Privacy Policy

1. Who We Are

Place of Treasure ("we", "us", "our") is an e-commerce business operating at www.placeoftreasure.co.uk. We are the data controller responsible for your personal data.

Contact: info@placeoftreasure.co.uk · 07832 813934

2. Data We Collect

We collect the following personal data when you use our website:

• Name, email address, and phone number (at registration and checkout)
• Delivery address
• Payment details (processed securely by Stripe — we do not store card numbers)
• Order history and preferences
• IP address, browser type, and device information (via cookies)
• Google account information if you sign in with Google (name, email, profile picture)

3. How We Use Your Data

We use your data to:

• Process and fulfil your orders
• Send order confirmations and delivery updates
• Manage your account and preferences
• Respond to your enquiries and provide customer support
• Send marketing emails (only with your explicit consent)
• Improve our website and services (via analytics)
• Comply with legal and regulatory obligations

4. Legal Basis for Processing

We process your data under the following lawful bases (UK GDPR Article 6):

• Contract: to fulfil your order
• Legal obligation: for tax, fraud prevention, and regulatory compliance
• Legitimate interests: to improve our services and prevent fraud
• Consent: for marketing emails and non-essential cookies

5. Data Sharing

We share your data only with trusted third parties necessary to provide our services:

• Stripe — payment processing (PCI DSS Level 1 certified)
• Resend — transactional email delivery
• Cloudinary — image storage
• Vercel — website hosting
• Delivery partners — for order fulfilment

We do not sell your personal data to any third party.

6. Data Retention

We retain your data for as long as necessary to fulfil the purposes above. Order and financial records are kept for 7 years to comply with HMRC requirements. You may request deletion of your account and personal data at any time (subject to legal retention requirements).

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, email us at info@placeoftreasure.co.uk. You also have the right to lodge a complaint with the ICO at ico.org.uk.

8. Cookies

We use essential cookies to operate our website (e.g., session and cart cookies). We also use analytics cookies (Google Analytics) to understand how visitors use our site. You can control non-essential cookies through your browser settings.

9. Security

We implement appropriate technical and organisational measures to protect your data, including HTTPS encryption, secure HTTP-only session cookies, and access controls.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the latest revision. Continued use of our website after changes constitutes acceptance of the updated policy.