Privacy Policy Generator

PRIVACY POLICY

[Store Name] ("we", "us", "our")
Effective date: [date]

This Privacy Policy describes how we collect, use, disclose and protect your personal data when you visit [https://example.com], create an account or make a purchase (the "Services"). We are the data controller of your personal data and we process it in accordance with the UK GDPR and the Data Protection Act 2018.

1. INFORMATION WE COLLECT

We may collect and process the following categories of personal data:

• Identity & contact data — name, billing and delivery address, email address and phone number.
• Account data — your username, password (stored encrypted) and account preferences.
• Payment data — payment method details, processed securely by our payment providers; we do not store full card numbers.
• Order & transaction data — products purchased, order value, and order history.
• Technical data — IP address, device identifiers, browser type and operating system.
• Usage data — pages viewed, time on site and how you interact with the Services.
• Marketing & communication data — your preferences for receiving marketing and your communication history with us.

2. HOW WE COLLECT YOUR DATA

• Directly from you — when you place an order, create an account, contact us or subscribe to marketing.
• Automatically — through cookies and similar technologies when you use the Services (see our Cookie Policy).
• From third parties — such as payment providers, delivery partners and analytics services.

3. HOW WE USE YOUR DATA

We use your personal data to:

• process and fulfil your orders and manage payments, returns and refunds;
• create and manage your account;
• provide customer support and respond to your enquiries;
• send you marketing communications where you have consented or where permitted by law;
• understand how our Services are used and improve them;
• prevent fraud and ensure the security of our Services;
• comply with our legal and regulatory obligations.

4. LEGAL BASES FOR PROCESSING

Under the GDPR, we rely on the following legal bases:

• Performance of a contract — to process your orders and provide the Services;
• Consent — for marketing communications and non-essential cookies, which you may withdraw at any time;
• Legal obligation — to comply with tax, accounting and other legal requirements;
• Legitimate interests — to secure, improve and grow our business, balanced against your rights.

5. MARKETING COMMUNICATIONS

Where you have opted in, we may send you information about products, offers and news. You can opt out at any time via the unsubscribe link in any email or by contacting us. Opting out of marketing does not affect service-related messages such as order confirmations.

6. COOKIES AND TRACKING

We use cookies and similar technologies to operate the site, remember your preferences, measure traffic. For full details, please see our Cookie Policy. You can manage your preferences through our cookie banner and your browser settings.

8. SHARING YOUR PERSONAL DATA

We share personal data only where necessary, with:

• Payment providers to process transactions securely;
• Shipping and logistics partners to deliver your orders;
• Analytics providers to help us understand and improve the Services;
• IT and hosting providers who support our platform;
• Professional advisers and authorities where required by law, and in connection with a business sale or reorganisation.

We do not sell your personal data.

9. INTERNATIONAL DATA TRANSFERS

Some of our providers may process personal data outside your country. Where we transfer data internationally, we put appropriate safeguards in place, such as the European Commission's Standard Contractual Clauses (or the UK equivalent) and adequacy decisions, to ensure your data remains protected.

10. DATA RETENTION

We retain your personal data only for as long as necessary for the purposes described in this policy, including to meet legal, tax and accounting requirements. When data is no longer needed, we securely delete or anonymise it.

11. DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse, including encryption in transit, access controls and secure hosting. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. YOUR RIGHTS

Under the GDPR, you have the right to access, rectify, erase, restrict and object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise these rights, contact us using the details below.

15. THIRD-PARTY LINKS

Our Services may contain links to third-party websites. We are not responsible for their privacy practices, and we encourage you to review their privacy policies.

16. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the effective date above. Significant changes will be notified where required by law.

17. HOW TO CONTACT US

If you have any questions about this Privacy Policy or wish to exercise your rights, contact us at:

[Store Name]
Email: [contact@example.com]

You also have the right to lodge a complaint with your local data protection supervisory authority.