Privacy notice

Client to supply. This text is a placeholder. Daholyne Fashion's own privacy notice will be prepared by its solicitor, or adopted from a template pack in its own name, before the shop opens for orders.

What the notice must cover

1. Who is responsible. The trader as controller of the personal data, with its contact details from the legal particulars record.
2. What is collected. Name, email address, telephone number, delivery address and order details; email addresses left for "notify me"; and what customers write in the returns and fault forms. Card details are handled by the payment provider and are not stored by the shop.
3. Why, and on what lawful basis. Fulfilling orders (contract); keeping tax and accounting records (legal obligation); "notify me" emails (consent); preventing fraud and keeping records of returns and faults (legitimate interests).
4. Who receives it. The payment provider, the delivery carrier, the email provider and the hosting provider.
5. Transfers outside the UK. Any such transfer, and the safeguard relied on.
6. How long it is kept. A retention period for each kind of record.
7. The customer's rights. Access, correction, erasure, restriction, objection and portability; withdrawing consent at any time; and complaining to the Information Commissioner's Office.
8. What must be provided. Which details are needed to place an order, and what happens if they are not given.
9. Automated decisions. That none are made, or what they are.
10. Changes. How changes to the notice are made and dated.