Legal

Privacy Policy

How we handle your data.

Template — review before going live. This is a general UK/UK-GDPR style draft and is not legal advice. Adjust it to reflect the data you actually collect, your payment and shipping providers, and any analytics you use.

1. Who we are

[COMPANY NAME] LTD (“we”, “us”) operates [website] and is the data controller for personal information collected through this website. You can reach us at [email].

2. What we collect

Order details: name, delivery and billing address, email and phone number.
Payment data: processed securely by our payment provider — we do not store full card numbers.
Account data: if you create an account, your login details and order history.
Technical data: IP address, device and browser information, and cookie data.

3. How we use it

To process and deliver your orders and handle returns.
To respond to your enquiries and provide customer support.
To send order updates and, where you have opted in, marketing messages.
To detect fraud and keep the website secure.
To meet our legal and accounting obligations.

4. Legal bases

We process your data to perform our contract with you (fulfilling orders), to comply with legal obligations, on the basis of your consent (e.g. marketing), and for our legitimate interests in running and improving the shop.

5. Sharing your data

We share data only with the providers needed to run the shop — payment processors, delivery carriers, and IT/hosting services — and with authorities where the law requires it. We never sell your data.

6. Cookies

We use essential cookies to run the basket and checkout, and may use analytics cookies to understand how the site is used. You can manage non-essential cookies through your browser or our cookie banner.

7. Data retention

We keep order and tax records for as long as the law requires, and other personal data only for as long as needed for the purposes above.

8. Your rights

Under UK GDPR you may request access to, correction or deletion of your data, object to or restrict processing, and request data portability. To exercise any of these, email [email]. You also have the right to complain to the Information Commissioner’s Office (ICO).

9. Changes

We may update this policy from time to time. The latest version will always be posted on this page.

Company[COMPANY NAME] LTD

Company No.[—]

Address[ADDRESS]

Email[email]

Website[website]

← Back to shop