Legal
Privacy policy
This policy explains what personal data we collect when you visit or buy from us, why we use it, and the rights you have under UK data protection law.
1. Who we are
[LEGAL NAME LTD] (trading as [BRAND], "we", "us", "our") operates [WEBSITE]. We are the data controller for the personal data described here.
- Registered address: [LEGAL ADDRESS]
- Company number: [COMPANY NUMBER]
- Contact for privacy matters: [EMAIL], or by phone on [PHONE]
2. What data we collect
- Identity & contact data: name, billing and delivery address, email and phone number.
- Order & payment data: the items you order, your order history and payment confirmation. Card details are handled by our payment provider — we do not store full card numbers.
- Technical data: IP address, device and browser type, and cookie data (see section 9).
- Communications: messages you send us by email, contact form or chat.
- Marketing preferences: whether you have opted in to marketing.
3. Why we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Processing and delivering your order, and managing your account | Performance of a contract |
| Responding to enquiries and providing support | Legitimate interests / contract |
| Sending marketing emails | Consent (or soft opt-in for existing customers) |
| Fraud prevention and site security | Legitimate interests |
| Analytics to improve the website | Consent (via cookies) |
| Meeting our legal and tax obligations | Legal obligation |
4. Who we share it with
We share data only with parties who help us run the business — our payment processor, delivery and courier partners, our website and hosting platform, our email and marketing tools, and our analytics provider. We may also disclose data where we are legally required to, for example in response to a court order or a request from a tax authority. We do not sell your personal data.
5. International transfers
Where a provider stores data outside the UK, we make sure it is protected by an adequacy decision or by appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.
6. How long we keep it
- Order and transaction records: six years, to meet UK tax and accounting rules.
- Account data: while your account is active, then a limited period after closure.
- Marketing data: until you unsubscribe.
- Support messages: kept only as long as needed to help you and keep our records.
7. Your rights
Under UK GDPR you have the right to access your data; correct it; erase it; restrict or object to processing; data portability; and to withdraw consent at any time. To exercise any right, contact us at [EMAIL]. We will respond within one month and may ask you to verify your identity first.
8. Complaints
If you are unhappy with how we handle your data, please contact us first at [EMAIL] and we will investigate. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
9. Cookies
Our website uses cookies. Non-essential cookies, such as analytics and advertising, are only set with your consent through our cookie banner. You can change your preferences at any time.
10. Changes to this policy
We may update this policy from time to time. The "last updated" date above shows the current version, and we will notify you of any material changes on this page or by email.