Privacy Policy
Last updated: [DATE]. This policy explains what personal data we collect, why, and what rights you have.
Who we are
[YOUR BUSINESS LEGAL NAME], [YOUR REGISTERED ADDRESS]. Data controller for the purposes of the GDPR. Privacy contact: [YOUR PRIVACY EMAIL].
What we collect
- Order data: name, billing and shipping address, email, phone number, and the items you bought.
- Account data: the login details you create if you register, plus your order history.
- Payment data: handled by our payment processors (see below). We receive a confirmation and the last digits of your card — never the full card number.
- Technical data: IP address, browser and device type, pages viewed, and referral source.
Why we use it
To take and deliver your order, provide customer support, handle returns, prevent fraud, meet tax and accounting duties, and (with your consent) send marketing email you can unsubscribe from at any time.
Cookies
Essential cookies keep your cart and session working. Analytics and marketing cookies are only set with your consent, which you can change at any time.
Who we share it with
Only with service providers who help us run the shop, and only as far as needed:
- Payment processing: WooPayments (Stripe) and PayPal — to take payment and screen for fraud.
- Shipping carriers — name, address and phone, to deliver your parcel.
- Email and marketing: MailPoet, and Jetpack for site functionality.
- Analytics and advertising: where consent is given.
We do not sell your personal data.
International transfers
Some providers are based outside your country. Where data leaves the UK/EEA we rely on appropriate safeguards such as standard contractual clauses.
How long we keep it
Order and invoice records are kept for [X years] to satisfy tax law. Marketing consent records are kept until you withdraw consent. Account data is deleted on request.
Your rights
You can ask for access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time. Email [YOUR PRIVACY EMAIL]. You may also complain to your local supervisory authority. California residents have additional rights under the CCPA/CPRA, including the right to know and to delete, and the right not to be discriminated against for exercising them.
Children
This shop is not intended for children under 16 and we do not knowingly collect their data.
Changes
We will post any update on this page and change the “last updated” date.