Privacy Policy
fatemabridal
Last updated: [Insert Date]
1. Who We Are
fatemabridal is a clothing retailer based in the United Kingdom.
Our registered address is: [Insert Address]
Email: [Insert Email]
Phone: [Insert Phone]
We are the “data controller” of your personal data under the UK General Data Protection Regulation and the Data Protection Act 2018.
2. What Data We Collect
When you make a purchase or request a return, we may collect:
- Name
- Contact details (email, phone number, address)
- Proof of purchase (receipt details)
- Payment information (processed securely via third parties)
- Return/refund details (items returned, reason for return)
3. How We Use Your Data
We use your personal data to:
- Process returns, refunds, or exchanges
- Verify proof of purchase
- Prevent fraud and abuse of our returns policy
- Provide customer support
- Comply with legal obligations (e.g., accounting records)
4. Legal Basis for Processing
We process your data under the following lawful bases:
- Contract – to complete your purchase or return
- Legal obligation – to comply with tax and accounting laws
- Legitimate interests – to manage returns and prevent fraud
5. How Long We Keep Your Data
We retain your data only as long as necessary:
- Transaction and return records: up to 6 years (for HMRC compliance)
- Customer service communications: up to 2 years
6. Sharing Your Data
We may share your data with:
- Payment processors
- Delivery/returns partners
- Accountants or legal advisors
- Regulatory authorities (if required)
We do not sell your personal data.
7. Your Rights
Under UK data protection law, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion (“right to be forgotten”)
- Restrict or object to processing
- Data portability
You can exercise these rights by contacting us at [Insert Email].
You also have the right to complain to the Information Commissioner’s Office (ICO).
8. Returns Policy Data Handling
When processing returns:
- We may request proof of purchase or ID (for fraud prevention)
- We record return history to enforce fair use of our returns policy
- Refunds are processed using your original payment method where possible
9. Data Security
We take appropriate security measures to protect your data, including:
- Secure payment systems
- Restricted staff access
- Encrypted digital records where applicable
10. Changes to This Policy
We may update this policy from time to time. Updates will be posted on our website or in-store.
11. Contact Us
If you have any questions about this policy, contact us at:
Email: [Insert Email]
Address: [Insert Address]
If you want, I can also:
Add GDPR-compliant consent wording for marketing emails
Turn this into a combined Returns + Privacy Policy
Customize it for online stores (Shopify, Etsy, etc.)