top of page

Privacy Policy

1. What Personal Data We Collect

​

We may collect the following categories of personal data:

​

1.1 Data you provide directly

​

  • Name

  • Email address

  • Phone number

  • Postal address

  • Account details (if you register)

  • Enquiry or support messages

  • Payment information (processed by our payment provider; we do not store card details)

​

1.2 Data collected automatically

​

  • IP address

  • Browser type and version

  • Device information

  • Pages viewed

  • Time and date of visits

  • Referring websites

  • Collected via:

  • Cookies

  • Analytics tools (e.g., Google Analytics—if applicable)

 

1.3 Cookies and tracking

​

  • We use essential and optional cookies.

​

2. How We Use Personal Data

​

We process personal data for:

​

  • Providing and maintaining our website

  • Managing your account

  • Responding to enquiries

  • Processing orders and payments

  • Analytics and site improvement

  • Marketing communications (with consent where required)

  • Compliance with legal obligations

 

2.1 Legal bases under UK GDPR

​

We rely on the following lawful bases:

​

  • Consent – for non-essential cookies/marketing

  • Contract – to provide services you request

  • Legal obligation – tax, fraud-prevention, record-keeping

  • Legitimate interests – website security, analytics, service improvement

​

3. How We Share Personal Data

​

We may share your data with:

​​

  • Service providers (hosting, analytics, payment processors, email platforms)

  • Professional advisers (legal, financial)

  • Regulators or authorities where required by law

​

We do not sell your personal data.

​

4. International Transfers

​

If personal data is transferred outside the UK, we ensure suitable safeguards such as:

  • UK Addendum to the EU Standard Contractual Clauses

  • Adequacy regulations recognised by the UK government

​

5. Data Retention

​

We retain personal data only for as long as necessary for the purposes collected, including:

​

  • User accounts: retained until deletion

  • Contact enquiries: typically 6–24 months

  • Transaction records: 6 years for tax and accounting purposes

​

6. Your Rights Under UK GDPR

​

You have the right to:

​

  • Access your personal data

  • Correct inaccurate or incomplete data

  • Request deletion (right to be forgotten)

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time (when consent is the lawful basis)

  • Lodge a complaint with the ICO (Information Commissioner’s Office): https://ico.org.uk

​

To exercise any rights, contact us at: info@happypandachinese.co.uk

​

7. Security

​

We implement technical and organisational measures to protect personal data, including:

​

  • Encrypted connections (HTTPS)

  • Access controls

  • Secure servers

  • Regular security reviews

​

However, no online transmission is fully secure.

​

8. Links to Third-Party Sites

​

Our website may include links to third-party websites.
We are not responsible for their content or privacy practices.

​

9. Changes to This Policy

​

We may update this Privacy Policy periodically. Changes will appear on this page with an updated “Last updated” date.

​

10. Contact Us

​

If you have questions about this Privacy Policy or how we process your data, contact us:

​

Email: info@happypandachinese.co.uk

bottom of page