Privacy Policy

1. Data Controller
We process personal data in compliance with UK GDPR and data protection laws.

2. Information Collected
We may process:
• Contact details (name, address, email)
• Payment information (securely encrypted)
• Purchase history and preferences
• Device and browsing data

3. Purpose of Processing
Your data helps us:
• Process orders and deliveries
• Improve products and services
• Prevent fraud
• Personalize your experience (with consent)

4. Legal Basis
Processing relies on:
• Contract fulfillment
• Legal obligations
• Legitimate interests
• Your consent where required

5. Data Sharing
Information may be disclosed to:
• Payment processors
• Delivery partners
• IT service providers (under contract)
• Authorities when legally required

6. Your Rights
You may:
• Access your personal data
• Request corrections
• Withdraw consent
• Request deletion (subject to legal requirements)

7. Data Security
We implement:
• Industry-standard encryption
• Access controls
• Regular security audits

8. Cookies
Our website uses:
• Essential functional cookies
• Performance cookies (anonymous)
• Marketing cookies (opt-in)

9. Data Retention
We keep data:
• As long as necessary for business purposes
• In line with legal requirements
• Typically 3 years for customer records

10. International Transfers
Data may be transferred outside UK with adequate protections.

11. Policy Updates
Changes will be posted here.

12. Contact
For privacy inquiries, use the contact form in your account.