Privacy Policy

1. Introduction

FAT CAT DESSERTS LIMITED ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Our company is registered in England and Wales with registration number 14558989. Our registered address is 34 Park Parade, London, England, NW10 4JE.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name and contact information (email address, phone number, delivery address)
• Order history and preferences
• Payment information (processed securely through third-party payment processors)
• Communication records when you contact us

2.2 Non-Personal Information

We may collect non-personal information including:

• Browser type and version
• Operating system
• IP address and location data
• Website usage statistics
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information for the following purposes:

• Processing and fulfilling your orders
• Communicating with you about your orders and our services
• Providing customer support
• Improving our website and services
• Sending promotional materials (with your consent)
• Complying with legal obligations
• Preventing fraud and ensuring security

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

• Contract: Processing necessary for fulfilling our contractual obligations to you
• Legitimate Interest: Processing necessary for our legitimate business interests
• Consent: Where you have given explicit consent for specific processing activities
• Legal Obligation: Where required by law

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service Providers: Third-party companies that help us operate our business (delivery services, payment processors, etc.)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In the event of a merger, acquisition, or sale of assets

6. Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data
• Secure server infrastructure
• Regular security assessments
• Limited access to personal information
• Staff training on data protection

7. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Typically:

• Order information: 7 years (for accounting and tax purposes)
• Marketing communications: Until you withdraw consent
• Website usage data: 2 years
• Customer support records: 3 years

8. Your Rights (GDPR)

Under GDPR, you have the following rights:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise these rights, please contact us at [email protected].

9. Cookies

Our website uses cookies to enhance your browsing experience. For detailed information about our cookie usage, please see our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16.

12. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on our website and updating the "last updated" date.

14. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

15. Supervisory Authority

If you believe we have not handled your personal data in accordance with this Privacy Policy or applicable data protection laws, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters.

ICO Contact Information:
Website: www.ico.org.uk
Phone: 0303 123 1113