Privacy Policy

Privacy Policy (UK GDPR Compliant)

Effective Date: 31.07.26

1. Introduction

This Privacy Policy explains how munro baggers (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you visit or make a purchase from munro-baggers.co.uk. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using this website, you agree to the practices described in this policy.

2. Data We Collect

We collect the following types of personal data:

A. Information you provide

  • Name

  • Email address

  • Billing address

  • Shipping address

  • Payment details (processed securely by Stripe/PayPal — we do not store card numbers)

  • Order information

B. Automatically collected information

  • IP address

  • Browser type

  • Device information

  • Pages visited

  • Cookies and tracking data

C. Third‑party data

We receive limited information from:

  • Squarespace (website hosting and analytics)

  • Stripe/PayPal (payment processing)

  • Printful (order fulfilment)

3. How We Use Your Data

We use your information to:

  • Process and fulfil your orders

  • Communicate with you about your purchase

  • Provide customer support

  • Improve our website and services

  • Comply with legal obligations

  • Prevent fraud

We do not sell your data to third parties.

4. Legal Basis for Processing

Under UK GDPR, we process your data based on:

  • Contractual necessity — to fulfil your order

  • Legitimate interests — improving our website and preventing fraud

  • Legal obligations — tax, accounting, and consumer law

  • Consent — for cookies, marketing, and newsletters

5. Sharing Your Data

We share your data only with trusted service providers:

Squarespace

Website hosting, analytics, security.

Stripe / PayPal

Payment processing. We never see or store your full card details.

Printful

Order fulfilment and shipping. They receive your name, address, and order details.

Royal Mail / Couriers

Delivery services.

Legal authorities

Only if required by law.

6. Cookies & Tracking

We use cookies to:

  • Enable website functionality

  • Analyse traffic

  • Improve user experience

  • Support marketing and advertising

You can manage cookie preferences through our cookie banner, as required by UK law.

7. Data Storage & Security

Your data is stored securely through Squarespace’s protected servers. We take reasonable technical and organisational measures to protect your information.

8. How Long We Keep Your Data

We retain your data only as long as necessary:

  • Order records: 6 years (legal requirement)

  • Analytics data: up to 26 months

  • Email communications: until you unsubscribe

9. Your Rights (UK GDPR)

You have the right to:

  • Access your data

  • Correct inaccurate data

  • Request deletion

  • Restrict processing

  • Object to processing

  • Request data portability

  • Withdraw consent (for cookies or marketing)

To exercise your rights, contact us at [your email].

10. Children’s Privacy

We do not knowingly collect data from anyone under 16 years old.

11. International Transfers

Some service providers (e.g., Squarespace, Printful) may store data outside the UK. These transfers comply with UK GDPR through approved safeguards.

12. Contact Us

If you have questions about this Privacy Policy or your data, contact:

[Your Store Name]Email: [your email] Address: [your business address]

13. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.