GDPR

Privacy Policy

This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK GDPR and Data Protection Act 2018.

1. Data We Collect  
We may collect personal data including your name, address, email address, phone number, payment details, and order history when you place an order or contact us.

2. How We Use Your Data  
We use your data to:
- Process and deliver orders  
- Communicate with you regarding your order or enquiries  
- Comply with legal and regulatory obligations  

3. Legal Basis for Processing  
We process your data where necessary for:
- The performance of a contract  
- Compliance with legal obligations  
- Our legitimate interests (such as improving our services)

4. Data Sharing  
We may share your data with third parties where necessary, including payment providers, delivery couriers, and service providers. We do not sell your personal data.

5. Data Retention  
We retain personal data only for as long as necessary to fulfil the purposes outlined above and to comply with legal obligations.

6. Your Rights  
You have the right to:
- Access your personal data  
- Request correction or deletion  
- Object to or restrict processing  
- Request data portability  
- Lodge a complaint with the UK Information Commissioner’s Office (ICO)

7. Data Security  
We take appropriate technical and organisational measures to protect your data.

8. Contact  
If you have any questions about this policy or your data, please contact us.