Legal
Privacy Policy
Last updated: [DATE]
Overview
[Placeholder — replace with finalised wording. This page should cover: who the data controller is, contact details, and a short summary of how personal data is handled.]
What we collect
[Placeholder — list the personal data collected: name, email, shipping address, payment details processed via Stripe, contact form submissions, etc.]
Why we collect it
[Placeholder — explain lawful bases for processing: fulfilling orders, responding to enquiries, complying with legal obligations.]
Who we share it with
[Placeholder — list processors: Stripe (payments), Cloudinary (image hosting), Vercel (site hosting), email provider, etc.]
How long we keep it
[Placeholder — retention periods for orders, accounting records, and contact enquiries.]
Your rights
[Placeholder — under UK GDPR / EU GDPR you have rights to access, rectification, erasure, restriction, portability, and objection. Include how to exercise them and how to contact the ICO.]
Cookies
[Placeholder — describe any cookies used. If only essential cookies are used, say so explicitly.]
Contact
[Placeholder — email address for privacy queries.]