Privacy notice
The English version of this page governs.
SAMPLE / Draft, not legal advice.
This page is a template. [SHOP LEGAL NAME] must check it with a qualified adviser (a solicitor or data protection adviser) and make sure it matches what the shop really does before the site goes live. Effective date: [EFFECTIVE DATE].
⚠️ Items marked ⚠️ are assumptions that have not been checked and need an adviser's review.
Who we are
[SHOP LEGAL NAME], trading as [SHOP NAME], of [SHOP ADDRESS LINE 1], [SHOP ADDRESS LINE 2], [SHOP TOWN] [SHOP POSTCODE], is the controller of the personal data described here.
You can contact us by phone on [SHOP PHONE], by email at [SHOP CONTACT EMAIL], or in person at the shop.
Our registration with the Information Commissioner's Office (ICO): [SHOP ICO REGISTRATION STATUS].
What this website collects
This website does not collect personal data from you. It has no forms, no accounts, no analytics, no advertising and no cookies. You cannot order or pay on the website itself. The site does not remember your language choice.
See our cookie note for the files the site stores on your device so that it works offline.
Hosting
This website is hosted by [HOSTING PROVIDER]. When you visit, your browser sends technical data to the host, such as your IP address, browser type and the pages requested. The host uses this to deliver the pages and keep the service secure. ⚠️ We have not checked how long [HOSTING PROVIDER] keeps these server logs, or where it stores them.
While this website is a SAMPLE preview, it runs on [HOSTING PROVIDER]. The SAMPLE preview is not the shop's live website.
Ordering on WhatsApp (only if we offer it)
If the website shows an "Order on WhatsApp" button, tapping it opens a chat with our shop number, [WHATSAPP NUMBER]. The website itself does not see or keep your message.
When you message us, we receive your phone number, the name on your WhatsApp profile and what you write. We use it to answer you and to prepare your order for collection. Our lawful basis is that this is needed to take steps you ask for before a contract, and to carry out that contract. ⚠️ Where we reply to general questions, our basis is our legitimate interest in answering customers.
WhatsApp is provided by WhatsApp (part of Meta). It handles your messages under its own terms and privacy policy. ⚠️ Whether Meta acts for us or for itself has not been checked.
We delete order chats [RETENTION 30 DAYS] after your collection, unless we need them longer to deal with a problem or a legal claim.
Allergies: please do not send them on WhatsApp
Please do not send details of your allergies or other health information on WhatsApp. If you have an allergy or intolerance, phone us on [SHOP PHONE] or speak to a member of staff in the shop. We will not write down your allergy details. ⚠️ Details of a person's allergies are health data, which the law treats as special-category data.
Phone and email
If you phone or email us, we use your details only to reply to you. Our phone and email services are provided by [EMAIL AND PHONE PROVIDERS].
Money transfer and parcel services (only if we show these notices)
The website may show a notice about a money transfer service from [PROVIDER NAME] or a parcel service from [PARCEL PROVIDER NAME] at our shop. This website does not collect any data for these services. If you use them at the shop, the provider collects your details for itself, under its own privacy notice. ⚠️ We assume each provider is a separate controller; this has not been checked with the providers.
The Books page (switched off)
The website has an owner's Books page for the shop's own bookkeeping. It is not for customers. SAMPLE, not tax advice.
Uploaded statements go to [MTD API PROVIDER]. In this version the upload is switched off and the page sends nothing. Turning the upload on is a later step: it needs a data processing agreement with [MTD API PROVIDER] and an adviser's review first, and it stays off until then.
If the upload is turned on later, bank statements uploaded by the shop would be sent to [MTD API PROVIDER] to prepare the shop's figures. Statements can include personal data, such as the names of people who paid us or whom we paid. ⚠️ We expect [SHOP LEGAL NAME] to be the controller and [MTD API PROVIDER] to act as our processor under a written data processing agreement. ⚠️ How long [MTD API PROVIDER] keeps statements, and our lawful basis (expected to be our legal obligation to keep tax records, or our legitimate interest in running our books), must be confirmed before the upload is turned on. ⚠️ Financial data is not special-category data, but we treat it as high-risk.
Who sees your information
Only our staff who need it, WhatsApp (Meta) for WhatsApp messages, [EMAIL AND PHONE PROVIDERS] for phone and email, and [HOSTING PROVIDER] for website technical data. We may also share information if the law requires it, for example with the police or a regulator.
Your rights
You have the right to ask for a copy of your personal data, to have it corrected or deleted, and to object to or restrict how we use it. To make a request, contact us using the details above. We will reply within one month. ⚠️ This can be extended in some cases.
Complaints
If you are unhappy with how we have used your personal data, please tell us first, by email, by phone or in person. Our contact for this is [STAFF CONTACT]. We will acknowledge your complaint within 30 days.
You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, helpline 0303 123 1113.
Language
This page is available in English and Romanian. If the two versions differ, the English version governs.
Changes
We may update this notice. The effective date at the top shows the current version.