Christine Gibson (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you visit christinegibson.co.uk or purchase products from our online shop.

Who we are

Christine Gibson is the data controller for this website. We are based in Coleorton, Leicestershire, United Kingdom. If you have any questions about this policy or how we handle your data, please contact us.

What data we collect

Information you provide

• Account details: Your name and email address if you create a customer account.
• Order details: Your name, billing address, shipping address, email address, and phone number when you place an order.
• Payment information: Payment is processed securely by our payment provider (Stripe/PayPal). We do not store your full card details on our servers.
• Messages: Any information you include when you contact us via our contact form or by email.
• Newsletter: Your email address if you choose to subscribe to our mailing list.

Information collected automatically

• Cookies: We use cookies and similar technologies to operate our shop, remember items in your cart, and understand how visitors use our site. See our Cookie Notice below.
• Usage data: Your IP address, browser type, pages visited, and referring URLs, collected through our analytics tools.

How we use your data

• To process and fulfil your orders, including shipping and returns.
• To communicate with you about your orders, account, and enquiries.
• To send marketing emails if you have subscribed to our newsletter (you can unsubscribe at any time).
• To improve our website, products, and services.
• To prevent fraud and protect the security of our shop.
• To comply with our legal and tax obligations.

Legal basis for processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following lawful bases:

• Contract: To process your orders and deliver products you have purchased.
• Consent: For newsletter subscriptions and non-essential cookies.
• Legitimate interests: To improve our website, respond to enquiries, and prevent fraud.
• Legal obligation: To retain records for tax and accounting purposes.

Sharing your data

We do not sell your personal data. We share it only with trusted third parties who help us operate our business:

• WooCommerce: Our e-commerce platform that powers our online shop.
• Payment processors: Stripe and/or PayPal to process your payments securely.
• Shipping carriers: Royal Mail or other couriers to deliver your orders.
• Hosting provider: The company that hosts our website servers.
• Email provider: The service we use to send order confirmations and newsletters.

These providers act as data processors on our behalf and are bound by their own privacy and security obligations.

International transfers

Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or the UK International Data Transfer Agreement, to protect your data to UK standards.

How long we keep your data

We retain your personal data only for as long as necessary:

• Order records: Retained for 6 years for tax and accounting purposes.
• Customer accounts: Retained while your account is active. You may request deletion at any time.
• Newsletter data: Retained until you unsubscribe.
• Enquiry data: Retained for up to 12 months after resolution.

Your rights

Under UK GDPR you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your personal data (“right to be forgotten”).
• Restriction: Ask us to limit how we use your data.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to our processing of your data.
• Withdraw consent: Withdraw consent for processing based on consent at any time.

To exercise any of these rights, please contact us. If you are not satisfied with our response, you may complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Cookies

Our website uses the following types of cookies:

• Essential cookies: Required for the shop to function (cart, checkout, account login). These cannot be disabled.
• Analytics cookies: Help us understand how visitors use the site so we can improve it.
• Marketing cookies: Used to show relevant content and advertisements if applicable.

You can manage or disable non-essential cookies through your browser settings or our cookie consent tool.

Security

We take reasonable technical and organisational measures to protect your personal data, including SSL encryption for all data transmitted between your browser and our server, secure payment processing, and restricted access to customer data. However, no method of transmission over the internet is 100% secure.

Children’s privacy

Our website and shop are not directed at children under 16, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us.