Privacy Policy
This Privacy Policy explains what personal data Hexapoda collects, why we collect it, and what rights you have. We are the “data controller” for the information you give us. [Placeholder wording: review against your actual data processors and UK GDPR obligations before relying on it.]
Who we are
Hexapoda — [Hexapoda Ltd], [registered office address], company number [company registration number]. For any privacy question, contact us via our contact page or email [privacy@hexapoda.co.uk].
What we collect
- Order & account data — your name, billing and delivery address, email, phone number and order history.
- Payment data — handled by our payment providers (e.g. WooCommerce Payments / PayPal). We do not store full card numbers.
- Support & claims data — messages you send us, and any photos or video you upload to support a Dead on Arrival claim.
- Technical data — IP address, browser and device information, and cookie data (see our Cookie Policy).
Why we use it, and our lawful basis
- To fulfil your order (contract) — processing payment, dispatching goods, handling returns and DOA claims.
- To run our business (legitimate interests) — fraud prevention, site security, improving our products and service.
- To comply with the law (legal obligation) — tax, accounting and consumer-law records.
- Marketing (consent) — we only send marketing emails if you have opted in, and you can unsubscribe at any time.
Who we share it with
We share data only as needed to run the store: payment processors, delivery and courier partners, our email/hosting providers, and professional advisers or authorities where legally required. We do not sell your personal data.
International transfers
Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.
How long we keep it
We keep order and financial records for as long as the law requires (typically six years for tax purposes), account data for as long as your account is active, and DOA evidence for as long as needed to resolve the claim and any related dispute.
Your rights
Under UK data protection law you have the right to access, correct, delete or restrict the use of your personal data, to object to certain processing, to data portability, and to withdraw consent. To exercise any of these, contact us. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Cookies
We use cookies and similar technologies as described in our Cookie Policy.
Changes
We may update this policy from time to time; the current version is always published here.
Last updated: [date].