Privacy Policy
1. Who We Are
Saints and Scrubs™ is the data controller responsible for your personal data.
2. What Data We Collect
We may collect and process the following personal data:
-
Contact information — your name, email address, phone number, and delivery address
-
Order information — details of products you have purchased, order history, and payment records
-
Payment information — billing address and payment method details (we do not store full card numbers; payments are processed securely by our payment provider)
-
Account information — username and password if you create an account with us
-
Usage data — how you interact with our website, including pages visited, time spent, and links clicked
-
Device information — IP address, browser type, and operating system
-
Communications — any messages, emails, or enquiries you send to us
3. How We Collect Your Data
We collect your data in the following ways:
-
Directly from you — when you place an order, create an account, sign up to our mailing list, or contact us
-
Automatically — when you browse our website, via cookies and similar tracking technologies
-
From third parties — such as payment processors, delivery partners (FedEx), and analytics providers
4. How We Use Your Data
We use your personal data for the following purposes:
-
To process and fulfil your orders, including arranging delivery via FedEx
-
To communicate with you about your order, including dispatch confirmation and tracking information
-
To respond to your enquiries and provide customer support
-
To send you marketing emails and promotions, where you have given consent (you can opt out at any time)
-
To improve our website and personalise your shopping experience
-
To comply with our legal and regulatory obligations
-
To detect and prevent fraud or misuse of our website
5. Legal Basis for Processing
We process your personal data on the following legal grounds:
-
Contract — processing is necessary to fulfil your order and deliver your products
-
Legitimate interests — to improve our services, prevent fraud, and run our business effectively
-
Consent — for marketing emails and non-essential cookies (you may withdraw consent at any time)
-
Legal obligation — where we are required to process data to comply with the law
6. Sharing Your Data
We do not sell your personal data. We may share it with trusted third parties only where necessary:
-
FedEx — to arrange delivery of your order
-
Payment processors — to securely handle your payment
-
Website and analytics providers — to operate and improve our website
-
Legal authorities — where required by law or to protect our legal rights
All third parties are required to handle your data securely and in accordance with UK GDPR.
7. Cookies
We use cookies to improve your experience on our website. Cookies are small files stored on your device. We use them to:
-
Remember your preferences and shopping basket
-
Understand how visitors use our website (analytics)
-
Deliver relevant content and advertising
You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. A full Cookie Policy is available on our website.
8. Data Retention
We retain your personal data only for as long as necessary:
-
Order data is retained for 7 years in line with HMRC requirements
-
Account data is retained for as long as your account is active, plus a reasonable period thereafter
-
Marketing data is retained until you unsubscribe or withdraw consent
-
Communications are retained for up to 2 years
9. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
-
Right to access — you can request a copy of the personal data we hold about you
-
Right to rectification — you can ask us to correct any inaccurate or incomplete data
-
Right to erasure — you can request that we delete your personal data, subject to certain conditions
-
Right to restrict processing — you can ask us to limit how we use your data
-
Right to data portability — you can request your data in a structured, machine-readable format
-
Right to object — you can object to us processing your data for marketing or legitimate interests purposes
-
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact us. We will respond within 30 days.
10. Marketing Communications
If you have opted in to receive marketing emails from us, we may send you information about new products, promotions, and brand updates. You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly. We will never send you marketing communications without your consent.
11. Data Security
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. All payment transactions are encrypted and processed securely. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
12. International Data Transfers
If you are ordering from outside the United Kingdom, your data may be transferred to and processed in the UK. When we share data with third parties such as FedEx for international delivery, your data may also be processed in other countries. We ensure that appropriate safeguards are in place to protect your data in accordance with UK GDPR.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.
14. Complaints
If you believe we have not handled your personal data in accordance with this policy, you have the right to lodge a complaint with the UK's data protection authority:
Information Commissioner's Office (ICO) Website: ico.org.uk Helpline: 0303 123 1113
15. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy, including requests to access, update, or delete your personal information, please contact us using the details below:
Saints and Scrubs™
Email: sales@saintsandscrubs.co.uk
Website: www.saintsandscrubs.co.uk
We will endeavour to respond to all privacy-related enquiries promptly and in accordance with applicable data protection laws.