Privacy Policy
We're committed to protecting your privacy and being transparent about how we handle your data.
Contents
1. Introduction
Welcome to Sundrop UK ("we", "us", "our", "sundrop.uk"). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our services, or otherwise interact with us.
By using sundrop.uk, you agree to the collection and use of your personal data as described in this policy.
2. Who We Are
We are the data controller for the purpose of the UK GDPR and the Data Protection Act 2018 in relation to the processing described here.
3. What Personal Data We Collect
We may collect and process the following categories of personal data, depending on your usage and interactions with us:
Identity data
name, title, date of birth (if required)
Contact data
email address, postal address, telephone number
Transaction data
details of payments to and from you, and other details of products or services you have purchased from us
Technical data
IP address, browser type and version, time zone setting, browser plug-in types, operating system and platform
Usage data
information about how you use our website, products, and services
Marketing data
your preferences in receiving marketing from us and your communication preferences
We may also collect aggregated or anonymised data that does not identify you ("anonymous data") for analytical and statistical purposes.
5. Legal Basis for Processing
Under UK GDPR Article 6, we must have a lawful basis to process your personal data. We rely on one or more of the following bases:
Contract
to perform a contract we have with you (for example, to deliver goods or services you request)
Legitimate interests
where our legitimate interests require processing and your rights do not override those interests
Consent
where you have given clear consent for us to process your personal data
Legal obligation
to comply with a legal obligation we are subject to (e.g. tax, regulatory duties)
10. Your Rights
Under UK GDPR, individuals have the following rights (in certain circumstances):
Right of access – you can ask us to confirm whether we process your personal data and request a copy
Right to rectification – you can request correction of inaccurate or incomplete data
Right to erasure ("right to be forgotten") – you can request deletion of your personal data
Right to restriction of processing – you can ask us to limit how we use your data
Right to data portability – you can request your data in a portable format
Right to object – you can object to our processing (especially where based on legitimate interests)
Right to withdraw consent – if processing is based on consent, you may withdraw consent at any time
Right to lodge a complaint – with the Information Commissioner's Office (ICO)
Exercise Your Rights
To exercise these rights, please contact us at info@sundrop.uk. We will respond within the timeframes required by law.
11. Security of Your Data
We take appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction.
Important Notice
Despite our efforts, no security system is perfect. In the event of a data breach, we will notify you and the relevant supervisory authority (ICO) as required by law.
15. Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact:
Sundrop Marketing LTD
If you believe we have not complied with data protection laws, you also have the right to raise a complaint with the Information Commissioner's Office (ICO) in the UK.