Privacy policy
This Privacy Policy describes how your personal information is collected, used and shared when you visit or make a purchase from www.deliciousmonstertea.com.
Personal information I collect
When you visit the site, certain information is collected automatically about your device, including your web browser, IP address, time zone, and information about how you use the site. This may include the pages or products you view, how you arrived at the site, and how you interact with it.
This information may be collected using cookies, log files, tags, pixels and similar technologies.
If you place an order, or attempt to place an order, I also collect the information you provide to me, including your name, billing address, shipping address, payment details, email address and phone number.
When this policy refers to personal information, it means both the information you provide and the information collected automatically when you use the site.
How I use your personal information
I use your personal information to:
- process and fulfil your order
- take payment and provide order confirmations
- arrange delivery
- communicate with you about your order
- screen orders for fraud or risk
- improve and optimise the website
- understand how visitors use the site through analytics
- send marketing emails or updates where you have chosen to receive them
Lawful bases for processing
Under UK data protection law, I rely on different lawful bases depending on how your information is used. These include:
- Contract — where I need to use your information to process and fulfil your order
- Legitimate interests — where I use information to run and improve my business, prevent fraud, and understand how the site is used
- Consent — where this is required, for example for non-essential cookies or marketing emails
The ICO says privacy notices should explain the lawful basis being relied on for each purpose.
Cookies and analytics
This site uses cookies and similar technologies to help it function properly and to understand how visitors use the site.
Some cookies are essential for the website to work. Others, such as analytics cookies, are non-essential and should only be used where you have given consent.
I use tools such as Shopify and Google Analytics to help run the site and understand how customers use it.
The ICO says consent for non-essential cookies should be clear, informed and given through a positive action, rather than being hidden only in a privacy policy.
Sharing your information
I share personal information only where necessary to run the business and provide my services. This may include:
- Shopify, which powers my online store
- payment providers, to process payments securely
- delivery providers, to send your order
- analytics and marketing providers, where applicable
- legal or regulatory authorities, where I am required to do so by law
I may also share information where necessary to protect my rights, prevent fraud, or comply with legal obligations.
International transfers
Some of the companies I use to run my business may process personal information outside the UK. Where this happens, I take reasonable steps to make sure your information is handled appropriately in line with data protection law.
How long I keep your information
If you place an order, I will keep your order information for my records unless I need to delete it sooner following a valid request, or unless I need to keep it for legal, tax or accounting reasons.
The ICO says privacy notices should explain retention periods, or how those periods are decided.
Your rights
Depending on where you live, you may have the right to:
- request access to the personal information I hold about you
- ask for your information to be corrected
- ask for your information to be deleted
- object to or restrict certain processing
- withdraw consent where consent is the basis for processing
- complain to a data protection authority
If you would like to exercise any of these rights, please contact me using the details below.
In the UK, you also have the right to complain to the Information Commissioner’s Office (ICO) if you are unhappy with how your personal information has been handled. The ICO says privacy notices should tell people how they can complain.
Third-party services
This website may include links to third-party websites or services. I am not responsible for the privacy practices of those third parties, and I encourage you to read their privacy policies separately.
Changes to this policy
I may update this Privacy Policy from time to time to reflect changes to my practices, operational needs, or legal requirements. Any updates will be posted on this page.
Contact
If you have any questions about this Privacy Policy, would like to exercise your rights, or would like to make a complaint, you can contact me at:
Claire Richards
claire@deliciousmonstertea.com
Cardiff, UK