Privacy Policy

Placeholder — not legal advice. Replace the bracketed sections below with your real business details before launch. This template gives a starting structure only; check it (or have it checked) against UK consumer law for your specific business before you rely on it.

This policy explains what personal data [Business name] ("we", "us") collects through [domain] and how we use it. We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

What we collect

Name, email address, phone number (if provided), delivery address, and order history. If you subscribe to our mailing list, we also store your marketing preferences and consent record.

How we use it

To process and deliver your order, to send order-related emails, and, only with your consent, to send marketing emails, SMS, WhatsApp or Telegram messages about new products and offers.

Who we share it with

Our payment provider (GoCardless) to process payment, our fulfilment supplier (CJdropshipping) to ship your order, and our email/SMS provider (Klaviyo) to send messages you have opted into. We do not sell your data.

How long we keep it

[State your retention period, e.g. order data for 6 years for tax purposes; marketing data until you unsubscribe.]

Your rights

You can ask to see, correct, or delete your personal data, or withdraw marketing consent at any time, by emailing [support email]. You can also complain to the UK Information Commissioner's Office (ico.org.uk) if you believe we have mishandled your data.

Cookies

[Describe any cookies or local storage used, e.g. "This site stores a small amount of information in your browser to remember your shopping session; it is not shared with third parties."]