Privacy policy

PRIVACY POLICY
Snoozy Studio is committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

WHO WE ARE
Snoozy Studio is the data controller responsible for your personal data.

PERSONAL DATA WE COLLECT  

We may collect and process the following information when you use our store or place an order:  
- Name  
- Billing and shipping address  
- Email address  
- Order details  
- Payment information (processed securely via third-party providers)

We do not store full payment card details.

LAWFUL BASIS FOR PROCESSING  
We only process your personal data where we have a lawful basis to do so, including:  
- Contract: to process and deliver your order  
- Legal obligation: to comply with applicable laws (e.g. tax and accounting)  
- Legitimate interests: to improve our services and prevent fraud  

HOW YOUR DATA IS USED  
Your personal data is used to:  
- Process and fulfil orders  
- Communicate with you or your purchase  
- Provide customer support  
- Maintain records required by law  

We do not sell or share your personal data for marketing purposes.

SHARING YOUR DATA  
We may share your data with trusted third parties where necessary, including:  
- Payment providers (to securely process transactions)  
- Shipping providers (to deliver your order)  
- E-commerce platform providers (e.g. Big Cartel)
All third parties are required to respect the security of your personal data and process it in accordance with the law.

INTERNATIONAL TRANSFERS  
Some of our service providers may process data outside the UK. In such cases, we ensure appropriate safeguards are in place in accordance with UK data protection laws.

DATA RETENTION  
We retain personal data only as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements.

YOUR RIGHTS  
Under UK GDPR, you have the right to:  
- Access the personal data we hold about you  
- Request correction of inaccurate data  
- Request erasure of your data (“right to be forgotten”)  
- Restrict or object to processing  
- Request transfer of your data (data portability)  
- Withdraw consent at any time (where applicable)
To exercise any of these rights, please contact us.

COOKIES  
Our website may use cookies to enhance your browsing experience. You can control or disable cookies through your browser settings.

DATA SECURITY  
We take appropriate security measures to protect your personal data from unauthorised access, alteration, disclosure, or loss.

CHANGES TO THIS POLICY  
We may update this Privacy Policy from time to time. Any changes will be posted on this page.

CONTACT  
If you have any questions or wish to exercise your rights, please contact us.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO).