Legal
Privacy Policy
Last updated: 19 March 2026 · Effective immediately
01
Who We Are
Highland Yak Chew ("we", "us", "our") operates the website https://highlanddogchew.co.uk. We are the data controller responsible for your personal data collected through this website.
This Privacy Policy explains what data we collect, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
02
Data We Collect
We collect the following categories of personal data:
- Identity data: first name, last name
- Contact data: email address, phone number, postal address
- Transaction data: order history, payment references (we do not store card numbers)
- Technical data: IP address, browser type, device information, pages visited
- Marketing data: your preferences for receiving marketing from us
- Communications: any messages you send us via email or our contact form
03
How We Use Your Data
- Processing and fulfilling your orders
- Sending order confirmations and shipping updates
- Responding to enquiries and customer support requests
- Sending marketing emails (only where you have opted in)
- Improving our website and customer experience
- Complying with legal and regulatory obligations
- Fraud prevention and security
04
Legal Basis for Processing
Under UK GDPR, we process your data on the following legal bases:
- Contract: to fulfil orders you have placed with us
- Legitimate interests: fraud prevention, website security, analytics
- Consent: for marketing emails — you may withdraw consent at any time
- Legal obligation: for accounting, tax records, and legal compliance
07
How Long We Keep Data
- Order data: 7 years (UK tax and accounting requirements)
- Customer accounts: for the duration of your account plus 2 years
- Marketing data: until you unsubscribe or withdraw consent
- Support enquiries: 2 years from last contact
- Technical/log data: 12 months
08
Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectification of inaccurate or incomplete data
- Erasure ("right to be forgotten") in certain circumstances
- Restriction of processing in certain circumstances
- Data portability — receive your data in a structured, machine-readable format
- Object to processing based on legitimate interests or for direct marketing
- Withdraw consent for marketing at any time
To exercise any right, contact us at hello@highlanddogchew.co.uk. We will respond within 30 days.
09
Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- SSL/TLS encryption for all data in transit
- Payment processing via Stripe (PCI DSS compliant) — we never store card numbers
- Access controls limiting who can view personal data
- Regular security reviews
No internet transmission is 100% secure. In the event of a data breach that affects your rights, we will notify you as required by law.
10
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before submitting any data.
11
Children's Privacy
Our website and services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
12
Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Where changes are significant, we will notify you by email or a prominent notice on our website.
Continued use of our website after changes constitutes acceptance of the revised policy.
13
Contact & Complaints
For any privacy-related queries or to exercise your rights, contact us:
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.