Legal
Last updated: 18 March 2026
No Ordinary Family Ltd (trading as Dot & Lola) (“Dot & Lola”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect personal information submitted through our trade enquiry form at www.dotandlola.co.uk and our trade portal at trade.dotandlola.co.uk.
We are the data controller for the personal data we collect. This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy or wish to exercise your rights, please contact us at [email protected].
When you submit a trade enquiry through our website, we collect the following personal data:
We do not collect any special category data (such as health information, ethnic origin, or political opinions) through this form. We do not collect payment card details through this website.
We use the personal data you provide for the following purposes:
Responding to your trade enquiry
Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR) — it is in our legitimate interest to respond to business enquiries submitted to us
Sending you a free sample kit if requested
Legal basis: Performance of a pre-contractual step (Article 6(1)(b) UK GDPR)
Following up on your enquiry and providing trade pricing information
Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR)
Sending trade newsletters or product updates (only if you have opted in)
Legal basis: Consent (Article 6(1)(a) UK GDPR)
We will never sell your personal data to third parties, and we will never use it for purposes that are incompatible with those listed above.
Your personal data is shared only with the following third-party service providers, who process it on our behalf under data processing agreements:
We do not transfer your personal data outside the United Kingdom or European Economic Area unless appropriate safeguards are in place (such as standard contractual clauses). Formspree is a US-based service; data transfers are covered by their compliance with applicable international transfer mechanisms.
We retain personal data submitted through the enquiry form for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. In practice:
You may request deletion of your data at any time by contacting us at [email protected].
Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:
Right of access
You may request a copy of the personal data we hold about you.
Right to rectification
You may ask us to correct inaccurate or incomplete data.
Right to erasure
You may ask us to delete your personal data where there is no compelling reason for us to continue processing it.
Right to restrict processing
You may ask us to restrict how we use your data in certain circumstances.
Right to data portability
You may ask us to provide your data in a structured, machine-readable format.
Right to object
You may object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds.
Right to withdraw consent
Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.
We use cookies on this website in accordance with the Privacy and Electronic Communications Regulations (PECR) and the UK GDPR. A cookie is a small text file stored on your device when you visit a website. We use the following categories of cookie:
When you first visit the site, a cookie consent banner will ask for your preferences. You can accept all cookies, reject non-essential cookies, or manage your preferences individually. You may change your cookie preferences at any time by clicking “Cookie Settings” in the footer of any page.
Your cookie preferences are stored in your browser's local storage and are not transmitted to our servers.
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. All data submitted through our enquiry form is transmitted over an encrypted HTTPS connection. We review our security practices regularly.
We may update this privacy policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or trade portal after any changes constitutes acceptance of the updated policy.
If you have any questions, concerns, or requests relating to this privacy policy or the way we handle your personal data, please contact us:
We use cookies
We use essential cookies to make this site work. With your consent, we may also use analytics cookies to understand how you use our site and improve your experience. We never use advertising or tracking cookies without your explicit consent. Read our privacy policy for full details.