This policy explains how we collect and use personal data in connection with this website, and the rights available to you in respect of it.
1.1 The controller of the personal data described in this policy is Demo.
[Add your shop address in Settings ▸ General]
Email: wayne.jordan@live.co.uk
1.2 Enquiries about this policy, or about the exercise of your rights, should be addressed to that email address.
| Category | Data |
|---|---|
| Account | Name, email address, password (stored in hashed form), and marketing preference. |
| Transactions | Orders placed, sums paid, delivery and billing address, delivery method, returns and refunds. |
| Payment | The outcome of a payment and the final digits and type of the card used. We do not receive or store full card numbers. |
| Correspondence | Messages you send us and our replies. |
| Events and reservations | Attendance and booking details, where you use those services. |
| Goods sold to us | Items offered, the sums quoted and paid, where you sell to us. |
| Technical | Pages viewed, searches made, approximate location derived from IP address, and device and browser information. |
3.1 Most personal data is provided by you directly, when you register, place an order, contact us or attend an event.
3.2 Technical data is collected automatically as you use the Website.
3.3 We receive confirmation of payment outcomes from our payment provider.
| Purpose | Legal basis |
|---|---|
| Performing the contract: taking, supplying and delivering your order, and handling returns and refunds | Performance of a contract |
| Administering your account | Performance of a contract |
| Keeping accounting and tax records | Compliance with a legal obligation |
| Responding to correspondence | Legitimate interests: dealing with enquiries about our business |
| Preventing and investigating fraud and misuse | Legitimate interests: protecting our business and our customers |
| Understanding how the Website is used, in aggregate | Legitimate interests: maintaining and improving what we offer |
| Sending marketing communications | Consent, which may be withdrawn at any time |
| Non-essential cookies and similar technologies | Consent, which may be withdrawn at any time |
4.1 Where we rely on legitimate interests we have considered whether those interests are overridden by your interests and rights, and have concluded that they are not. You may object to that processing; see clause 9.
5.1 Marketing communications are sent only where you have consented to receive them.
5.2 Every marketing communication contains a means of unsubscribing, which takes effect on receipt. You may also change your preference in your account.
5.3 Withdrawing consent to marketing does not affect communications we are required to send in connection with an order you have placed.
6.1 We use cookies that are strictly necessary for the Website to function, including to maintain your basket, your session and the security of the checkout. These do not require consent.
6.2 Any analytics or advertising technology is used only with your consent, obtained before it is set, and may be withdrawn at any time.
7.1 Personal data is disclosed to the following categories of recipient, each acting under contract and only as instructed:
7.2 We may disclose personal data where required by law, or in connection with the sale or reorganisation of our business.
7.3 We do not sell personal data.
8.1 Some of our service providers process personal data outside the country in which we are established.
8.2 Where personal data is transferred to a country that has not been the subject of an adequacy decision, the transfer is made under standard contractual clauses or another lawful transfer mechanism. Details are available on request.
| Data | Retained for |
|---|---|
| Order and payment records | The period required by tax and accounting law, ordinarily six years from the end of the relevant period. |
| Account data | Until you ask us to close your account, after which it is deleted or anonymised except where clause 9.1 applies. |
| Marketing preferences | Until you change them, and thereafter a record sufficient to honour a withdrawal of consent. |
| Correspondence | [State your retention period, for example two years from the last exchange.] |
| Technical data | [State your retention period.] |
9.1 Where deletion is requested, records we are required by law to retain are kept for the remainder of the applicable period and are not used for any other purpose.
10.1 You have the right:
10.2 To exercise a right, write to the email address in clause 1. We respond within one month, which may be extended by two further months where a request is complex; we will tell you if that applies.
10.3 We may ask for information sufficient to confirm your identity before acting on a request.
10.4 No fee is charged unless a request is manifestly unfounded or excessive.
11.1 We do not take decisions producing legal or similarly significant effects concerning you based solely on automated processing.
12.1 If you are dissatisfied with how we have handled your personal data, please raise it with us first at wayne.jordan@live.co.uk.
12.2 You also have the right to lodge a complaint with the Information Commissioner's Office, at ico.org.uk.
13.1 We may amend this policy. The current version is always published on this page, and the date below records when it was last changed.
13.2 Where a change materially affects how we use personal data we will take reasonable steps to bring it to your attention.