This policy specifies what personal data we collect, why we collect it, what we do with it and the choices you have, including how to access and update information.
Who we are
CuddleCo Ltd is a company registered in England and Wales (Company registration number: 07768026)
Information we collect
We collect personal information about you when you visit our website, or if you communicate with us by phone, e-mail, via social media or instore.
We collect: personal details such as your name, address, date of birth, email address, phone number and other contact information along with transaction information, such as the product you purchased, its price, your method of payment and your payment details.
How we use your personal information
When we're required to enter into a contract with you
We use your personal information to process your orders and payments or to give you a refund.
Where you have provided consent
We use email to communicate with you about our products, promotions, competitions or events, where you tick a box.
Where there is a Legitimate Interest
As a Company we are required to process your personal data in order to carry out certain tasks in our business. In such cases, processing of personal data can be justified on grounds of legitimate interest.
When we're required to comply with our Legal Obligation
We'll use your personal information to comply with our legal obligations including:
- To identify you when you contact us
- To verify the accuracy of data that we hold about you
- To assist HMRC and/or the Police and/or other regulatory bodies in relation to an investigation by a public authority.
Where it is in your Vital Interest
In certain circumstances it is in your vital interests for us to process your personal information. We may need to contact you if there are any urgent safety or product recall notices or where we otherwise reasonably believe that the processing of your personal information will prevent or reduce any potential harm to you.
Who we share information with
Within our business
Our service providers
We work with partners so they can process your personal information on our behalf and only where they meet our standards on the processing of data and security. We only share information that helps them provide their services to us or to help them provide their services to you.
Other organisations and individuals
We may transfer your personal information to other organisations in certain scenarios. For example:
- If required to by law, under any code of practice by which we are bound or we're asked to do so by a public or regulatory authority such as the Police or the Department for Work and Pensions
- Information may also be shared with fraud prevention agencies to prevent fraudulent claims
- If we need to do so in order to exercise or protect our legal rights, users, systems and services
- In response to requests from individuals (or their representatives) seeking to protect their legal rights or the rights of others.
- With emergency services (if you make an emergency call), including your approximate location
How long we keep your personal information
We can only keep your personal data for as long as necessary for the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
The precise length of time we hold your personal data for varies depending on the individual circumstances, but in determining the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
We regularly review our retention periods to ensure that we are not keeping your data for longer than necessary. Details of retention periods for different aspects of your personal data are available by contacting us.
We do not retain personal information in an identifiable format for longer than is necessary.
Access to Information held about you
You have the right to request what personal information we hold about you. If any of the personal information we hold about you is inaccurate or out of date, you may ask us to correct it.
Right to stop or limit our processing of your data
You have the right to object to us processing your personal information if we’re not entitled to use it any more, to have your information deleted if we are keeping it too long or have its processing restricted in certain circumstances.
Where we rely on our legitimate interests, as set out under 'How we use your personal information', you may object to us using it for these purposes. If we agree that your objection is justified in accordance with your rights under data protection laws, we’ll permanently stop using your data for those purposes. Otherwise we’ll provide you with our justification as to why we need to continue using your data.
You can ask us to restrict the use of your personal information if:
- It isn't accurate.
- It has been used unlawfully but you don't want us to delete it.
- It's not relevant any more, but you want us to keep it for use in legal claims.
- You’ve already asked us to stop using your data but you’re waiting for us to tell you if we’re allowed to keep on using it.
Please note that we may be required by law to retain certain information. Before we are able to provide you with any information or correct any inaccuracies, we may ask you provide other details and proof of identity and/or address to help us respond to your request.
Opting out of Direct marketing
If you have previously opted in, we won't send you further marketing messages if you tell us not to. You can click onto the "unsubscribe" link in any communication that we send to you by email which will automatically unsubscribe you from that type of communication. You can also contact us directly.
Please note that it may take up to 30 days to process your request.
Third party websites
Our website contains links to other websites run by other organisations which we do not control. This policy does not apply to those other websites so we encourage you to read their privacy statements.
The main purposes for which cookies are used are:
- For technical purposes essential to effective operation of our websites, particularly in relation to on-line transactions and site navigation.
- For us to market to you, particularly web banner advertisements and targeted updates.
- To let us collect information about your browsing and shopping patterns, including to monitor the success of campaigns, competitions etc. This depends on which cookies you disable, but in general the website may not operate properly if cookies are switched off. If you only disable third party cookies, you will not be prevented from making purchases on our sites. If you disable all cookies, you won’t be able to complete a purchase on our sites.
If you have a question or a complaint about this policy, the way your personal information is handled, please contact us by one of the following means:
By email: firstname.lastname@example.org
CuddleCo Limited, Cornbrook, 2 Brindley Road, Manchester M16 9HQ
Complaining to the Data Protection Regulator
You have the right to complain to the Information Commissioners Office (ICO) if you are concerned about the way we have processed your personal information. Please visit the ICO's website for further details at: https://ico.org.uk
Changes to this Policy
We may review this policy from time to time and any changes will be notified to you by posting an updated version on our website and/or by contacting you by email.