Enesco Limited Website Privacy Notice

 

Purpose

Enesco Limited known as Enesco or the Company respects your privacy and is committed to protecting your personal data. This privacy notice will inform you as to how we process your personal data on our website where you are a customer, supplier of services or a visitor on our website. This privacy notice also tells you about your privacy rights pursuant to Data Protection Laws such as the UK Data Protection Act 2018, the General Data Protection Regulation (UK GDPR) and the EU GDPR.

For the purposes of this privacy notice, “Data Protection Laws” means applicable data protection legislation including the UK Data Protection Act 2018, the UK GDPR and where applicable the EU GDPR.

Your visit to https://beatrixpottergiftsbyenesco.co.uk/ (the "Site") and your use of any of the services or features we provide is subject to our Terms & Conditions of which this privacy notice forms part. This privacy notice does not cover information that you submit on other websites even if we communicate with you on those websites.

What we do

Beatrix Potter Gifts by Enesco (https://beatrixpottergiftsbyenesco.co.uk/) is a UK-based direct-to-consumer (D2C) ecommerce website operated by Enesco, a distributor and manufacturer of licensed giftware, collectables, home décor, figurines, plush toys, stationery, seasonal products, candles, and related consumer products.

The website enables consumers to browse, purchase and receive a wide range of giftware, collectables, home décor, home fragrance products, plush toys, seasonal products and licensed merchandise from Enesco-owned and distributed brands.

The website provides the following services:

  • Online ecommerce platform allowing customers to browse products and place orders.
  • Product information and catalogues including product descriptions, imagery, availability, pricing and promotional content.
  • Customer account creation and management.
  • Secure online checkout and payment processing.
  • Order fulfilment and delivery services.
  • Order tracking and customer service support.
  • Product reviews and ratings.
  • Email newsletter subscriptions and marketing communications.
  • Wishlist and account features where enabled.
  • Promotional campaigns, discount codes and special offers.
  • Customer loyalty and rewards programmes where applicable.
  • Customer contact forms and support enquiries.

The website is intended for general consumers and gift purchasers. Products are marketed primarily to adults including gift buyers, collectors and enthusiasts of licensed brands and collectable products. The website is not specifically directed at children and we do not knowingly collect personal data from children.

Controller for personal data

A “controller” is a person or organisation who alone or jointly determines the purposes for which and the way any personal data is or is likely to be processed. Unless we notify you otherwise Enesco is the controller of your personal data for the purpose of this website.

Enesco is a company incorporated in England and Wales with company registration number 2137296, VAT number GB 473 223 852 and whose registered office is located at Brunthill Road, Kingstown, Carlisle, Cumbria, CA3 0EN, United Kingdom.

Scope

This privacy notice applies to the processing of personal data by us in connection with:

  • Customers: where you purchase products or services from us through the website.
  • Suppliers: where individuals act on behalf of organisations providing services or products to us including technology providers, logistics providers and professional advisers.
  • Website visitors: anyone browsing our website or interacting with our content online.

Types of personal data

Personal data or personal information means any information about an individual from which that person can be identified. It does not include data where the identity has been removed. This is known as anonymised data. Anonymised data falls outside the scope of Data Protection Laws.

Enesco may collect, use, store and transfer different kinds of personal data about you which we have grouped together:

  • Identity Data includes first name, last name, username or similar identifier and title.
  • Contact Data includes billing address, delivery address, email address and telephone numbers.
  • Financial Data includes payment card details and payment information processed through authorised payment providers.
  • Transaction Data includes details about payments to and from you and other transaction details including invoices and information about the products that you have purchased from us.
  • Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plugin types and versions, operating system and platform and other technology on the devices you use to access our website.
  • Profile Data includes your username and password, purchase history, wishlists, loyalty programme participation where applicable, searches made by you, your ratings and comments, preferences, feedback and survey responses and marketing and communications preferences.
  • Usage Data includes information about how you use our website and services.
  • Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
  • Customer Interaction Data includes product reviews, ratings and customer service enquiries submitted through the website.
  • Order Fulfilment Data includes delivery instructions, shipping information and order tracking details.

