Legal
Privacy Policy
Last updated: Draft — review before launch
This is a starting template. Have it reviewed by a suitably qualified person before you begin trading.
This policy explains what personal data we collect, why we collect it, and your rights, in line with the UK GDPR and the Data Protection Act 2018.
Who we are
Buckle My Pup ("we", "us") is the data controller for the personal data collected through bucklemypup.co.uk.
You can reach us about any privacy matter at hello@bucklemypup.co.uk.
What we collect
Order details: your name, delivery address, email and phone number, used to fulfil and support your order.
Payment details: card payments are processed securely by Stripe. We never see or store your full card number.
Marketing: if you opt in, your email address, so we can send you newsletters. You can unsubscribe at any time.
Technical: with your consent, analytics cookies collect anonymised usage data. See our Cookie Policy.
Why we can use it (legal basis)
To perform our contract with you: processing and delivering your order and handling returns.
To meet legal obligations: keeping tax and accounting records.
With your consent: marketing emails and optional analytics cookies.
For our legitimate interests: preventing fraud and keeping the site secure.
Who we share it with (sub-processors)
We use a small number of trusted third-party providers (sub-processors) to run our business. Each processes personal data only on our instructions and under a data-processing agreement:
Stripe — payment processing and fraud prevention.
Our delivery partners (couriers) — to ship your order to you.
Vercel — website hosting and content delivery.
We never sell your personal data to anyone, and we only share it where necessary to fulfil your order, meet a legal obligation, or with your consent.
How long we keep it
Order records are retained for at least six years to meet UK tax and accounting requirements.
Marketing contacts are kept until you unsubscribe.
Your rights
You have the right to access, correct, delete, restrict or object to our use of your data, and to data portability.
To exercise any of these, email hello@bucklemypup.co.uk.
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.