Last updated: [Effective Date]
1. Who We Are
[Legal Company Name], trading as [Store Name], is responsible for the processing of personal data described in this Privacy Policy.
Data controller: [Full Legal Company Name]
Registered address: [Full Registered Address]
Company registration number: [Registration Number]
Privacy email: [Privacy Email]
Data Protection Officer: [Name and contact details, only if applicable]
This policy explains what personal data we collect, why we use it, who we share it with, how long we keep it and the rights available to you.
2. Personal Data We Collect
Depending on how you use our website, we may collect:
- Name;
- Billing and delivery address;
- Email address;
- Telephone number;
- Order and transaction information;
- Product preferences and shopping-cart information;
- Customer-support communications;
- Refund and return information;
- IP address;
- Browser, device and operating-system information;
- Cookie identifiers;
- Website activity and referral information;
- Fraud-prevention and security information; and
- Marketing preferences.
Our payment provider processes payment-card or account details. We do not ordinarily receive or store complete card numbers.
3. How We Collect Personal Data
We collect personal data:
- Directly from you when you order, create an account, contact us or subscribe to marketing;
- Automatically through cookies and similar technologies;
- From payment processors, delivery carriers and fraud-prevention providers;
- From advertising or analytics providers where permitted; and
- From publicly available sources where lawful.
4. Why We Use Personal Data
We process personal data for the following purposes and legal bases:
Contract performance
We use information necessary to:
- Process and deliver orders;
- Take and manage payments;
- Provide order confirmations and delivery updates;
- Process returns, refunds and warranty requests; and
- Respond to service enquiries.
Legal obligations
We may process and retain information to:
- Maintain tax and accounting records;
- Comply with consumer-protection requirements;
- Respond to lawful requests from public authorities;
- Prevent unlawful transactions; and
- Meet other regulatory obligations.
Legitimate interests
Where these interests are not overridden by your rights, we may process information to:
- Protect the website and prevent fraud;
- Improve our products and customer service;
- Maintain business and transaction records;
- Establish, exercise or defend legal claims; and
- Understand website performance using privacy-appropriate analytics.
Consent
Where required, we rely on consent for:
- Non-essential cookies;
- Email or SMS marketing; and
- Certain advertising or profiling activities.
You may withdraw consent at any time without affecting processing already carried out.
5. How We Share Personal Data
We may share necessary personal data with:
- Website and hosting providers, including
[Hostinger or correct provider]; - E-commerce service providers, including WooCommerce;
- Payment processors, including
[Payment Provider]; - Warehouses, fulfilment providers and suppliers;
- Delivery and logistics companies;
- Customer-support providers;
- Accounting, tax, legal and professional advisers;
- Analytics and advertising providers used with appropriate consent;
- Fraud-prevention and cybersecurity providers; and
- Government authorities where disclosure is legally required.
These parties may act as processors, independent controllers or joint controllers depending on the service.
We do not sell personal data for money. [Keep this sentence only if accurate.]
6. International Data Transfers
Some service providers may process personal data outside the United Kingdom or European Economic Area.
Where legally required, we use appropriate safeguards, such as an adequacy decision, approved standard contractual clauses, the UK International Data Transfer Agreement or another lawful transfer mechanism.
You may contact us for more information about safeguards relevant to your information.
7. Data Retention
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, warranty, fraud-prevention and dispute-resolution requirements.
Typical retention periods are:
- Order and accounting records:
[Number of years required by the company’s applicable tax law]; - Customer-support communications:
[For example: up to 3 years after resolution]; - Account information: while the account remains active and for
[period]afterwards; - Marketing information: until consent is withdrawn or the information is no longer needed;
- Cookie information: according to the duration shown in our cookie settings.
We may keep specific records for longer where required by law or necessary for a legal claim.
8. Cookies
We use cookies and similar technologies to:
- Operate the website and shopping cart;
- Remember preferences;
- Maintain security;
- Measure website performance; and
- Provide analytics or advertising where permitted.
Non-essential cookies will be used only after consent where required.
You can manage your choices through [Cookie Settings Link]. More information should be provided in a separate Cookie Policy or cookie settings panel.
9. Marketing Communications
We will send marketing messages only where we have a lawful basis to do so.
You can unsubscribe using the link in an email or by contacting [Privacy Email]. Unsubscribing from marketing does not stop transactional communications concerning an existing order.
10. Your Data Protection Rights
Depending on your location and applicable law, you may have the right to:
- Access your personal data;
- Correct inaccurate or incomplete data;
- Request deletion of your data;
- Restrict processing;
- Object to processing based on legitimate interests;
- Receive certain data in a portable format;
- Withdraw consent;
- Object to direct marketing; and
- Lodge a complaint with a data-protection authority.
These rights may be subject to legal limitations.
To exercise a right, email [Privacy Email]. We may request information necessary to verify your identity.
You may complain to the data-protection authority in the country where you live or work. You may also contact the supervisory authority responsible for our business in [Company Country].
11. Automated Decision-Making
[Choose the accurate statement:]
If not used:
We do not make decisions producing legal or similarly significant effects based solely on automated processing.
If fraud tools are used:
We may use automated fraud and payment-security tools to identify potentially unauthorised transactions. Where applicable law grants you rights concerning such decisions, you may request human review by contacting us.
12. Data Security
We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
No internet transmission or storage system can be guaranteed to be completely secure.
13. Children
Our website is not intended for children, and we do not knowingly collect personal data from children who cannot legally provide valid consent.
If you believe a child has provided personal information improperly, contact us so that we can investigate and delete it where appropriate.
14. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review the privacy policy of each third-party website you visit.
15. Changes to This Policy
We may update this Privacy Policy to reflect changes in law, technology or our business.
The latest version will be published on this page with its updated date. We will provide additional notice where legally required.
16. Contact Us
For privacy questions or requests:
Legal company name: [Full Legal Company Name]
Privacy email: [Privacy Email]
Postal address: [Full Postal Address]
Telephone: [Telephone Number]