Aggregated data

We may also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data may be derived from your personal data but is not considered personal data in law where it does not directly or indirectly reveal your identity. If we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you we treat the combined data as personal data which will be used in accordance with this privacy notice.

Failure to provide personal data:

Where we need to collect personal data by law or under the terms of a contract we have with you and you fail to provide that data when requested we may not be able to perform the contract we have or are trying to enter into with you (for example to provide you with goods or services). In this case we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.

Lawful bases: How we use your personal data

Enesco will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Consent: we do not generally rely on consent as a legal basis for processing your personal data other than in relation to sending third party direct marketing communications to you via email or text message or placing nonessential cookies on your device. Where we rely on consent you have the right to withdraw consent at any time.
  • Performance of a contract: where we need to perform the contract, we are about to enter into or have entered into with you.
  • Legal obligation: where we need to comply with a legal obligation for example for record keeping purposes under our statutory obligation.
  • Vital interests: where it is necessary to protect your vital interests in case of emergencies.
  • Public obligation: Where we need to comply with a public obligation.
  • Legitimate interests: where it is necessary for our legitimate interests or those of a third party and your interests and fundamental rights do not override those interests. When we rely on legitimate interests we ensure we consider and balance any potential impact on you (both positive and negative) and your rights before processing your personal data.

How we collect your personal data

Directly from you

You give us your personal data in your direct interactions with us including:

  • filling in forms on our website
  • creating a customer account
  • placing an order
  • subscribing to newsletters
  • leaving ratings and reviews
  • participating in promotions or loyalty programmes
  • corresponding with us by email, post or telephone.


Third-party sources

We may receive personal data from service providers supporting our website from the following categories below:

To administer our ecommerce platform

For order and marketplace management

For contact forms

For Wishlist functionality

For email marketing

For product reviews

For loyalty programmes

For promotional campaigns

For product availability notifications

Happy Birthday marketing automation


Automatically collected information

When you visit our website we may automatically collect technical information including the Internet Protocol address used to connect your computer to the internet, login information, browser type and version, time zone setting, browser plugin types and versions, operating system and platform.

We may also collect information about your visit including the full URL clickstream to, through and from our website including date and time, products viewed or searched for, page response times, download errors, length of visits to certain pages and page interaction information.

When you visit our website or interact with emails or advertisements we may automatically collect certain information using online tracking technologies such as pixels, web beacons and cookies.

Processing Tables

The processing tables below explain how and why we process personal data depending on your relationship with us. They set out the processing activity we carry out, the categories of personal data involved and the lawful basis we rely on under Data Protection Laws.

You may fall within more than one category depending on your relationship with Enesco.

Customer: Processing Information

The table below explains how we process personal data when you interact with us as a customer, including the types of personal data involved and the lawful bases we rely on for each processing activity.

Processing activities

Categories of personal data

Lawful basis

To create and manage customer accounts

Identity Data, Contact Data

Performance of a contract

To process orders and payments

Identity Data, Contact Data, Financial Data, Transaction Data

Performance of a contract

To manage deliveries and order fulfilment

Identity Data, Contact Data, Transaction Data

Performance of a contract

To respond to enquiries and provide customer support

Identity Data, Contact Data

Legitimate interests to respond to customer enquiries and provide support

To administer and protect our business and website including troubleshooting, data analysis, testing, research, statistical and survey purposes

Identity Data, Contact Data, Technical Data

Legitimate interests to operate and secure our website and services; Legal obligation

To improve our website including ensuring that content is presented effectively and enabling interactive features

Technical Data, Usage Data

Legitimate interests to improve website functionality and user experience


Supplier: Processing Information

The table below sets out how we process personal data where you act as a supplier or service provider to us, including the types of personal data processed and the lawful bases we rely on for these activities.

