1. Data Controller Information

This Privacy Policy applies to all personal data collected and processed through the website www.chewandbounce.com (“Website”). For the purposes of applicable data protection legislation in the United Kingdom and the European Union—including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR)—the Data Controller responsible for your personal information is www.chewandbounce.com (“chewandbounce”, “we”, “us”, or “our”).

If you have any questions regarding this Privacy Policy or the processing of your personal data, please reach out to us:

2. Personal Data We Collect

We collect personal information necessary to process orders, communicate with customers, and maintain website performance. The categories of personal data collected include:

  • Identity & Contact Details: Name, billing address, delivery address, email address, and telephone number.
  • Transaction Data: Details regarding products purchased, order history, order dates, and communication records relating to customer inquiries.
  • Technical & Usage Data: IP address, browser type, device information, operating system, and interactions with our Website collected automatically via essential standard cookies and logs.

3. Legal Basis and Purpose for Data Processing

We process personal data strictly in compliance with lawful grounds established under UK and EU data protection laws:

  • Performance of Contract: Processing identity, contact, delivery, and order data to fulfil orders placed through the Website, manage delivery operations, and provide customer support.
  • Legal Obligation: Maintaining transaction records to comply with statutory accounting, tax, auditing, and merchant disclosure duties under UK and EU law.
  • Legitimate Interests: Analyzing website traffic and functionality to maintain operational integrity, support service improvement, and protect against fraudulent activity.

4. Payment Processing & Third-Party Processors

To process card payments securely for purchases made on www.chewandbounce.com, we use Stripe as our primary third-party payment processor.

When you make a purchase, your payment transaction details are transmitted directly to Stripe. Stripe collects, processes, and stores card payment details according to its own privacy policy and strict financial compliance standards. www.chewandbounce.com does not store, store-and-forward, or retain full credit or debit card primary account numbers on our servers.

Personal data may also be disclosed to carefully chosen operational service providers (such as logistics and postal partners) strictly for the purpose of completing order fulfillment and delivering parcels. All third-party service providers are contractually obligated to handle personal data confidentially and in accordance with applicable UK and EU data protection laws.

5. International Data Transfers

As we operate in the United Kingdom and serve customers across the European Union, personal data may be transferred, stored, or processed within the UK, the European Economic Area (EEA), or in jurisdictions recognized as providing an adequate level of data protection. Where data is processed outside these regions, appropriate contractual safeguards, including UK International Data Transfer Agreements (IDTAs) or EU Standard Contractual Clauses (SCCs), are implemented to maintain data integrity.

6. Data Retention Period

We store personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable UK and EU legal requirements:

  • Customer Transaction & Order Records: Retained for up to 6 years following completion of the transaction in accordance with statutory UK and EU accounting, tax, and legal liability limitation requirements.
  • General Customer Support Communications: Retained for up to 24 months from the date of final communication to address follow-up inquiries or order assistance.
  • Technical Logs & Operational Data: Retained for a maximum of 12 months for system audit and integrity purposes.

Upon expiration of the applicable retention period, personal data is permanently deleted or irreversibly anonymized.

7. Your Legal Data Rights

Under UK and EU data protection laws, consumers possess specific statutory rights regarding their personal data, including:

  • Right of Access: The right to request a copy of the personal data held about you.
  • Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
  • Right to Erasure (“Right to be Forgotten”): The right to request deletion of personal data, subject to legal retention exemptions (such as statutory tax record requirements).
  • Right to Restriction of Processing: The right to request a temporary pause in data processing under specific conditions.
  • Right to Data Portability: The right to receive personal data in a structured, commonly used machine-readable format.
  • Right to Object: The right to object to data processing carried out based on legitimate business interests.

To exercise any of these rights, please contact us at platform@chewandbounce.com. You also retain the right to lodge a complaint with the relevant supervisory authority (such as the Information Commissioner’s Office – ICO in the UK, or your local EU Data Protection Authority).

8. Cookies & Data Protection Safeguards

Our Website utilizes essential technical cookies necessary for core website operations, shopping basket maintenance, and session security. We implement standard administrative and organizational measures designed to protect personal data against unauthorized access, loss, or misuse.

9. Updates to This Privacy Policy

We reserve the right to revise this Privacy Policy periodically to reflect operational, legal, or regulatory changes. Any updates will be published directly on this page on www.chewandbounce.com with a revised revision date.