Lollygag Gifts 💛

1.0 OUR CORE BELIEFS REGARDING USER PRIVACY AND DATA PROTECTION

• User privacy and data protection are fundamental rights.

• We have a duty of care to everyone whose data we hold.

• Data is a liability – it should only be collected and processed when absolutely necessary.

• We loathe spam as much as you do!

• We will never sell, rent, or otherwise distribute or make public your personal information.

2.0 RELEVANT LEGISLATION

We comply with the following national and international legislation with regards to data protection and user privacy:

• UK General Data Protection Regulation (UK GDPR)

• Data Protection Act 2018 (DPA 2018)

• Privacy and Electronic Communications Regulations 2003 (PECR)

This policy is designed to comply with UK law and covers any data we may collect about you when you shop with us.

3.0 PERSONAL INFORMATION WE COLLECT AND WHY

When you place an order via our shop we receive only the information required to process your order (your name, delivery address, and email address).

We never receive or store your card or bank details – these are handled securely by the payment processor for each platform.

4.0 HOW WE USE THE INFORMATION

Your information is used solely to fulfil your order and communicate with you about your purchase, under the legal basis of ‘contract’.

We will not add you to a mailing list or contact you for marketing unless you have explicitly opted in.

5.0 SHARING WITH THIRD PARTIES

We will never sell or rent your personal data.
To process your order and fulfil our contract with you, your information may be shared with:

• Delivery providers (Royal Mail, courier services)

Your data may also be shared if required by law, regulation, or law enforcement. Please note that we are not responsible for how these third parties process your data – you can read their own privacy policies on their websites.

6.0 HOW WE SECURE, STORE, AND RETAIN DATA

We use Mightie Makers to manage orders. Your data is stored by these platforms for the duration needed to process your purchase and maintain business and financial records (typically 7 years for tax purposes).

We do not store hard copies of your data.

7.0 YOUR RIGHTS

You have the right to:

• Access the personal data we hold about you

• Request correction or deletion of your data

• Restrict or object to certain types of processing

To exercise your rights, please email our Data Controller (see Section 9.0). We will respond within 30 calendar days free of charge, unless a request is unfounded, excessive, or repetitive.

8.0 DATA BREACHES

If a data breach occurs that affects your personal information, we will notify the relevant authorities and affected individuals within 72 hours where legally required.

If you believe your data has been compromised, you have the right to contact the Information Commissioner’s Office (ICO).

9.0 DATA CONTROLLER

Data Controller: Hayley Rennie
Registered & Operating Address: 8 Rosamond Close, Sheffield, S17 4LU, United Kingdom
Email: lollygaggiftshop@gmail.com

10.0 CHANGES TO THIS PRIVACY POLICY

We may update this privacy policy from time to time to reflect changes in legislation or business practices. We recommend checking this page periodically for the latest version.