Draft: a starting point for an online shop using Stripe and PayPal. Fill in the business name, address and contact email, and confirm the newsletter provider once chosen. This isn’t legal advice, so have it checked before launch.
This policy explains what personal information I.M. Baits & Tackle (“we”, “us”) collects when you use this website or buy from us, why we collect it and what your rights are. We are the data controller for this information. Contact: [business name and address], [email address].
What we collect
- Orders: your name, delivery and billing address, email address, phone number (if given) and what you bought.
- Accounts: if you create an account, your login details and order history.
- Messages: anything you send us by email or social media.
- Newsletter: your email address, only if you sign up.
- Technical data: your IP address and basic browser information, kept in our server logs for security.
We don’t see or store your full card details. Card payments are processed by Stripe, and PayPal payments by PayPal, under their own privacy policies.
Why we use it
- To take payment for, pack and deliver your order, and deal with returns (to perform our contract with you).
- To keep accounting records, which the law requires.
- To answer your questions, and to keep the website secure (our legitimate interests).
- To send the newsletter, only with your consent. You can unsubscribe at any time.
Who we share it with
Only the people who help us run the shop: our payment providers (Stripe, PayPal), the courier delivering your parcel, our website host, and our accountant. We never sell your information.
Cookies
We use only the cookies needed for the shop to work, such as remembering your basket and keeping you logged in. Our payment providers set their own cookies during checkout to prevent fraud. We don’t use advertising or tracking cookies.
How long we keep it
Order records are kept for six years for tax purposes. Account details are kept until you ask us to close your account. Newsletter details are kept until you unsubscribe.
Your rights
Under UK data protection law you can ask for a copy of your information, ask us to correct or delete it, object to how we use it, or withdraw consent. Email us to do any of these. If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.