Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you:

• Subscribe to our newsletter
• Contact us through our website
• Create an account or make a purchase
• Participate in surveys or promotions

The types of information we may collect include:

• Personal Information: Name, email address, postal address, telephone number
• Payment Information: Credit card details and billing information (processed securely through our payment providers)
• Communication Data: Records of correspondence and customer service interactions
• Usage Data: Information about how you use our website and services

2. How We Use Your Information

We use the information we collect for various purposes, including:

• Processing and fulfilling orders
• Sending newsletters and marketing communications (with your consent)
• Providing customer support and responding to inquiries
• Improving our website and services
• Complying with legal obligations
• Detecting and preventing fraud

3. Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following legal grounds:

• Consent: For marketing communications and non-essential cookies
• Contract: To fulfill orders and provide services you've requested
• Legitimate Interest: To improve our services and prevent fraud
• Legal Obligation: To comply with applicable laws and regulations

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party companies that help us operate our business (e.g., payment processors, shipping companies)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data during transmission
• Secure server infrastructure and access controls
• Regular security assessments and updates
• Employee training on data protection

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. For detailed information about our cookie practices, please see our Cookie Policy.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• Customer account data: For the duration of your account plus 7 years for legal compliance
• Marketing communications: Until you unsubscribe or request deletion
• Transaction records: 7 years for accounting and legal purposes
• Website analytics: 26 months maximum

9. International Data Transfers

Your personal data is primarily processed within the UK. If we transfer data outside the UK, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses approved by the UK authorities.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "last updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority, if you believe your data protection rights have been violated.