Privacy Policy

Last updated: [Date]

[Your Company Name] (“we”, “us”) respects your privacy and processes personal data in compliance with UK GDPR and the Data Protection Act 2018.

1. Data We Collect

• Contact Data: Name, email, address, phone number.

• Account Data: Login credentials, order history.

• Payment Data: Processed securely by third‑party gateways.

• Technical Data: IP address, browser type, device information.

• Marketing Data: Preferences, consents.

2. Use of Data

• Order fulfilment: Process and deliver your purchases.

• Account management: Customer service and support.

• Marketing: Newsletters and promotions (with consent).

• Analytics: Improve our website and services.

3. Legal Basis

• Contractual Necessity: To fulfil your orders.

• Legitimate Interests: Service improvement and fraud prevention.

• Consent: For marketing communications (withdrawable anytime).

4. Data Sharing

We share data with service providers (payment processors, couriers, marketing platforms) and legal authorities when required.

5. International Transfers

We use Standard Contractual Clauses for transfers outside the UK/EEA.

6. Data Retention

• Order data: retained for at least 6 years for tax purposes.

• Marketing data: until consent is withdrawn.

• Account data: until deletion request or 2 years of inactivity.

7. Your Rights

Access, rectification, erasure, restriction, portability, and objection. Contact us to exercise these rights.

8. Cookies

Our site uses cookies for functionality, analytics, and marketing. Manage preferences via the banner or browser settings.

9. Changes

We may update this Policy; changes are published here with revised date.

10. Contact

Email: [email@you.com] Address: [Your Company Address]