This policy explains how Nayla Poolside (“we”, “us”) collects and uses personal data when you use this website, in line with the UK GDPR and the Data Protection Act 2018.
Who we are
Nayla Poolside
Website: naylapoolsid.store
What we collect
- Order details: name, billing and delivery address, email, phone number and the products you buy. Card details are handled by our payment provider and never stored by us.
- Account details if you create an account: login email, password (encrypted) and your order history.
- Messages you send through the contact form or by email.
- Newsletter sign-ups: your email address and the date you subscribed.
- Technical data: IP address, browser type and pages visited, collected through cookies and server logs.
Why we use it
- To process and deliver your order and handle returns (performance of a contract).
- To answer your questions and provide support (legitimate interests).
- To send our newsletter when you have asked for it (consent, which you can withdraw at any time).
- To keep the site secure, prevent fraud and meet legal and accounting obligations.
Who we share it with
Payment processors, delivery companies, our web hosting provider and, where required, HMRC or other authorities. We never sell your data. Some providers process data outside the UK under appropriate safeguards.
Cookies
We use essential cookies for the basket and checkout, and analytics cookies to understand how the site is used. You can block cookies in your browser, but the basket may not work without essential cookies.
How long we keep it
Order records are kept for six years to meet accounting rules. Contact messages are kept for 12 months. Newsletter data is kept until you unsubscribe.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to processing or withdraw consent. Contact us through the contact page. You can also complain to the Information Commissioner’s Office at ico.org.uk.