Processing activities

Categories of personal data

Lawful basis

For you to provide services or products to us

Identity Data, Contact Data

Performance of a contract

To manage supplier relationships and communications

Identity Data, Contact Data

Legitimate interests to manage supplier relationships and communications

To administer contracts and payments

Identity Data, Contact Data, Financial Data

Performance of a contract


Website visitor: Processing Information

The table below explains how we process personal data when you visit or interact with our website, including prospective customer browsing our site. It includes the categories of personal data involved and the lawful bases we rely on for these processing activities.

Processing activities

Categories of personal data

Lawful basis

When you contact us via our website or forms

Identity Data, Contact Data

Legitimate interests to respond to enquiries submitted through the website

To manage our relationship with you including notifying you about changes to our terms or privacy notice

Identity Data, Contact Data

Legitimate interests to keep users informed about important updates

To administer and protect our website including troubleshooting, testing and system maintenance

Identity Data, Contact Data, Technical Data

Legitimate interests to maintain security and functionality of the website; Legal obligation

To use analytics and advertising technologies to improve our website and measure effectiveness of advertising

Technical Data, Usage Data

Legitimate interests to analyse website use and improve our services

Use of nonessential cookies where consent is required

Technical Data

Consent


Cookies and similar technologies

Enesco gathers information and statistics collectively about visitors to our website. Analysis of this information demonstrates the most frequently used sections of the website and assists us in continually improving the online service.

  • We use analytics providers to analyse website traffic and usage patterns and help us improve the performance and functionality of the website.
  • We may also use advertising technologies from third party service providers to support us with advertising and content. 

Where required by law we will request your consent before placing nonessential cookies on your device. You can manage your cookie preferences through the cookie controls available on our website. Please refer to our Cookie Cookies banner for further information.

Currency conversion on site

Our website may use currency conversion services which process your IP address in order to determine your location and display prices in your local currency. This information may be stored temporarily in a session cookie so that the selected currency remains consistent while browsing our website.

Marketing communications

Enesco may send you marketing communications. You have the right to object to processing of your personal data for direct marketing purposes.

  • You can unsubscribe from receiving marketing communications from us by using the unsubscribe methods contained in communications we send to you or by contacting us.
  • Where you opt out of receiving marketing communications this will not apply to personal data provided to us as a result of registering for or using our services.


How We Disclose Personal Information

In certain circumstances we may disclose your personal information to third parties for contract fulfilment purposes, legitimate purposes and other reasons subject to this privacy notice.

We require all third-party service providers to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

We may share personal data with the following categories of recipients:

  • Employees and contractors: personal data may be accessed by our employees, agents and contractors who require access on a need-to-know basis in order to provide services and operate our business
  • Group companies: including our parent undertaking and subsidiary undertakings (as defined in sections 1161 and 1162 of the Companies Act 2006) for internal administration, business operations and group management.
  • Service providers: technology providers and other suppliers who support the operation of our website, ecommerce platform, marketing tools, customer engagement services and IT systems.
  • Logistics & delivery providers: courier and shipping partners who process delivery information in order to fulfil and deliver orders to customers.
  • Payment service providers and financial institutions: providers such as Shopify Payments, PayPal, Klarna and Apple Pay who process payment transactions securely on our behalf.
  • Advertising, analytics and embedded content providers: organisations that support analytics, advertising, marketing performance measurement and embedded media content on our website.
  • Professional advisers: including bankers, auditors, insurers, accountants and legal advisers who provide professional services to us and assist with legal, financial and regulatory matters.
  • Fraud prevention organisations: companies and organisations who assist with fraud prevention, security monitoring and credit risk management.
  • Regulators and supervisory authorities: government bodies, regulators or law enforcement authorities where disclosure is necessary to comply with legal or regulatory obligations
  • Business transaction partners: third parties involved in potential or actual mergers, acquisitions, financing arrangements or business reorganisations where personal data may form part of the transferred business assets.

