1. Who We Are
Scrummy Cream is a skincare products website based in 160 Southwood Road, Tunbridge Wells, Kent, TN4 8UX, United Kingdom. In this policy, references to “Scrummy Cream”, “we”, “us” or “our” refer to the company operating scrummycream.co.uk.
We are committed to protecting your personal information and being transparent about how we use it. This policy explains what data we collect, why we collect it, and your rights under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For any privacy-related queries, please contact us at: hello@scrummycream.co.uk
2. What Information We Collect
We may collect the following categories of personal information:
- Identity data: your name, username or similar identifiers.
- Contact data: your email address, postal address, and telephone number.
- Transaction data: details of products you have purchased, payment records, and delivery information.
- Technical data: your IP address, browser type and version, time zone, browser plug-in types, operating system, and platform.
- Usage data: information about how you use our website and products.
- Marketing preferences: your preferences for receiving marketing from us.
- Communications data: any messages you send us via email or contact forms.
3. How We Collect Your Information
We collect information in the following ways:
- Directly from you: when you create an account, place an order, subscribe to our newsletter, contact us, or participate in any promotion or survey.
- Automatically: as you interact with our website, we may automatically collect technical and usage data using cookies and similar technologies (see our Cookie Policy below).
- From third parties: such as payment processors, delivery partners, and analytics providers.
4. How We Use Your Information
We use your personal information for the following purposes, relying on the lawful bases shown:
- To process and fulfil your orders, including managing payments and delivery (contract performance).
- To manage your account and customer relationship (contract performance / legitimate interests).
- To send you service-related communications such as order confirmations and delivery updates (contract performance).
- To send you marketing communications about our products and promotions where you have opted in (consent) or where we have a legitimate interest as an existing customer.
- To improve our website, products, and services through analytics and feedback (legitimate interests).
- To comply with legal and regulatory obligations (legal obligation).
- To prevent fraud and keep our website and your account secure (legitimate interests / legal obligation).
5. Advertising
We do not currently display third-party advertisements on our website. If this changes in the future, we will update this policy and seek any necessary consent before sharing your data with advertising partners.
6. Sharing Your Information
We do not sell your personal data. We may share your information with:
- Service providers: companies that help us operate our business, such as payment processors, delivery couriers, email marketing platforms, and IT service providers. These parties are contractually obliged to handle your data securely and only as instructed by us.
- Professional advisers: solicitors, accountants, and insurers where necessary.
- Regulatory authorities: HMRC, the Information Commissioner’s Office (ICO), or other bodies where required by law.
- Business transfers: if we sell or transfer part of our business, your data may be transferred to the new owner.
7. International Transfers
Some of our service providers may be based outside the UK or European Economic Area. Where we transfer data internationally, we ensure appropriate safeguards are in place, such as UK-approved standard contractual clauses or adequacy decisions.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes set out in this policy, or as required by law. Typically:
- Order and transaction records are kept for 7 years for tax and legal purposes.
- Account data is retained while your account is active and for a reasonable period after closure.
- Marketing preferences are held until you unsubscribe or withdraw consent.
9. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access: to request a copy of the data we hold about you.
- Right to rectification: to ask us to correct inaccurate or incomplete data.
- Right to erasure: to request deletion of your data in certain circumstances.
- Right to restrict processing: to ask us to pause how we use your data.
- Right to data portability: to receive your data in a structured, machine-readable format.
- Right to object: to object to us processing your data on the basis of legitimate interests or for direct marketing.
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at hello@scrummycream.co.uk. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
10. Children’s Privacy
Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or by email. Please check this page periodically.