Privacy and Data Protection Policy

1. Introduction
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, place an order, or contact us. We are committed to safeguarding your privacy and complying with the UK GDPR and Data Protection Act 2018.
By using our website or purchasing from us, you agree to the practices described in this policy.
2. Information We Collect
We collect the following types of information:
• Personal details — name, email address, phone number, billing and shipping address.
• Order information — products purchased, payment method (we do not store full card details).
• Account information — if you create an account, we store your login details.
• Communication data — messages you send to us via email or contact forms.
• Technical data — IP address, browser type, device information, and cookies used to improve website performance.
3. How We Use Your Information
We use your information to:
• Process and deliver your orders.
• Communicate with you about your order, returns, or customer service queries.
• Improve our website and customer experience.
• Send marketing emails (only if you have opted in).
• Comply with legal obligations such as tax and accounting requirements.
We do not sell or rent your personal data to third parties.
4. Lawful Basis for Processing
We process personal data under the following lawful bases:
• Contract: To fulfil orders and manage subscriptions
• Consent: For marketing communications
• Legitimate interest: To improve services and prevent fraud
• Legal obligation: For tax, accounting, and regulatory compliance
5. Sharing Your Information
We only share your data with trusted third parties when necessary, including:
• Payment processors (e.g., Stripe, PayPal)
• Fulfilment and delivery partners
• Website hosting and analytics providers
• Professional services (e.g., accountants)
These partners only receive the information required to perform their services and must keep it secure.
6. Cookies
Our website uses cookies to:
• Enable essential site functions (e.g., checkout)
• Improve performance and user experience
• Analyse website traffic and usage patterns
You can manage or disable cookies through your browser settings, but some features may not work correctly without them.
7. How We Store and Protect Your Data
We store your data securely using encrypted systems and access controls. We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy or to meet legal obligations.
8. Data Retention
We keep personal data for the following periods:
• Order and subscription records: up to 6 years (legal requirement)
• Customer service communications: up to 2 years
• Marketing data: until you unsubscribe or request deletion
• Website analytics data: typically 12–26 months, depending on provider settings
After these periods, data is securely deleted or anonymised.
9. Your Rights Under UK GDPR
You have the right to:
• Access the personal data we hold about you
• Request correction of inaccurate information
• Request deletion of your data (in certain circumstances)
• Object to or restrict processing
• Withdraw consent for marketing at any time
• Request a copy of your data in a portable format
To exercise any of these rights, contact us using the details below.
10. Data Breach Procedures
In the unlikely event of a data breach, we will:
• Assess the severity and impact
• Notify affected individuals if there is a high risk to their rights
• Report the breach to the Information Commissioner’s Office (ICO) within 72 hours if required
• Take immediate steps to prevent further breaches
11. Your Rights
Under UK GDPR, you have the right to:
• Access the personal data we hold about you
• Request corrections to inaccurate information
• Request deletion of your data (in certain circumstances)
• Object to or restrict processing
• Withdraw consent for marketing at any time
• Request a copy of your data in a portable format
To exercise any of these rights, contact us using the details below.
12. Marketing Communications
We will only send marketing emails if you have opted in. You can unsubscribe at any time by clicking the link in the email or contacting us directly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
14. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
Email: snugglebox4pets@outlook.com
Address:
10 Dormy close
Southampton
SO317DD
