Template for NeedleWorks to review before launch. Replace everything in [square brackets] and have the text checked before the shop takes real orders.
[NeedleWorks legal entity name] ([registered address], [contact email address]) is the controller of the personal data described here.
What we collect and why
- Orders: your name, email address, mobile number, billing and delivery addresses, what you ordered and any order notes. We use them to process, deliver and support your order (contract) and to keep business records (legal obligation).
- Accounts: if you create an account, your name, email address, saved addresses and order history, so you can check orders and check out faster (contract).
- Contact form: your name, email address, order number and message, to reply to you (legitimate interests).
- Payments: handled by our payment provider [provider]; we never see or store your full card details.
Who we share it with
Our payment provider, delivery couriers, email and website hosting providers, and [other processors], only as needed for the purposes above.
How long we keep it
Contact form messages for [2 years]. Order records for [6 years] to meet accounting requirements. Accounts until you ask us to delete them.
Cookies
This site uses only the cookies needed for it to work: the cart and checkout session, signed-in account sessions, your country/region choice and fraud prevention by our payment provider. It does not use advertising or analytics cookies.
Your rights
You can ask for a copy of your data, or for it to be corrected, deleted, restricted or transferred, and you can object to its use or withdraw consent at any time, by contacting us. You can also complain to the Information Commissioner’s Office (ico.org.uk).