A Year of Dates Privacy Policy

Last updated: [DD Month YYYY]

This Privacy Policy explains how we collect, use and protect your personal data when you use ayearofdates.co.uk (“Site”).

1) Who we are (data controller)

Gifting Sorted Limited (company no. 13716464)
Unit 9, Waters Meeting, Britannia Way, Bolton, BL2 2HH
Email: hello@ayearofdates.co.uk

2) The data we collect

Identity & contact: name, email, phone, billing and delivery addresses.
Order & payment: products purchased, order notes, payment status/ID (we don’t store full card details).
Account details (if you create one): username, password (hashed).
Marketing preferences: your choices for email/SMS.
Usage & technical: IP address, device, browser, pages viewed, referral source, approximate location.
Support communications: messages and enquiry details.
Checkout activity: we may keep your email if you start checkout and don’t finish (abandoned checkout) so we can remind you.

3) How we use your data (purposes & lawful bases)

To provide our services (set up your account, process and deliver orders, customer support): performance of a contract.
Payments & fraud prevention: performance of a contract and legitimate interests (preventing abuse).
Customer communications (order updates, service messages): performance of a contract / legal obligation.
Marketing (news, offers, product updates): consent (where required) or legitimate interests for existing customers; you can opt-out anytime.
Analytics & site improvement: consent (for non-essential cookies) and legitimate interests (running an effective business).
Legal & tax compliance: legal obligation.
Security (detect, investigate, or prevent security issues): legitimate interests.

We don’t sell your personal data.

4) Cookies and similar technologies

We use essential cookies and (with your consent) optional analytics/marketing cookies. See our Cookie Policy for details.

5) Sharing your data

We share data with trusted providers who help us run the Site and fulfil your orders, for example: website hosting, payment processors, email providers, analytics/advertising (as configured in our cookie tools) and delivery couriers.
These providers only process data under our instructions and must keep it secure. We may also share data where required by law or to enforce our rights.

6) International transfers

Some providers may process data outside the UK/EEA. Where they do, we use safeguards such as UK adequacy regulations or standard contractual clauses.

7) How long we keep your data

Orders & invoices: usually 6 years for tax/accounting.
Accounts: while active, then a reasonable period for record-keeping.
Marketing: until you unsubscribe or your account is inactive for a prolonged period.
Support messages: as needed to manage your request and for audit.
Analytics/technical logs: typically up to 12 months (varies by provider).
We delete or anonymise data when it’s no longer needed.

8) Your rights (UK GDPR)

You have the right to access, correct, delete, restrict, object (including to direct marketing), and port your data, and to withdraw consent where processing is based on consent.
To exercise your rights, email hello@ayearofdates.co.uk. We may need to verify your identity.

9) Marketing choices

You can unsubscribe from our marketing at any time (unsubscribe link or by emailing us). Service emails about your orders will still be sent.

10) Security

We use appropriate technical and organisational measures to protect your data. No system is 100% secure, but we work to prevent unauthorised access and misuse.

11) Children

Our Site is not intended for children under 13. We do not knowingly collect data from children.

12) Complaints

If you’re concerned about our use of your data, contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk / 0303 123 1113.

13) Changes to this policy

We may update this policy from time to time. We’ll post the new version here with an updated “Last updated” date.