Privacy Policy
Privacy Policy
Effective Date: [Insert Date]
Company Name: Rüdi
Company Address: [Insert Company Address]
Email: [Insert Email Address]
1. Introduction
At Rüdi (“we”, “our”, “us”), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website, purchase our products, or interact with our services.
We comply with the UK Data Protection Act 2018, the UK GDPR, and, where applicable, the EU General Data Protection Regulation (GDPR).
By using our website or providing us with your personal data, you agree to the practices described in this Privacy Policy.
2. Information We Collect
We may collect and process the following categories of information:
a) Information You Provide to Us
-
Name, email address, phone number, billing and shipping address.
-
Payment details (processed securely by third-party providers; we do not store full card details).
-
Account login details if you register with us.
-
Communications you send us (customer service, feedback, etc.).
b) Information We Collect Automatically
-
Technical data: IP address, browser type, operating system, device information.
-
Usage data: how you interact with our website (pages visited, time spent, clicks).
-
Cookies and similar technologies to improve your shopping experience.
c) Information from Third Parties
-
Payment service providers, delivery companies, and marketing platforms.
-
Analytics tools (e.g., Google Analytics, Meta Pixel).
3. Legal Bases for Processing
Under GDPR/UK GDPR, we rely on the following lawful bases to process your personal data:
-
Contractual necessity: to fulfil your orders and provide customer support.
-
Consent: for email marketing, promotional communications, and non-essential cookies.
-
Legitimate interests: to improve our services, prevent fraud, and ensure website security.
-
Legal obligation: to comply with tax, accounting, and regulatory requirements.
4. How We Use Your Information
We use your personal data to:
-
Process, deliver, and fulfil your orders.
-
Provide customer service and handle returns.
-
Improve our website, services, and product offerings.
-
Personalise your experience (recommendations, preferences).
-
Send you newsletters, promotions, and updates (if you opt in).
-
Detect and prevent fraud, misuse, or security issues.
-
Meet our legal and regulatory obligations.
5. Sharing Your Information
We do not sell or rent your personal data. However, we may share it with:
-
Service providers and partners: payment processors, shipping carriers, IT and hosting providers, marketing and analytics platforms.
-
Legal and regulatory authorities: where required by law or to protect our rights.
-
Business transfers: if we undergo a merger, acquisition, or sale of assets.
All third parties are required to protect your data in accordance with GDPR/UK GDPR.
6. International Data Transfers
If we transfer your personal data outside the UK/EEA, we will ensure appropriate safeguards are in place, such as:
-
Adequacy decisions by the European Commission/UK government.
-
Standard Contractual Clauses (SCCs).
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer period is required by law. For example:
-
Order and transaction records: kept for at least 6 years (for tax/accounting).
-
Marketing data: until you unsubscribe or withdraw consent.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
-
Encrypted payment transactions.
-
Secure hosting and firewalls.
-
Limited access to personal data by authorised staff only.
However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Your Data Protection Rights
Under GDPR/UK GDPR, you have the right to:
-
Access your personal data.
-
Rectify inaccurate or incomplete data.
-
Erase your data (“right to be forgotten”), where applicable.
-
Restrict processing of your data.
-
Object to processing based on legitimate interests or direct marketing.
-
Portability: request your data in a structured, machine-readable format.
-
Withdraw consent at any time (without affecting prior lawful processing).
To exercise your rights, please contact us at [insert contact email].
10. Cookies & Tracking Technologies
We use cookies and similar technologies for:
-
Website functionality (shopping cart, preferences).
-
Analytics and performance monitoring.
-
Marketing and advertising (personalised ads, retargeting).
You can manage or disable cookies through your browser settings. See our Cookie Policy [insert link] for more details.
11. Children’s Privacy
Our website is not directed at children under 16, and we do not knowingly collect personal data from minors. If we become aware that we have collected data from a child, we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. We will post the updated version on our website with the “last updated” date.
13. Contact & Complaints
If you have questions or concerns about this Privacy Policy or how we handle your personal data, please contact us:
Email: [insert email address]
Address: [insert company address]
If you are based in the UK, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
www.ico.org.uk
If you are based in the EU, you may contact your local Data Protection Authority.