Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Contact Information: Name, email address, phone number, and shipping/billing addresses
• Payment Information: Debit/credit card details and billing information (processed securely through our payment providers)
• Order Information: Products purchased, order history, and transaction details
• Communication Data: Messages, emails, and support requests you send us
• Account Information: Username and password if you create an account

Automatically Collected Information

When you visit our website, we automatically collect:

• IP address and browser type
• Device information and operating system
• Pages viewed and time spent on our site
• Referring website and exit pages
• Cookies and similar tracking technologies

2. How We Use Your Information

We use the information we collect to:

• Process and fulfil your orders
• Communicate with you about your orders and our products
• Send promotional emails (with your consent)
• Improve our website and customer experience
• Prevent fraud and enhance security
• Comply with legal obligations
• Respond to your questions and support requests

3. Lawful Basis for Processing

Under UK GDPR, we process your personal data on the following lawful bases:

• Contract: To fulfil orders and provide the services you've requested
• Consent: For marketing communications and non-essential cookies
• Legal obligation: To comply with tax, accounting, and regulatory requirements
• Legitimate interests: For fraud prevention, security, and website improvement

4. Information Sharing

We do not sell your personal information. We may share your information with:

• Service Providers: Payment processors, shipping carriers, and email service providers who help us operate our business
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• SSL/TLS encryption for all data transmission
• Secure payment processing through PCI-compliant providers
• Regular security audits and monitoring
• Limited access to personal information by employees
• Secure data storage with encryption at rest

6. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and cart contents
• Analyse website traffic and usage patterns
• Personalise your experience
• Serve relevant advertisements

You can control cookies through your browser settings. Disabling cookies may affect your ability to use certain features of our website.

7. Your Rights Under UK GDPR

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Rectification: Request correction of inaccurate information
• Erasure: Request deletion of your personal information ("right to be forgotten")
• Restriction: Request that we limit processing of your data
• Data portability: Request a copy of your data in a portable format
• Objection: Object to processing based on legitimate interests or for direct marketing
• Withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at privacy@thepepthub.com. If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. International Data Transfers

If we transfer your personal data outside the UK, we ensure it is protected by appropriate safeguards, such as International Data Transfer Agreements (IDTAs) or the UK Addendum to the EU Standard Contractual Clauses, in accordance with UK GDPR requirements.

9. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Order records are retained for a minimum of six years to comply with tax and accounting requirements.

10. Children's Privacy

Our website is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will promptly delete it.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

The Pep Hub
Email: privacy@thepepthub.com
Support: support@thepepthub.com