Privacy policy
Draft — provisional content. The trader has not yet supplied or approved the final policies. Fields marked TO PROVIDE/TO CONFIRM require completion.
1. Data controller
[TO PROVIDE: controller identity and contact details, privacy contact and data protection officer where applicable.]
2. Data and purposes
Checkout requests a name, telephone, email, collection or delivery details and optional billing details and notes. These support order management and related communications. Technical data may support site operation and security. Avoid entering sensitive information in order notes.
3. Legal bases, recipients and transfers
[TO PROVIDE for each purpose: legal basis, hosting, email, payment and delivery providers, their roles, any transfers outside the EEA and applicable safeguards.] Placing an order does not imply marketing consent.
4. Retention
[TO PROVIDE: retention periods or criteria for orders, financial documents, messages, logs and backups.]
5. Rights and requests
Subject to applicable law, you may request access, correction, erasure, restriction or portability, or object to processing. Consent-based processing permits withdrawal of consent. [TO PROVIDE: request address and response procedure.] You may complain to the competent data protection authority.
6. External services
Maps may request resources from external providers when used. Social and external links have their own policies. [TO CONFIRM: the exact list of providers and transmitted data.]