Effective Date: 19 March 2025

At Patched ("we," "our," or "us"), we are committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, share, and safeguard your personal data in compliance with the General Data Protection Regulation (GDPR).

1. Information We Collect

We collect the following categories of personal data:

• Personal Identification Information: Name, email address, postal address, phone number.

• Payment Information: Billing details and payment method data.

• Transactional Data: Purchase history and preferences.

• Technical Data: IP address, browser type, device information, and usage data.

• Marketing Data: Your preferences regarding receiving marketing communications.

2. How We Use Your Data

We process your personal data for the following purposes:

• Order Processing: To process and fulfill your orders, including payment processing and delivery.

• Customer Support: To respond to your inquiries and provide customer service.

• Marketing Communications: With your consent, to send promotional materials and updates about our products and services.

• Legal Obligations: To comply with legal requirements and obligations.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you have given us explicit permission to process your data for specific purposes.

• Contractual Necessity: When processing is essential to fulfill a contract with you, such as processing orders.

• Legal Obligation: When processing is required to comply with legal duties.

• Legitimate Interests: When processing is necessary for our legitimate business interests, provided these are not overridden by your rights and interests.

4. Data Sharing and Transfers

We may share your personal data with:

• Service Providers: Third-party vendors who assist with payment processing, delivery, and marketing services.

• Legal Authorities: When required by law or to protect our legal rights.

• International Transfers: If your data is transferred outside the European Economic Area (EEA), we ensure adequate protection measures are in place, such as Standard Contractual Clauses.

5. Data Retention

We retain your personal data for no longer than necessary to fulfill the purposes outlined in this policy, including compliance with legal, accounting, or reporting obligations. Retention periods vary depending on the type of data and its purpose.

6. Your Data Protection Rights

Under the GDPR, you have the right to:

• Access: Request copies of your personal data.

• Rectification: Request correction of inaccurate or incomplete data.

• Erasure: Request deletion of your data under certain conditions.

• Restriction: Request restriction of processing your data in specific situations.

• Portability: Obtain and reuse your data across different services.

• Objection: Object to processing based on legitimate interests or direct marketing.

• Withdraw Consent: Withdraw consent at any time where we rely on consent for processing.

To exercise these rights, please contact us using the details provided in the "Contact Us" section.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, secure servers, and regular security assessments.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your user experience, analyze site usage, and assist in our marketing efforts. You can manage your cookie preferences through your browser settings.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any updates will be posted on this page with an updated effective date.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

admin@patch-d.co.uk.