases provided to our trusted partners in order to either make providing the service to you possible or to enhance your customer experience. We share your data with our processing partners.

We only work with processing partners who are able to ensure the adequate level of protection to your Personal Data. We disclose your Personal Data to third parties or public officials when we are legally obliged to do so. We might disclose your Personal Data to third parties if you have consented to it or if there are other legal grounds for it.


  • Drop Box (Privacy Policy)

  • PayPal(Privacy Policy)

In order to provide a robust and reliable service, we depend on a number of cloud service providers to carry out key operations within our business. This includes things like document storage, payment processing, email processing, marketing assistance, social media management and website security.

Whenever we entrust your data with an outsourcing partner, we always carry out thorough due diligence and ongoing monitoring to ensure that appropriate privacy controls are in place and maintained at all times.

The data we collect from you may be transferred to, or stored at a destination outside of the European Economic Area (EEA). We may also hire staff or outsourcing partners who process your data outside of the EEA. In such cases we will share only the minimum data required and ensure sufficient privacy controls are implemented to protect your privacy in accordance with this Privacy Policy.


Your rights are detailed in the GDPR regulations, a summary can be found on the Information Commissioners Office (ICO) website

You have rights under the Data Protection Act 1998, these can also be found on the ICO website

To update your details or to exercise your other rights under these regulations, please provide your request in writing to the registered company address or email xxxxxxxxx. We may require you to provide proof of identification.


Our primary store of your personal information is stored securely on our back up hard drive so if our IT fails we can always get to it.

Your personal information may also be stored in the wider internet under secure cloud-based storage services, such as Dropbox, Google Drive and icloud

We invest in high-quality security to protect your privacy. No information transmission over the internet can be entirely secure, and therefore we cannot guarantee the security of your personal information. Any information that you send is at your own risk. However, once we have received your personal information we use strict procedures to protect the security of your personal information

Any paper copies of your personal information are stored within our premises and are kept with us or stored securely

Laptops and mobile devices are password protected but not necessarily encrypted

Even though we try our best we can not guarantee the security of information. However, we promise to notify suitable authorities of data breaches. We will also notify you if there is a threat to your rights or interests. We will do everything we reasonably can to prevent security breaches and to assist authorities should any breaches occur.


We do not intend to collect or knowingly collect information from children. We do not target children with our services.


We use cookies and/or similar technologies to analyse customer behaviour, administer the website, track users’ movements, and to collect information about users. This is done in order to personalise and enhance your experience with us.

A cookie is a tiny text file stored on your computer. Cookies store information that is used to help make sites work. Only we can access the cookies created by our website. You can control your cookies at the browser level. Choosing to disable cookies may hinder your use of certain functions.

We use cookies for the following purposes:

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Analytics cookies – these cookies are used to track the use and performance of our website and services

Advertising cookies – these cookies are used to deliver advertisements that are relevant to you and to your interests. In addition, they are used to limit the number of times you see an advertisement. They are usually placed to the website by advertising networks with the website operator’s permission. These cookies remember that you have visited a website and this information is shared with other organisations such as advertisers. Often targeting or advertising cookies will be linked to site functionality provided by the other organisation.

You can remove cookies stored in your computer via your browser settings. Alternatively, you can control some 3rd party cookies by using a privacy enhancement platform such as or For more information about cookies, visit

We use Google Analytics to measure traffic on our website. Google has their own Privacy Policy which you can review here. If you’d like to opt out of tracking by Google Analytics, visit the Google Analytics opt-out page.


Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

This version of our privacy and cookie policy was completed on 20 April 2022. We reserve the right to update our privacy policy as the need arises.

bottom of page