This policy explains what personal data we collect, why, and what you can do about it. Placeholders in square brackets must be replaced, and the whole document reviewed by a qualified professional, before this page is published.
Who is responsible for your data
[REGISTERED BUSINESS NAME], [REGISTERED ADDRESS], is responsible for the personal data described here. You can reach us at [PRIVACY CONTACT EMAIL].
What we collect
- Order details: your name, delivery and billing address, email address, phone number and what you ordered.
- Payment information: handled by our payment provider. We receive confirmation that a payment succeeded, not your full card details.
- Account details: if you create an account, your email address and a securely stored password.
- Messages: anything you send us through the contact form or by email.
- Usage data: basic technical information such as your IP address, browser and the pages you visit. [LIST ANY ANALYTICS TOOLS YOU USE.]
Why we use it
- to take payment, pack your order and deliver it
- to answer your questions and handle returns
- to send order confirmations and delivery updates
- to send marketing emails, only if you asked us to
- to keep records we are required by law to keep, including for tax
- to detect and prevent fraud and abuse of this website
Who we share it with
We share only what is necessary, with:
- our delivery partners, so they can deliver your order
- our payment provider, to process your payment
- [EMAIL AND HOSTING PROVIDERS]
- government authorities, where the law requires it
We do not sell your personal data.
Cookies
This website uses cookies that are necessary for it to work — keeping your cart and your sign-in session. [DESCRIBE ANY ANALYTICS OR MARKETING COOKIES, AND HOW VISITORS CAN REFUSE THEM.] You can block cookies in your browser, but parts of the site may then stop working.
How long we keep it
We keep order records for [NUMBER] years, because tax and accounting rules require it. Account data is kept while your account is open. Contact form messages are kept for [NUMBER] months.
Your choices
You can ask us to show you the data we hold about you, correct it, or delete it, and you can unsubscribe from marketing emails at any time using the link in them. Write to [PRIVACY CONTACT EMAIL] and we will respond within [NUMBER] days. We may need to keep some records even after a deletion request where the law requires it.
Keeping it secure
This website uses encrypted connections, and access to order data is limited to people who need it. No system is perfectly secure, but we take reasonable steps to protect your information.
Children
This website is not intended for children, and we do not knowingly collect their personal data.
Changes
If we change this policy we will update the date shown at the top of this page.
Complaints
If you are unhappy with how we have handled your data, contact [PRIVACY CONTACT EMAIL]. [ADD THE RELEVANT REGULATOR OR GRIEVANCE ROUTE ONCE CONFIRMED.]