PRIVACY POLICY

Last updated: [LAST UPDATED DATE]

This Privacy Policy explains how Pandas Ribbons collects, uses, stores and shares personal information when you visit our website, make a purchase, contact us or interact with our services.

Who We Are

Pandas Ribbons is the trading name of [LEGAL BUSINESS NAME].

Business address: [BUSINESS ADDRESS]

Email: [SUPPORT EMAIL]

Telephone: [PHONE NUMBER]

Company number: [COMPANY NUMBER, IF APPLICABLE]

VAT number: [VAT NUMBER, IF APPLICABLE]

For applicable data protection law, [LEGAL BUSINESS NAME] is the controller of the personal information described in this policy, except where another party acts as an independent controller.

Personal Information We Collect

Depending on how you interact with us, we may collect:

Name.

Billing and delivery address.

Email address.

Telephone number.

Order and transaction information.

Products viewed, purchased, returned or added to a basket.

Account and login information.

Customer service correspondence.

Marketing preferences.

Device, browser and network information.

IP address.

Cookie and analytics information.

Fraud prevention and security information.

Any other information you voluntarily provide.

Payment Information

Payments are processed by authorised third-party payment providers.

Pandas Ribbons does not normally receive or store the full payment card number used during checkout.

Payment providers may process payment information according to their own privacy policies.

How We Collect Information

We collect personal information:

Directly from you when you order, create an account, subscribe or contact us.

Automatically through cookies, pixels, analytics and similar technologies.

From payment, delivery, fraud prevention and technology providers.

From advertising and marketing platforms where permitted.

From publicly available or lawfully obtained sources.

How We Use Personal Information

We may use personal information to:

Process and fulfil orders.

Take and verify payments.

Provide confirmations and delivery updates.

Manage returns, refunds and enquiries.

Create and administer customer accounts.

Prevent fraud, misuse and security incidents.

Maintain and improve our website.

Understand how visitors use the website.

Personalise content and shopping experiences.

Send marketing communications where permitted.

Measure advertising performance.

Comply with legal, tax, accounting and regulatory obligations.

Establish, exercise or defend legal claims.

Protect customers, our business and others.

Lawful Bases

Where UK data protection law applies, we rely on one or more lawful bases:

Contract, where processing is necessary to manage and fulfil an order.

Legal obligation, where processing is required by law.

Legitimate interests, including security, fraud prevention, customer service and business improvement.

Consent, including certain marketing activities and non-essential cookies.

Legal claims, where processing is necessary to establish, exercise or defend legal rights.

Marketing Communications

We may send marketing emails where you have consented or where otherwise permitted by law.

You can unsubscribe at any time using the unsubscribe link in an email or by contacting [SUPPORT EMAIL].

Unsubscribing from marketing does not prevent us from sending service messages relating to orders, payments, returns, security or accounts.

Cookies and Similar Technologies

We use cookies and similar technologies to operate the website, remember preferences, understand usage, improve performance and, where consent is provided, support advertising and personalisation.

More information is available in our Cookie Policy.

Who We Share Information With

We may share personal information with:

Shopify and other website providers.

Payment processors.

Delivery carriers and fulfilment providers.

Customer service providers.

Email and marketing providers.

Analytics and advertising providers.

Fraud prevention and security providers.

Professional advisers, including accountants, lawyers and insurers.

Government authorities, regulators, courts or law enforcement where legally required.

A buyer or successor in connection with a business sale or restructuring.

Service providers receive only the information reasonably required to perform their services.

Shopify

Our store is hosted on Shopify.

Shopify processes personal information to provide hosting, checkout, security and e-commerce services.

Shopify may act as our processor for some activities and as an independent controller for others.

International Transfers

Some service providers may process information outside the United Kingdom.

Where required, appropriate legal safeguards are used for international transfers.

How Long We Keep Information

We keep personal information only for as long as reasonably necessary for:

Completing and supporting orders.

Meeting tax, accounting and legal obligations.

Resolving disputes.

Preventing fraud.

Enforcing agreements.

Maintaining appropriate business records.

Retention periods vary according to the type of information and purpose.

Security

We use reasonable technical and organisational measures intended to protect personal information.

However, no internet transmission or storage system can be guaranteed to be completely secure.

Customers should use strong passwords and protect access to their accounts and email.

Your Rights

Depending on applicable law, you may have the right to:

Request access to your information.

Request correction of inaccurate information.

Request deletion.

Request restriction of processing.

Object to certain processing.

Request transfer of certain information.

Withdraw consent where processing is based on consent.

Complain to the relevant data protection authority.

These rights may be subject to legal conditions and exemptions.

To make a request, contact [SUPPORT EMAIL].

We may need to verify your identity.

Children’s Information

Our products are intended to be purchased by adults for children.

Our website and checkout are not intended for independent use by children.

We do not knowingly request personal information directly from children.

If you believe a child has provided information without appropriate authorisation, contact [SUPPORT EMAIL].

Third-Party Links

Our website may contain links to third-party websites.

We are not responsible for the privacy practices of websites we do not control.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, technology, legal obligations or business practices.

The revised policy will be published with an updated date.

Complaints

If you have concerns about how we handle personal information, contact us first.

You may also have the right to complain to the UK Information Commissioner’s Office or another competent authority.

Contact Us

Pandas Ribbons / [LEGAL BUSINESS NAME]

Email: [SUPPORT EMAIL]

Telephone: [PHONE NUMBER]

Address: [BUSINESS ADDRESS]