Privacy Policy

We collect several types of information from and about users of our website and services:

Personal Identification Information

• Name and contact details (email address, postal address, telephone number)
• Account credentials (username, password)
• Billing and delivery addresses
• Payment information (processed securely through Stripe)

Transaction Information

• Purchase history and order details
• Shopping cart contents
• Product preferences and wishlists

Technical Information

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on site
• Referring website addresses
• Cookies and similar tracking technologies

Communication Data

• Customer service correspondence
• Newsletter subscription preferences
• Product reviews and feedback

We use the information we collect for the following purposes:

Order Processing & Fulfilment

• Processing and delivering your orders
• Managing payments and preventing fraud
• Sending order confirmations and updates
• Handling returns and refunds

Account Management

• Creating and maintaining your customer account
• Providing customer support
• Managing your preferences and settings

Marketing & Communication

• Sending promotional emails and newsletters (with your consent)
• Personalising your shopping experience
• Recommending products based on your interests
• Conducting surveys and gathering feedback

Legal & Operational

• Complying with legal obligations
• Protecting against fraud and abuse
• Improving website functionality and user experience
• Analysing website traffic and usage patterns

Under UK GDPR, we process your personal data based on the following lawful grounds:

• Contract Performance: Processing necessary to fulfil our contract with you (e.g., completing orders)
• Legitimate Interest: Processing for our business interests (e.g., fraud prevention, website improvements) without overriding your rights
• Consent: Where you have given explicit permission (e.g., marketing emails)
• Legal Obligation: Where we must comply with UK law (e.g., accounting, tax requirements)

You have the right to withdraw consent at any time where we rely on consent as our legal basis.

We may share your personal data with the following categories of recipients:

• Payment processors (Stripe) for secure transaction handling
• Delivery and courier services for order fulfilment
• Email service providers for communications
• IT and hosting providers for website operation
• Law enforcement or regulatory authorities when required by law
• Professional advisers (lawyers, accountants) as necessary
• In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner

Important: We never sell your personal data to third parties for marketing purposes.

• Account Data: Retained while your account is active, plus 6 months after closure
• Transaction Records: Retained for 6 years to comply with UK accounting and tax laws
• Marketing Data: Retained until you unsubscribe or withdraw consent
• Website Analytics: Anonymised data retained for 26 months

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data
• Right to Restriction: Request limitation of processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to certain processing activities
• Right to Withdraw Consent: Withdraw consent at any time

We use cookies and similar technologies to enhance your browsing experience and analyse website usage.

• SSL/TLS encryption for data transmission
• PCI DSS compliant payment handling through Stripe
• Restricted access to personal data
• Regular security updates and audits
• Secure password hashing

Our website may contain links to third-party websites, plugins, or applications. We are not responsible for the privacy practices of these external sites.

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: info@pumpernickel-online.co.uk
• Phone: 01234 348179
• Post: Pumpernickel Direct Ltd, 7 The Arcade, Bedford, MK40 1NS, UK