Data we process
The store can process account details, contact details, delivery addresses, order records, contact enquiries and newsletter subscriptions.
Why we process it
Typical purposes include operating customer accounts, taking and fulfilling orders, responding to enquiries, preventing abuse, maintaining records and, where consent is obtained, sending marketing updates.
Legal bases
The business should confirm its final UK GDPR legal bases before launch. Depending on the activity these may include contract, legal obligation, legitimate interests and consent.
Your rights
UK data protection law can give individuals rights including access, correction, deletion, restriction, objection and data portability in relevant circumstances, plus the right to complain to the UK Information Commissioner's Office.
Retention
Retention periods must be set by the business according to legal, accounting, operational and dispute-resolution requirements rather than keeping personal data indefinitely.