1. Introduction
[REPLACE WITH YOUR LEGAL COPY] This Privacy Policy explains how Reset Day ("we", "us", or "our") collects, uses, stores, and protects information about you when you visit our website or purchase our products. We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
[REPLACE WITH YOUR LEGAL COPY] By using our website, you acknowledge that you have read and understood this Privacy Policy. Please read it carefully alongside our Terms & Conditions and Cookie Policy.
2. What Data We Collect
[REPLACE WITH YOUR LEGAL COPY] We may collect and process the following categories of personal data:
Personal Information
- Full name and contact details (email address, phone number, postal address)
- Account login credentials
- Date of birth (where required for age verification)
Order & Transaction Data
- Purchase history and order details
- Payment information (we do not store full card details — these are handled by our payment processor)
- Billing and delivery addresses
Usage Data
- IP address and browser type
- Pages visited, time spent, and referring URLs
- Device identifiers and operating system
- Cookie data (see our Cookie Policy)
3. How We Use Your Data
[REPLACE WITH YOUR LEGAL COPY] We use your personal data for the following purposes:
Order Processing
To fulfil and manage your orders, process payments, arrange delivery, and handle returns or refunds. Legal basis: Performance of a contract.
Communication
To respond to your enquiries, send order confirmations and shipping updates, and provide customer support. Legal basis: Performance of a contract / Legitimate interests.
Marketing
[REPLACE WITH YOUR LEGAL COPY] With your explicit consent, to send promotional emails and newsletters about our products and offers. You may unsubscribe at any time. Legal basis: Consent.
Legal & Compliance
[REPLACE WITH YOUR LEGAL COPY] To comply with our legal obligations, resolve disputes, and enforce our agreements. Legal basis: Legal obligation.
4. Your Rights Under GDPR
[REPLACE WITH YOUR LEGAL COPY] Under UK GDPR, you have the following rights in relation to your personal data:
- Right of Access: You may request a copy of the personal data we hold about you (Subject Access Request).
- Right to Rectification: You may ask us to correct inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where there is no compelling reason for us to continue processing it.
- Right to Data Portability: You may request that we transfer your data to another service provider in a structured, machine-readable format.
- Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
- Right to Restrict Processing: You may ask us to suspend processing in certain circumstances.
[REPLACE WITH YOUR LEGAL COPY] To exercise any of these rights, please contact us at [[YOUR EMAIL]](mailto:[YOUR EMAIL]). You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
5. Data Retention
[REPLACE WITH YOUR LEGAL COPY] We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Order and transaction records are typically retained for [X] years in accordance with applicable tax and financial regulations. Marketing consent records are retained until you withdraw consent.
6. Cookies
[REPLACE WITH YOUR LEGAL COPY] We use cookies and similar tracking technologies on our website. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.
7. Contact Us
[REPLACE WITH YOUR LEGAL COPY] If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
- Data Controller: [YOUR COMPANY LEGAL NAME]
- Address: [YOUR REGISTERED ADDRESS]
- Email: [[YOUR PRIVACY EMAIL]](mailto:[YOUR PRIVACY EMAIL])