Privacy Notice

Effective Date: [Date]

1. Data Controller

derbyschuhe.com controls your personal data in accordance with UK/EU data protection regulations.

2. Information We Collect

  • Identity Data: Name, title, date of birth
  • Contact Data: Billing/delivery addresses, email
  • Financial Data: Payment card details (encrypted)
  • Technical Data: IP address, browser type, device ID
  • Profile Data: Purchase history, style preferences, size information

We process your data when:

  • Necessary for order fulfillment (contractual)
  • Required by law (legal obligation)
  • You provide consent (marketing communications)
  • For legitimate business interests (fraud prevention)

4. How We Use Your Data

PurposeData TypeLegal Basis
Order processingIdentity, Contact, FinancialContract
Size recommendationsProfile, TechnicalLegitimate Interest
Marketing emailsContact, ProfileConsent

5. Data Sharing

We disclose information to:

  • Payment processors (Stripe, Worldpay)
  • Luxury delivery partners (DHL Express, FedEx)
  • CRM platforms (Salesforce)
  • Legal authorities when required

6. International Transfers

Data may be transferred outside the UK/EEA using:

  • EU Standard Contractual Clauses
  • UK International Data Transfer Agreement

7. Your Rights

You may:

  • Request access to your data
  • Rectify inaccurate information
  • Erase personal data (“Right to be Forgotten”)
  • Restrict processing
  • Object to direct marketing
  • Request data portability

8. Security Measures

We implement:

  • AES-256 encryption
  • Regular penetration testing
  • PCI DSS compliance for payments
  • Employee privacy training

9. Retention Periods

  • Transaction data: 7 years (HMRC compliance)
  • Customer accounts: 5 years post-last activity
  • Marketing consent: Until withdrawal

10. Cookies

Essential cookies are automatically active. Manage others via our Cookie Preferences center.

11. Policy Updates

Material changes will be:

  • Highlighted on our website
  • Communicated via email (for account holders)

For privacy inquiries, please use our Data Subject Request Form at derbyschuhe.com/privacy-requests