Privacy Policy

1. Introduction

[Your Store Name] ("we", "our", "us") is committed to protecting your privacy and handling your personal data in a transparent and lawful manner. This Privacy Policy outlines how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR).

2. Information We Collect

We may collect and process the following personal data:

  • Name and contact details (e.g., email address, phone number, billing/shipping address)

  • Payment information (processed securely via third-party payment processors)

  • Purchase history and customer service interactions

  • IP address and browser data (for analytical and security purposes)

3. How We Use Your Information

We use your data to:

  • Process and fulfil your orders

  • Provide customer service and manage returns

  • Send order confirmations, updates, and occasional marketing (only with your consent)

  • Improve website functionality and user experience

  • Comply with legal obligations

4. Legal Basis for Processing

We process your data under the following lawful bases:

  • Performance of a contract (e.g., fulfilling your order)

  • Consent (e.g., for marketing communications)

  • Legitimate interests (e.g., fraud prevention, website analytics)

  • Legal obligations

5. Data Sharing

We only share your data with trusted third parties necessary for the functioning of our store, including:

  • Payment processors

  • Fulfilment and delivery partners

  • IT service providers (e.g., website hosting)

We do not sell or rent your data to any third party.

6. International Transfers

As a dropshipping business, some of our suppliers or service providers may be located outside the UK. Where this occurs, we ensure appropriate safeguards are in place.

7. Your Rights

Under the UK GDPR, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request erasure of your data ("right to be forgotten")

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

To exercise your rights, please contact: [Insert Contact Email].

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations.

9. Contact

If you have any questions or concerns, contact our Data Protection Officer at:
Email: [Insert Email]
Address: [Insert Business Address]
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).