Privacy Policy

1. Information We Collect

When you visit WoodTrayShop.com or place an order for handmade wooden trays, we collect certain information to provide and improve our service:

• Order & Customer Information: When you make a purchase, you provide your full name, billing address, shipping address, email address, and contact phone number. This information is used strictly to fulfill, dispatch, and communicate regarding your order.
• Payment Details: All payment transactions are processed securely through certified, PCI-DSS compliant payment gateways (such as Shopify Payments, Stripe, or PayPal). WoodTrayShop.com does not view or store your full credit/debit card numbers or sensitive payment authentication codes on our servers.
• Communications: If you contact us via our website form, email, or telephone, we keep a record of your communication to assist with your inquiry.
• Device & Usage Information: When you browse our site, we may automatically collect standard web server data such as IP address, browser type, referring pages, and interaction data to ensure website security and functionality.

2. How We Use Your Personal Data

We process your personal information for specific, lawful purposes including:

• Fulfilling and dispatching your orders from our Leeds workshop.
• Sending transactional emails (order confirmations, shipping notices, tracking updates).
• Responding to your customer service questions and return requests.
• Preventing fraudulent transactions and ensuring website security.
• Complying with applicable UK legal, accounting, and tax record-keeping requirements.

3. Sharing Your Information

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We share information only with trusted service providers necessary to operate our artisan store:

• Postal & Courier Services: Your name, delivery address, and contact number are shared with our postal carriers (e.g. Royal Mail, DPD) solely for shipping and tracking your parcel.
• Secure Payment Processors: Necessary payment data is shared directly with authorized payment gateways to process your transaction securely.
• E-Commerce Platform: Our store is hosted on Shopify, which provides secure infrastructure and data encryption.

4. Data Retention

We retain your order information in our records only as long as necessary to fulfill the purposes outlined in this policy, address customer support or warranty inquiries, and comply with UK statutory accounting and tax regulations (typically up to 6 years for financial transaction records).

5. Cookies & Tracking Technologies

Our website uses essential cookies for shopping cart functionality and checkout navigation, as well as anonymous analytical cookies to measure site performance. You can manage or disable cookies at any time through your browser settings. For detailed information, please review our Cookie Policy.

6. Your Legal Rights (UK GDPR)

Under UK data protection laws, you have rights regarding your personal information:

• The right to access a copy of the personal data we hold about you.
• The right to request correction of inaccurate or incomplete information.
• The right to request erasure of your personal data ("right to be forgotten"), subject to statutory tax retention rules.
• The right to restrict or object to certain processing activities.

7. Data Security & Contact Information

We implement industry-standard SSL encryption and secure protocols to protect your personal information against unauthorized access, loss, or alteration.

If you have questions regarding this Privacy Policy or wish to exercise any of your data rights, please contact our Data Controller directly: