Privacy policy
Privacy Policy
Last updated: [date]
This policy explains how Cutivance collects, uses, and protects your personal information when you visit our website or place an order. Cutivance is the data controller for the information described here.
What we collect
- Details you give us: your name, delivery and billing address, email address, and phone number when you place an order or contact us.
- Order information: what you bought, your payment details, and your delivery preferences. We don't see or store your full card number — that's handled by our payment providers.
- Technical information: your IP address, browser and device type, and how you move around our site.
- Marketing preferences: whether you've asked to hear from us, and what you've opened or clicked.
Why we use it, and our lawful basis
- To process and deliver your order, and to handle returns. This is necessary to perform our contract with you.
- To answer your enquiries. This is necessary to perform our contract with you, or is in our legitimate interest in responding to you.
- To send marketing emails. We do this with your consent, and you can withdraw it at any time.
- To improve our products, service, and website. This is in our legitimate interest in running the business well.
- To meet our accounting, tax, and product safety obligations. This is necessary to comply with the law.
Who we share it with
We share your information only where it's needed to run the business:
- Shopify, which hosts our store and processes orders.
- Payment providers, who take and secure your payment.
- Our manufacturing and fulfilment partner, based in the European Union, who packs and dispatches your order and therefore receives your delivery details.
- Delivery partners, who bring your order to you.
- Service providers who help us with email, analytics, and website maintenance.
- Authorities or regulators, where the law requires it.
We do not sell, rent, or trade your personal information.
Information leaving the UK
Some of our partners are based outside the UK, including in the European Union and the United States. Where information is transferred, we rely on UK adequacy regulations or on standard contractual clauses approved for use in the UK, so that your information keeps the same level of protection.
How long we keep it
We keep order and transaction records for six years after the end of the tax year they relate to, as UK tax law requires. We keep marketing contact details until you unsubscribe or ask us to remove them. Website analytics data is kept for a shorter period, typically no more than 26 months.
Your rights
Under the UK GDPR you have the right to:
- Ask for a copy of the personal information we hold about you.
- Ask us to correct anything that's wrong.
- Ask us to delete your information, where we're not required to keep it.
- Withdraw your consent to marketing at any time.
- Object to, or ask us to restrict, certain uses of your information.
- Ask us to transfer your information to another provider.
To exercise any of these, complete our contact form. We'll respond within one month.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113.
Cookies
Our site uses cookies to keep your basket working, to remember your preferences, and to understand how the site is used. You can manage cookies through the banner when you first visit, or through your browser settings, though turning some off will affect how the site works.
Security
We take reasonable steps to protect your information from loss, misuse, and unauthorised access. Payment information is encrypted and handled by our payment providers rather than by us.
Children
Our site isn't aimed at children, and we don't knowingly collect information from anyone under 16.
Changes
We may update this policy from time to time. The current version will always be on this page, with the date it was last updated.
Contact
All enquiries: contact form