Privacy policy

Last updated: 14th October 2024

Bad Toad is committed to respecting and protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website, make purchases, or otherwise interact with us. Our practices comply with the UK GDPR.

1. Who We Are

Bad Toad is a jewellery store specialising in handcrafted pieces, including rings and other items. For the purposes of data protection law, Bad Toad is the Data Controller of your personal data.

2. Data We Collect

We may collect personal data to process your orders, improve our services, and communicate with you. This includes:

  • Identity and Contact Data: Your name, email address, postal address, and phone number.

  • Transaction Data: Details about payments to and from you and other details of products you have purchased.

  • Technical Data: IP address, browser type, and browsing actions on our website.

  • Marketing Data: Preferences for receiving marketing and communications from us.

3. How We Use Your Data

We use your data in compliance with the UK GDPR, based on the following legal grounds:

  • Contractual Necessity: To process orders, deliver products, and manage customer service.

  • Legitimate Interests: To improve our website and services, and to protect our business.

  • Consent: For sending promotional emails and marketing communications. You can withdraw consent at any time.

  • Legal Obligation: To comply with tax, accounting, and other legal requirements.

4. Your Rights Under GDPR

Under the UK GDPR, you have the following rights:

  • Right to Access: You can request access to the personal data we hold about you.

  • Right to Rectification: You can ask us to correct any inaccurate or incomplete data.

  • Right to Erasure: In certain cases, you can request deletion of your personal data.

  • Right to Restrict Processing: You can request we suspend processing under specific circumstances.

  • Right to Data Portability: You can request a copy of your data in a structured, commonly used format.

  • Right to Object: You can object to our processing where we rely on legitimate interests, or to direct marketing.

To exercise these rights, please contact us at [contact email]. We aim to respond to requests within one month, as required by law.

5. Data Sharing and Third Parties

We do not sell your personal data. However, we may share your data with trusted third parties to help deliver our services, including:

  • Payment Processors: For secure payment handling.

  • Delivery Partners: To ensure products reach you.

  • Service Providers: For IT and security support.

These third parties have access to your data only as necessary to perform their functions and must process it in accordance with UK GDPR.

6. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this Privacy Policy, to comply with legal obligations, or to resolve disputes. For example:

  • Order Information: Retained for six years to comply with tax and accounting requirements.

  • Marketing Preferences: Retained until you withdraw your consent.

7. Data Security

We use strict measures to protect your personal data, including encryption and secure servers. However, please be aware that no method of transmission over the internet is entirely secure.

8. Cookies and Tracking

We use cookies to enhance user experience and monitor site usage. Cookies help us analyse web traffic, improve site performance, and personalise your experience. You can manage or delete cookies through your browser settings.

9. Marketing and Communications

With your explicit consent, we may send marketing materials about new collections, offers, and updates. You can unsubscribe at any time by clicking the "unsubscribe" link in our emails or contacting us directly.

10. Children’s Privacy

Our website and services are not intended for children under 13. We do not knowingly collect personal data from children. If we become aware of data collection from children without verifiable parental consent, we will delete such data.

11. Changes to Our Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and if material changes occur, we will notify you by email or through our website.

12. Contact Us

For questions about this Privacy Policy or your rights, please contact us:

Bad Toad
hello@badtoad.co.uk

If you feel we have not addressed your data privacy concerns adequately, you may also contact the UK Information Commissioner’s Office (ICO) at https://ico.org.uk.