Further information: payment methods

In order to offer certain payment methods we may pass your personal data in the form of contact and order details to third party finance providers who can assess whether you qualify for their payment methods and tailor those payment methods for you. Personal data transferred to finance providers are processed in accordance with their own privacy notice.

International transfers for UK/EU

The data that we collect from you may be transferred to and stored at a destination outside of the United Kingdom.

  • It may also be processed by staff working outside of the UK who work for our parent company Enesco LLC or for one of our suppliers or service providers. Such staff may be engaged in the fulfilment of orders, processing payments, providing support services or reviewing financial reports.
  • Whenever we transfer personal data outside the UK or EU we ensure that appropriate safeguards are implemented such as adequacy decisions or the use of approved standard contractual clauses.

Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Access to personal data is limited to employees, agents, contractors and other third parties who have a business need to know. The transmission of information via the internet is not completely secure. Although we take reasonable measures to protect your personal data we cannot guarantee the security of data transmitted via the website.

Data retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for including satisfying legal, accounting or reporting requirements.

To determine the appropriate retention period for personal data we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and applicable legal requirements. By law we may retain basic customer information including contact and identity information and transaction data for six years after customers cease being customers for tax purposes.

Thirdparty websites

Our website may contain links to thirdparty websites. These websites have their own privacy policies and we do not accept any responsibility or liability for their policies.

Data Subject Rights

Under certain circumstances, you have rights under Data Protection Laws. Not all rights are absolute and depending on where you are located, not all rights are given to you. You can:

  • Request access to your personal data: This is known as a "subject access request" and enables you to receive a copy of the personal data we hold about you.
  • Request correction of your personal data: This enables you to have any incomplete or inaccurate information we hold about you corrected.
  • Request erasure of your personal data: This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. We may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you at the time of your request.
  • Object to processing of your personal data: This is where we are processing your personal data based on a legitimate interest or those of a third party and you may challenge this. However, we may be entitled to continue processing your information based on our legitimate interests or where this is relevant to any legal claims. See also Marketing communications.
  • Request restriction of processing your personal data: This enables you to ask us to suspend the processing of your personal data in some circumstances.
  • Request transfer of your personal data (“data portability”): This is where in some circumstances we will provide to you or a third party you have chosen your personal data in a structured, commonly used, machine-readable format.
  • Right to withdraw consent: This is where we are relying on consent to process your personal data. This will not affect the lawfulness of any processing carried out before you withdraw your consent. Depending on the processing activity, we may not be able to provide certain services to you if you withdraw your consent. We will advise you if this is the case at the time you withdraw your consent.
  • Automated decision-making: This is where decisions are made about you by automated means. We do not carry out automated decision-making. We do not currently use artificial intelligence systems to make automated decisions about individuals in connection with this website.

Carrying out your data subject rights

You will not have to pay a fee to access your personal data or to exercise any of the other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information or to exercise any of your other rights. This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

If you wish to exercise any of the rights set out above, please contact us at privacy@enesco.co.uk.

Keeping personal data accurate and current

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Concerns and complaints

We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance. You have the right to complain to the Information Commissioner’s Office (ICO).

You may also lodge a complaint with a supervisory authority if you live or work outside the UK or you have a complaint concerning our personal data processing activities.

Changes to our privacy notice

We encourage you to review this notice periodically to stay informed about how we process your personal data.

This privacy notice may be updated from time to time in response to legal, technical or business developments. We will take appropriate measures to inform you when we update our privacy notice such as publishing the updated version on our website and updating the “version control” date at the end of this notice. Where required by applicable Data Protection Laws, we will obtain your consent to any material changes to this privacy notice.

Contact us

Email: privacy@enesco.co.uk

Postal Address: Brunthill Road, Kingstown. Carlisle. Cumbria. CA3 0EN. United Kingdom

Version control

This version was last updated in August 2026