Privacy Policy

We respect your privacy and are committed to protecting your personal data. This policy explains:

• What personal information we collect
• Why we collect it (legal basis)
• How we use and share it
• Your rights and how to exercise them
   

Under the UK GDPR and Privacy and Electronic Communications Regulations (PECR), we are required to be clear, transparent, and lawful in how we handle data.

a. Personal information you provide – name, email, billing/shipping address, phone number, account password, payment details.
b. Technical & usage data – IP addresses, browser/device type, cookies, pages visited, session duration, referral source (e.g. Google reCAPTCHA) .
c. Transaction history – orders, returns, communications.

We process your data based on the following bases:

• Contract necessity – to process orders and deliver goods
• Legal compliance – e.g. VAT, record keeping
• Consent – for optional email newsletters, cookies, targeted marketing
• Legitimate interest – where appropriate and balanced with your privacy rights
   

1. Fulfilling orders and communicating shipment updates: Name, address, email, phone, order history

2. Payment processing and fraud detection: Billing/payment details

3. Improving website and marketing: Usage data, cookies, analytics

4. Support inquiries: All data you provide during contact

5. Legal compliance: As required for tax/audit

We use cookies, Google reCAPTCHA, and analytics to:

• Enable site functionality
• Prevent fraud
• Understand and improve site usage
   

You can manage or withdraw cookie consent at any time. 

• Service partners – e.g., shipping providers, payment processors, analytics services. They’re required to protect your data and use it only on our behalf
• Legal obligations – we may share your information when legally required (e.g., court orders, law enforcement, to protect rights or safety) yabadabs.store.
• No selling of data – we do not sell or lease your personal data to third parties .
   

We retain your personal data only as long as necessary to fulfill the purposes set out or required by law. This typically means retaining financial and transactional data for 7 years (for tax purposes), and customer account data until the account is closed.

Under UK GDPR, you have the right to:

1. Access your data
2. Correct inaccuracies
3. Request deletion ("right to be forgotten")
4. Restrict or object to processing
5. Receive your data in portable format
6. Withdraw consent where given
    

To exercise these rights, please contact privacy@yabadabs.co.uk.
You may also lodge a complaint with the Information Commissioner's Office (ICO).

We implement appropriate technical and organisational measures (e.g., encryption, secure hosting, access controls) to protect your personal data in line with GDPR 'integrity and confidentiality' and 'privacy by design' principles en.wikipedia.org+5en.wikipedia.org+5gdprlocal.com+5.

Our services are not directed at individuals under 18; we do not knowingly collect data from minors.

Your data is processed within the UK and EEA. Should transfer outside these regions be necessary, it will only be done with appropriate safeguards in place.

We may update this policy periodically. Any changes will be reflected in the "Last updated" date above. Please check back regularly.

For privacy queries or requests, please contact:

Email: privacy@yabadabs.co.uk
Address: YabaDabs, [Insert Registered Address], Manchester, UK

Notes:
This template aligns with essential UK privacy laws including GDPR and PECR.

However, please consider having this reviewed by legal counsel to ensure full compliance with specific business needs and local regulations.