This Privacy Policy describes how annieandthehooks.com (the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

Welcome to Annie and The Hooks. This Privacy Policy outlines how we collect, use, and protect your personal information when you visit our website, annieandthehooks.com, and use our eCommerce services. We are committed to safeguarding your privacy and ensuring that your personal data is protected in compliance with UK data protection laws, including the General Data Protection Regulation (GDPR).

By using our website and purchasing products from us, you agree to the collection and use of your personal information as outlined in this Privacy Policy

We collect the following types of personal information when you use our website:

• Personal Identification Information: Name, email address, billing and shipping addresses, phone number.
• Payment Information: Credit or debit card details (processed securely by a third-party payment provider).
• Account Information: Username, password, purchase history, and preferences.
• Technical Data: IP address, browser type, and version, device type, operating system, geographic location, and other technical information automatically collected via cookies.
• Marketing Data: Your preferences regarding receiving marketing communications from us.

We use the information we collect for the following purposes:

• Processing Orders: To process payments, fulfill orders, and send order-related communications.
• Customer Service: To respond to your inquiries and provide customer support.
• Website Improvement: To enhance the functionality of our website and improve user experience.
• Marketing Communications: To send you promotional emails, newsletters, or other marketing materials (only if you have opted-in to receive them).
• Legal Compliance: To comply with legal obligations, resolve disputes, and enforce our agreements.

We process your personal data based on the following legal grounds:

• Contractual Necessity: To process your orders and provide the services you have requested.
• Legitimate Interests: To improve our services, protect our business, and communicate with you.
• Consent: If we send you marketing communications, this will be based on your explicit consent, which you can withdraw at any time.
• Legal Obligation: To comply with legal and regulatory requirements.

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including:

• To process your orders and comply with any legal obligations (such as tax and accounting requirements).
• For any warranty or customer service purposes.

After this period, we securely delete or anonymize your personal data.

We do not sell your personal data. However, we may share your information with the following trusted third parties for specific purposes:

• Payment Processors: To securely process payments (e.g., PayPal, Stripe).
• Shipping Providers: To deliver your orders (e.g., Royal Mail, Hermes).
• Service Providers: To assist in website hosting, marketing, and analytics.
• Legal Requirements: If required by law or to protect our rights or the safety of others.

All third-party service providers are required to handle your data in compliance with GDPR and other applicable laws.

We take reasonable measures to ensure the security of your personal information. This includes:

• Using secure payment gateways for processing payment details.
• Implementing encryption and secure socket layer (SSL) technology for data transmission.
• Regular security reviews and updates to our website infrastructure.

Despite these efforts, please note that no method of data transmission over the internet is 100% secure. We cannot guarantee the absolute security of your information.

As a UK resident, you have the following rights in relation to your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request to correct or update your personal data.
• Right to Erasure: You can request to delete your personal data (subject to certain conditions).
• Right to Restriction: You can request the restriction of processing your personal data.
• Right to Object: You can object to certain processing activities, such as direct marketing.
• Right to Data Portability: You can request to transfer your personal data to another organization in a structured, commonly used format.

We use cookies and similar tracking technologies to improve your experience on our website. Cookies are small text files that are placed on your device when you visit our site. You can manage cookie preferences through your browser settings.

We do not transfer your personal data outside the UK or the European Economic Area (EEA), except where necessary for processing payments through international payment providers or shipping services. Any such transfer will comply with applicable data protection laws.

Our website and services are not intended for children under the age of 18. We do not knowingly collect personal data from children. If we learn that we have inadvertently collected personal data from a child under the age of 18, we will delete such data as soon as possible.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Please review this policy regularly to stay informed about how we protect your personal data.

Last updated 2nd Januray 2025