Privacy Policy

Highland Yak Chew ("we", "us", "our") operates the website https://highlanddogchew.co.uk. We are the data controller responsible for your personal data collected through this website.

This Privacy Policy explains what data we collect, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We collect the following categories of personal data:

• Identity data: first name, last name
• Contact data: email address, phone number, postal address
• Transaction data: order history, payment references (we do not store card numbers)
• Technical data: IP address, browser type, device information, pages visited
• Marketing data: your preferences for receiving marketing from us
• Communications: any messages you send us via email or our contact form

• Processing and fulfilling your orders
• Sending order confirmations and shipping updates
• Responding to enquiries and customer support requests
• Sending marketing emails (only where you have opted in)
• Improving our website and customer experience
• Complying with legal and regulatory obligations
• Fraud prevention and security

Under UK GDPR, we process your data on the following legal bases:

• Contract: to fulfil orders you have placed with us
• Legitimate interests: fraud prevention, website security, analytics
• Consent: for marketing emails — you may withdraw consent at any time
• Legal obligation: for accounting, tax records, and legal compliance

We do not sell your personal data. We share it only with:

• Stripe: payment processing — governed by Stripe's Privacy Policy
• Delivery couriers (e.g. Royal Mail, Evri): to fulfil your order
• Email service providers: for transactional and marketing emails
• Analytics providers: aggregated, anonymised usage data
• Legal authorities: if required by law or to protect our rights

All third-party processors are bound by data processing agreements and handle your data only on our instructions.

We use cookies to improve your experience. Types of cookies we use:

• Essential cookies: required for the site to function (cart, session)
• Analytics cookies: help us understand how visitors use our site (e.g. Google Analytics)
• Marketing cookies: used to show relevant adverts (only with your consent)

You can manage or withdraw cookie consent at any time via our cookie banner or your browser settings.

• Order data: 7 years (UK tax and accounting requirements)
• Customer accounts: for the duration of your account plus 2 years
• Marketing data: until you unsubscribe or withdraw consent
• Support enquiries: 2 years from last contact
• Technical/log data: 12 months

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectification of inaccurate or incomplete data
• Erasure ("right to be forgotten") in certain circumstances
• Restriction of processing in certain circumstances
• Data portability — receive your data in a structured, machine-readable format
• Object to processing based on legitimate interests or for direct marketing
• Withdraw consent for marketing at any time

To exercise any right, contact us at hello@highlanddogchew.co.uk. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption for all data in transit
• Payment processing via Stripe (PCI DSS compliant) — we never store card numbers
• Access controls limiting who can view personal data
• Regular security reviews

No internet transmission is 100% secure. In the event of a data breach that affects your rights, we will notify you as required by law.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before submitting any data.

Our website and services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Where changes are significant, we will notify you by email or a prominent notice on our website.

Continued use of our website after changes constitutes acceptance of the revised policy.

For any privacy-related queries or to exercise your rights, contact us:

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.