Privacy Policy

This Privacy Policy explains how Arrosticrats (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit arrosticrats.co.uk or make a purchase from us.

Contact: orders@arrosticrats.co.uk

We may collect the following personal data:

• Identity data: name
• Contact data: email address, delivery address
• Transaction data: details of purchases you make from us
• Technical data: IP address, browser type and version, time zone, operating system (collected automatically via cookies and analytics)
• Usage data: information about how you use our website

We do not collect or store payment card details. Payments are processed securely by PayPal.

We use your personal data to:

• Process and fulfil your orders
• Send order confirmations and delivery updates
• Respond to your enquiries
• Notify you of upcoming events (only if you opt in)
• Improve our website and customer experience (via analytics)
• Comply with legal obligations

We will never sell your personal data to third parties.

We process your data on the following legal bases under UK GDPR:

• Contract: processing is necessary to fulfil your order
• Legitimate interests: to improve our website and communications
• Consent: for marketing communications and non-essential cookies (you may withdraw consent at any time)

We share your data only where necessary:

• PayPal: to process your payment
• Delivery providers: to fulfil your order
• Analytics providers (e.g. Google Analytics): to understand website usage, using anonymised data

All third-party processors are required to handle your data securely and in accordance with applicable data protection law.

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal and accounting requirements. Order data is typically retained for 7 years in line with HMRC requirements.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data (where applicable)
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, email us at orders@arrosticrats.co.uk. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. Our website uses HTTPS encryption for all data in transit.

We may update this Privacy Policy from time to time. The current version will always be available on this page with the date it was last updated.