PRIVACY POLICY

Last updated: 27 September 2026

At [STORE NAME], we respect your privacy and are committed to protecting your personal information.

1. Data Controller

The data controller is:

[LEGAL COMPANY NAME]
[REGISTERED ADDRESS]
[PRIVACY EMAIL]

2. Personal Information We Collect

Depending on how you interact with our store, we may collect:

  • name and surname;

  • email address;

  • telephone number;

  • billing address;

  • shipping address;

  • account details;

  • order history;

  • transaction information;

  • return and refund information;

  • IP address;

  • browser and device information;

  • cookie identifiers;

  • website activity;

  • customer-service communications;

  • marketing preferences;

  • fraud-prevention and security information.

Full payment-card information is normally processed directly by authorised payment providers rather than stored by us.

3. How We Collect Information

We may collect information:

  • directly from you;

  • automatically when you visit our website;

  • through Shopify;

  • through payment providers;

  • from shipping and fulfilment partners;

  • from analytics or advertising providers where legally permitted.

4. Why We Process Your Information

We may process personal information to:

  • process and deliver orders;

  • process payments;

  • provide customer support;

  • manage returns and refunds;

  • maintain customer accounts;

  • prevent fraud;

  • protect website security;

  • comply with legal obligations;

  • maintain tax and accounting records;

  • improve our website and services;

  • provide marketing where permitted by law.

5. Legal Bases

Where GDPR, UK GDPR or equivalent rules apply, we may rely on:

Contract: to process orders, payments and deliveries.

Legal obligation: to comply with tax, accounting, consumer and regulatory requirements.

Legitimate interests: for fraud prevention, website security and reasonable business operations.

Consent: for certain marketing, analytics, advertising and non-essential cookies where consent is required.

You may withdraw consent at any time.

6. Shopify

Our store is powered by Shopify.

Shopify may process personal information in order to provide its e-commerce platform and associated services.

7. Sharing Personal Information

Where necessary, we may share information with:

  • Shopify;

  • payment providers;

  • shipping companies;

  • fulfilment partners;

  • fraud-prevention providers;

  • website and hosting providers;

  • analytics providers;

  • advertising partners where permitted;

  • accountants;

  • legal advisers;

  • insurers;

  • regulators and public authorities where legally required.

We do not sell customer databases for money.

8. International Data Transfers

Personal information may be processed outside your country of residence.

Where required, appropriate safeguards are used, such as adequacy decisions, approved contractual clauses or another lawful transfer mechanism.

9. Data Retention

We retain personal information only for as long as reasonably necessary to:

  • fulfil orders;

  • provide customer support;

  • maintain transaction records;

  • comply with tax and accounting requirements;

  • resolve disputes;

  • prevent fraud;

  • comply with legal obligations.

10. Your Privacy Rights

Depending on applicable law, you may have rights to:

  • access your information;

  • correct inaccurate information;

  • request deletion;

  • restrict processing;

  • object to processing;

  • obtain data portability;

  • withdraw consent;

  • lodge a complaint with a data-protection authority;

  • exercise rights relating to certain automated decisions.

To exercise a privacy right, contact:

[PRIVACY EMAIL]

We may request reasonable information to verify your identity.

11. Marketing

Where required by law, we send marketing communications only with an appropriate legal basis.

You may unsubscribe using the unsubscribe link contained in our marketing emails.

12. Cookies

We use cookies and similar technologies in accordance with our Cookie Policy.

Where legally required, non-essential cookies will not be activated before valid consent is obtained.

13. Security

We use appropriate technical and organisational measures designed to protect personal information.

No internet or electronic storage system can be guaranteed to be completely secure.

14. Children

Our store is intended for general retail customers and is not designed to knowingly collect personal information unlawfully from children.

15. EU Representative

Where Article 27 GDPR requires us to appoint an EU representative:

[EU REPRESENTATIVE NAME]
[EU REPRESENTATIVE ADDRESS]
[EU REPRESENTATIVE EMAIL]

16. UK Representative

Where UK GDPR requires us to appoint a UK representative:

[UK REPRESENTATIVE NAME]
[UK REPRESENTATIVE ADDRESS]
[UK REPRESENTATIVE EMAIL]

17. Switzerland

Where Swiss data-protection law applies, personal information will also be processed in accordance with applicable Swiss privacy legislation.

18. Contact

For privacy questions:

[PRIVACY EMAIL]