7. Privacy Policy

Last updated: 05/11/26

7.1 Who we are

Glass art scotland ltd., unit 17 130 coursington road, Motherwell ML1 1PW, is the controller of personal data described in this policy unless another party is identified as controller for a particular service. Privacy enquiries: honeybadgerscotland@gmail.com.

7.2 Personal data we may collect

Identity and contact details, such as name, billing/delivery address, email and telephone number.
Order, product, delivery, support and returns information.
Payment-status and transaction-reference information. Do not state that you store card data unless you actually do.
Account and authentication information where customer accounts are enabled.
Age-verification status and related information actually returned to you by Agechecked. Describe the data flow accurately after reviewing the provider agreement.
Technical and usage data obtained through the Website, subject to the cookie settings and technologies actually deployed.
Correspondence, complaints and customer-service records.

7.3 Purposes and lawful bases

We process personal data only where we have a valid lawful basis. Depending on the activity, this may include performance of a contract, compliance with a legal obligation, legitimate interests, or consent. The final published policy should map each actual processing activity to its lawful basis rather than relying on a generic statement.

7.4 How we use information

To take and fulfil orders, arrange delivery and manage returns.
To administer customer accounts and respond to enquiries.
To perform or obtain legally appropriate age-verification and fraud-prevention checks.
To maintain accounting, tax and business records where required.
To secure and operate the Website.
To send marketing only where the applicable rules permit it, including obtaining consent where required.

7.5 Sharing information

We may share personal data with service providers that are genuinely used to operate the business, such as hosting providers, WooCommerce/WordPress service providers, delivery providers, email providers, age-verification providers, professional advisers and authorities where disclosure is required or permitted by law. Replace this description with the actual providers and roles where appropriate.

7.6 International transfers

If a service provider processes personal data outside the United Kingdom, the final policy must explain the applicable transfer mechanism and safeguards where required. Confirm this from each provider before publication.

7.7 Retention

We retain personal data only for as long as necessary for the purpose for which it was collected and for applicable legal, accounting, dispute and regulatory requirements. Insert a retention schedule or meaningful criteria reflecting your actual systems and obligations.

7.8 Your rights

Depending on the circumstances, UK data-protection law may give individuals rights including access, rectification, erasure, restriction, objection and data portability, and rights concerning consent and certain automated decisions. Requests may be sent to [PRIVACY EMAIL]. Rights are subject to legal conditions and exemptions.

7.9 Complaints

If you have concerns about our use of your personal data, contact us first at honeybadgerscotland@gmail.com You may also have the right to complain to the UK Information Commissioner’s Office (ICO).

7.10 Security

We use organisational and technical measures appropriate to the personal data and risks involved. No online service can be guaranteed completely secure.

7.11 Changes

We may update this policy when our processing, providers or legal requirements change. The current version will show its last-updated date.