This page is a completion draft. It must not be treated as a final privacy notice until the legal entity and actual data processing have been verified.
Data controller
[COMPLETE: legal business name, registered address, company number and official email]. These details must match the entity operating the website and processing any orders.
What data is processed?
List only data actually collected, such as contact information, order information, technical logs or cookie preferences. State the purpose and legal basis for each category.
Retention and recipients
[COMPLETE: retention periods by category, hosting provider, analytics provider, payment provider and other processors]. Put processor agreements in place where required.
Visitor rights
Explain how people can request access, correction, deletion, restriction, objection and portability, and identify the supervisory authority to which they may complain.
Cookies and changes
Create an accurate cookie inventory and obtain consent where legally required. State the date the notice was updated.