Privacy policy
Last updated [ date ]
It is written to the structure the Information Commissioner’s Office asks for, but it describes systems we have assumed. Before it goes live, check every section against what your shop actually does, fill in the bracketed details, and have somebody qualified read it.
Who we are
[ Registered company name ] trading as Glow by K&D, company number [ 00000000 ], registered at [ registered address ]. We are the data controller for the information described here. You can reach us at hello@glowbykd.com.
[ If you are registered with the ICO, give your registration number here. Most businesses that process personal data electronically need to pay the data protection fee. ]
What we collect
- When you order — your name, delivery and billing address, email, phone number and what you bought.
- When you pay — we do not see or store your card number. The card fields belong to our payment provider and the details go straight to them.
- When you subscribe to emails — your email address, and which emails you have opened.
- When you contact us — whatever you put in the message.
- When you browse — cookie and device data, described under Cookies below.
Why we have it, and our lawful basis
- To fulfil your order — because we have a contract with you.
- To manage a subscription — the same contract.
- To answer your message — our legitimate interest in running the shop and replying to people.
- To send marketing email — your consent, or the soft opt-in that applies to existing customers. Either way there is an unsubscribe link in every email and it works.
- To keep tax and accounting records — because the law requires it.
Who we share it with
Only the people who need it to get your order to you: [ payment provider ], [ carrier ], [ email platform ], [ website host ] and our accountant. We do not sell your data and we do not share it for anyone else’s marketing.
[ If any of these are outside the UK, say so and say what safeguards are in place. ]
How long we keep it
- Order and transaction records — [ 6 years, for tax purposes ].
- Marketing list — until you unsubscribe, then we keep a suppression record so we do not email you again.
- Enquiries — [ 0 years ] after the matter is closed.
Cookies
The cookies that make the basket and checkout work are strictly necessary and do not need consent. Anything used for analytics or advertising does need your consent, and you give or refuse it through the cookie banner. You can change your mind at any time.
[ List the actual cookies once the site is built — name, purpose and how long each lasts. ]
Your rights
You have the right to ask for a copy of your data, to have it corrected, to have it deleted, to restrict or object to how we use it, and to have it transferred elsewhere. Where we rely on your consent, you can withdraw it at any time. Ask us at hello@glowbykd.com and we will respond within one month.
Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, or on 0303 123 1113.