GDPR Policy

At Gazebo Sale, we are committed to protecting your privacy and ensuring that your personal data is handled in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains how we collect, use, store, and protect your information.

1. Data We Collect

We may collect the following types of personal data when you interact with our website, place an order, or contact us:

Contact Information – Name, email address, phone number, billing and delivery address.
Order Details – Products purchased, order history, payment information.
Account Information – Login details, preferences.
Technical Information – IP address, browser type, device type, and cookies.

2. How We Use Your Data

We will only use your personal data when legally permitted, including:

To process and deliver your orders.
To communicate with you about your purchase or inquiries.
To provide customer service and resolve issues.
To send you marketing communications (only with your consent).
To comply with legal obligations.

3. Lawful Basis for Processing

We process your personal data under the following lawful bases:

Contract – To fulfil orders and provide services.
Consent – For marketing emails or newsletters (you can withdraw at any time).
Legal Obligation – For record-keeping and compliance.
Legitimate Interest – To improve our website, products, and customer experience.

4. Data Storage and Security

We store your personal data securely using appropriate technical and organisational measures to prevent unauthorised access, disclosure, or loss. Payment information is processed securely through trusted payment gateways and is never stored by us.

5. Data Sharing

We will never sell your personal data. We may share your information only with:

Delivery Partners – To ship your orders.
Payment Providers – To process secure payments.
Service Providers – For website hosting, analytics, or customer service support.
Legal Authorities – Where required by law.

6. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you.
Request corrections to inaccurate data.
Request deletion of your data (“right to be forgotten”).
Restrict or object to data processing.
Withdraw consent for marketing communications.
Request a copy of your data in a portable format.

To exercise any of these rights, please contact us via our Contact Us page.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, or to meet legal, accounting, or reporting requirements.

8. Cookies

Our website uses cookies to enhance your browsing experience, analyse site traffic, and personalise content. You can manage cookie preferences through your browser settings.