Privacy Policy

Last updated: 9 June 2026

Welcome to the Nina Murati and Hepburn website, operated by Gill International Ltd ("we", "us", "our"). Gill International Ltd is a company incorporated in England and Wales with company number 09921940, having its registered office at 68A Boston Road, Leicester, LE4 1AW.

We are the controller and are responsible for your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you interact with our website: https://ninamurati.com ("Site"). Please read this policy carefully together with any other privacy notices we may provide on specific occasions.

1. The Data We Collect About You

Personal data means any information about an individual from which that person can be identified. We may collect and process the following categories of personal data:

Information you provide directly

Identity Data: your name, username or similar identifier, title.
Contact Data: billing and delivery address, email address, telephone numbers, company details.
Correspondence records: emails, messages, or enquiries you submit to us.
Account Data: information provided when registering for a wholesale account.
Order Data: details of orders placed through the Site, including delivery addresses and order history. All orders are invoiced separately by Gill International Ltd; no payment card data is collected through this Site.

Data we collect automatically

Technical Data: IP address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this Site.
Usage Data: details of your visits to our Site including traffic data, pages viewed, page response times, and browsing patterns.

Data from third parties

Technical Data from analytics providers such as Google (based outside the UK/EU).

We do not collect any Special Categories of Personal Data about you (including details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health information, or genetic and biometric data).

2. How We Collect Your Data

Direct interactions

You may give us your personal data by filling in forms on our Site or by corresponding with us by email or otherwise. This includes data you provide when you register for a wholesale account, submit an enquiry, request marketing communications, or contact us.

Automated technologies

As you interact with our Site, we automatically collect Technical Data and Usage Data about your equipment, browsing actions, and patterns. We collect this data using cookies, server logs, and similar technologies.

3. How We Use Your Personal Data

We will only use your personal data when the law allows us to. The lawful bases we rely on are:

Performance of Contract: where processing is necessary to manage your wholesale account, process your order request, and fulfil our obligations to you.
Legitimate Interests: where it is necessary for our legitimate business interests (such as improving our Site, preventing fraud, and administering our business) and your interests and rights do not override those interests.
Legal Obligation: where processing is necessary to comply with a legal or regulatory requirement.
Consent: we will obtain your consent before sending you direct marketing communications. You may withdraw consent at any time by contacting us at hello@ninamurati.com.

Purposes for which we use your data

To register and manage your wholesale account (Identity, Contact Data — Performance of Contract).
To process your order requests and arrange fulfilment (Identity, Contact, Order Data — Performance of Contract).
To manage our relationship with you, including notifying you of changes to our terms or policy (Identity, Contact Data — Performance of Contract, Legal Obligation).
To send you marketing communications, where you have opted in (Identity, Contact Data — Consent).
To administer and improve our Site, including troubleshooting and analysis (Technical, Usage Data — Legitimate Interests).
To comply with legal and regulatory obligations, including HMRC requirements (all relevant data — Legal Obligation).

Marketing

We will only send you marketing communications where you have given your consent. You may opt out at any time by clicking the unsubscribe link in any marketing email or by contacting us at hello@ninamurati.com. Opting out of marketing will not affect service communications such as order updates.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyse traffic, and improve our Site. Cookies are small files placed on your device that help us distinguish you from other users.

Types of cookies we use

Strictly Necessary Cookies: essential to the operation of the Site, supporting functions such as logging in and your account.
Analytics Cookies: help us understand how you use the Site so we can improve it. These require your consent before being set.
Functionality Cookies: enable additional functions such as personalisation and saved preferences.
Targeting Cookies: help us understand when and how you visit the Site and make our content more relevant to you. These require your consent before being set.
Third Party Cookies: placed by third parties that provide services to us, such as analytics providers.

When you first visit the Site, you will be asked to consent to non-essential cookies. You can manage or withdraw your consent at any time via the cookie settings on the Site, or through your browser settings. Please note that disabling cookies may affect the functionality of our Site.

