Privacy Policy – Van Glaze

Last Updated: [Insert Date]

1. Who We Are

Van Glaze (hereinafter referred to as “we,” “us,” or “our”) is a trading name of [Insert Your Registered Legal Entity Name, e.g., Van Glaze Ltd] .

• Registered Office Address: [Insert Full Registered Address]

• Company Registration Number: [Insert Company Number] (Registered in England & Wales)

• Contact Email: [Insert Privacy/Data Email, e.g., privacy@vanglaze.co.uk]

• Phone Number: [Insert Van Glaze Phone Number]

Our website address is: [Insert Your Van Glaze URL] .

We are committed to protecting your privacy and handling your data in an open and transparent manner. This policy explains how we collect, use, store, and protect your personal information when you interact with our website, products, and services.

---

2. What Personal Data We Collect and Why

We collect different types of personal data depending on how you interact with us:

---

3. How We Use Your Data (Lawful Basis)

Under UK GDPR, we rely on the following lawful bases to process your data:

• Contractual Necessity: To fulfill your orders, deliver products, and process refunds.

• Legitimate Interest: To improve our website, prevent fraud, and send you relevant non-marketing service emails (e.g., order confirmations).

• Consent: To send you marketing newsletters and promotional materials. You can withdraw this consent at any time.

---

4. Cookies

We use cookies to enhance your browsing experience and remember your preferences.

• Strictly Necessary: These are essential for the website to function (e.g., cart contents, login sessions). These do not require consent.

• Functional & Performance: We use cookies to remember your login details, display preferences, and comment details (which last up to 1 year).

• Analytics & Marketing: We use third-party analytics and advertising cookies to understand traffic and show relevant content. We will only set these non-essential cookies with your prior consent via our cookie consent banner.

Note: Embedded content (e.g., videos) from other websites may set their own cookies. We recommend reviewing their privacy policies.

---

5. Analytics & Third-Party Tracking

Google Analytics
We use Google Analytics to monitor traffic and user behavior. Google processes this data in the USA. We have ensured appropriate safeguards are in place via Standard Contractual Clauses (SCCs) for international data transfers.
You can opt-out of Google Analytics tracking here: [Google Analytics Opt-out Browser Add-on].

Live Chat
If we offer live chat functionality, conversations may be logged for training and support purposes. Your usage data during these sessions may be processed by our third-party provider(s).

---

6. Sharing Your Data with Third Parties

We do not sell, trade, or rent your personal data to third parties for their own marketing purposes. However, we do share necessary data with trusted service providers to operate our business:

• Payment Processors: We pass your payment total and billing info to our secure payment gateways (e.g., [Insert your processors, e.g., Stripe, PayPal] ). We do not store your card details.

• Couriers & Fulfillment: We share your name, address, email, and phone number with our logistics partners to generate shipping labels and provide delivery updates.

• Order Management Systems: We share order data with our backend software (e.g., [Insert your OMS, e.g., Storefeeder] ) to minimize errors and process orders efficiently.

• Spam Protection: Visitor comments may be checked through automated spam detection services.

Every third-party provider we use is contractually bound to process your data only on our instructions and in compliance with data protection laws.

---

7. Data Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Order Information: Stored for 5 years to comply with HMRC tax and accounting regulations.

• Contact Form Submissions: Retained for up to 90 days for customer service follow-ups, unless they result in an order (which falls under the 5-year rule).

• Comments & Reviews: Retained indefinitely (or until you request deletion) to maintain site continuity.

• Newsletter Data: Retained until you unsubscribe or request removal.

• Account Data: Retained until you close your account, or after a period of inactivity as defined by our internal policies.

---

8. Your Data Protection Rights

Under UK data protection law, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you (free of charge).

• Right to Rectification: Correct any inaccurate or incomplete data we hold.

• Right to Erasure (“Right to be Forgotten”): Request deletion of your data, where we are not legally obliged to retain it.

• Right to Restrict Processing: Request that we limit how we use your data.

• Right to Data Portability: Request a machine-readable export of your data.

• Right to Object: Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, please contact us at [Insert Email Address] . We will respond within 30 days as required by law.

---

9. How We Protect Your Data

We take data security seriously and implement robust technical and organisational measures, including:

• Encryption: Secure HTTPS (SSL) encryption for all data transmitted between your browser and our servers.

• Access Controls: Strict role-based permissions—only authorized staff (e.g., Administrators and Shop Managers) have access to customer data, and solely to fulfill orders or provide support.

• System Monitoring: We continuously monitor login attempts, changes to website files, and unusual activity to prevent unauthorized access.

• Staff Training: All employees are trained on data protection principles and the importance of handling personal information confidentially.

---

10. Data Breach Procedures

We have a clearly defined incident response plan:

1. If we suspect a data breach, we will investigate immediately.

2. We will notify the Information Commissioner’s Office (ICO) within 72 hours of becoming aware of the breach, where feasible.

3. If the breach is likely to result in a high risk to your individual rights and freedoms, we will inform you directly without undue delay.

4. We maintain internal records of all data breaches for compliance audit purposes.

---

11. International Data Transfers

Some of our third-party providers (such as cloud storage or analytics platforms) may be based outside the UK. Whenever we transfer your data outside the UK, we ensure that:

• The country has an adequate level of protection (e.g., UK adequacy regulations); or

• We implement Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement to ensure your data is safeguarded to UK standards.

---

12. Children’s Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately so we can delete it.

---

13. Updates to This Policy

We reserve the right to update this Privacy Policy periodically to reflect changes in technology, legislation, or our business operations. We will post any updates on this page, and if the changes are significant, we will provide a more prominent notice (e.g., via email or a site banner).

---

14. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your data, please contact our Data Protection point of contact:

• Email: [Insert Dedicated Email]

• Phone: [Insert Van Glaze Phone Number]

• Postal Address: [Insert Full Registered Address]

If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at: https://ico.org.uk/ or telephone 0303 123 1113.