5. Google Analytics

We use Google Analytics to understand how users interact with our Site. Google collects data such as pages visited, time spent on the Site, device type, and IP address. Google may use this data to contextualise and personalise ads within its own advertising network. Google is based outside the UK/EU; see Section 8 below for how we handle international transfers.

For more information, see Google's Privacy Policy. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.

6. How We Store and Protect Your Data

We store your personal data in the following systems:

Our Shopify-hosted website and its secure database, which also handles transactional email communications such as order confirmations and account notifications.
Unleashed Software, our inventory management platform.
Xero, our accounting platform, used to manage invoicing and order fulfilment.

We have put in place appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, accessed without authorisation, altered, or disclosed. Access to your personal data is limited to those with a business need to know, and they are subject to a duty of confidentiality. We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.

7. Data Retention

We will not keep your personal data for longer than is necessary for the purposes for which it was collected, or for longer than is required to meet our legal, accounting, or regulatory obligations. Our standard retention periods are as follows:

Active trade account data: held for the duration of the account relationship.
Closed or lapsed trade account data and order records: retained for 6 years after the last transaction, in line with HMRC financial record-keeping requirements.
Unapproved trade account applications: retained for up to 12 months, after which they are deleted.
Marketing preferences and consent records: held until consent is withdrawn, after which they are deleted promptly.
Website analytics data: retained for up to 26 months.
General correspondence: retained for up to 3 years.

We may retain personal data for longer in the event of a complaint or if we reasonably believe there is a prospect of litigation. In some circumstances we may anonymise your data for research or statistical purposes, in which case we may use it indefinitely.

You can ask us to delete your data by contacting us at hello@ninamurati.com.

8. International Data Transfers

Some of our third-party service providers (including Google Analytics) are based outside the UK and European Economic Area (EEA). Whenever we transfer personal data outside the UK or EEA, we ensure that an equivalent level of protection is applied by using one or more of the following safeguards:

Transferring only to countries deemed to provide an adequate level of protection by the UK Government or the European Commission.
Using contracts approved by the relevant authority, such as the UK's International Data Transfer Agreement (IDTA) or the European Commission's Standard Contractual Clauses.
Where providers are based in the USA, transferring data to companies certified under the EU-US Data Privacy Framework.

Please contact us if you would like further information about the specific safeguards used for any particular transfer.

9. Third-Party Links

Our Site may contain links to third-party websites. Those sites operate under their own privacy policies and we are not responsible for their content or data handling practices. We recommend reviewing their privacy policies before submitting any personal data.

10. Disclosures of Your Personal Data

We may share your personal data with third parties in the following circumstances:

Service providers and sub-contractors who process data on our behalf (including our website host, inventory management, and accounting platforms), who are only permitted to process your data in accordance with our instructions.
Analytics providers such as Google, to help us improve and optimise our Site.
Any third party to whom you have asked us to disclose your data.
A prospective buyer in the event that we sell or transfer all or part of our business or assets.
Regulators, law enforcement agencies, or other authorities where we are required to do so by law.

11. Your Legal Rights

Under UK GDPR and, where applicable, EU GDPR, you have the following rights in relation to your personal data:

Right of Access: to request a copy of the personal data we hold about you.
Right to Rectification: to request that we correct inaccurate or incomplete data.
Right to Erasure: to request that we delete your personal data in certain circumstances.
Right to Restrict Processing: to request that we restrict processing of your data in certain circumstances.
Right to Data Portability: to receive your personal data in a commonly used, machine-readable format.
Right to Object: to object to processing based on legitimate interests, including for direct marketing.
Right not to be subject to automated decision-making: including profiling, where it produces legal or similarly significant effects.

You will not usually have to pay a fee to exercise these rights. We may need to verify your identity before processing a request. We aim to respond to all legitimate requests within one month, though complex requests may take longer.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk). We would appreciate the opportunity to address your concerns directly first.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page. Where changes materially affect how your data is used, we will notify you by email where possible. We recommend checking this page periodically.