top of page

1. Privacy Policy: Introduction

Tatty Bojangles Ltd understands the importance of your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data via our website, https://www.tattybojangles.co.uk

2. Data We Collect

a) Personal Data You Provide

  • Identity: name, title

  • Contact: postal address, email, phone number

  • Account credentials: username, password

  • Orders & payments: billing/delivery address, payment method, transaction history
     

b) Automatically Collected Data

  • Technical: IP address, browser/device type, operating system

  • Usage: page views, visit duration, navigation path

  • Cookies & similar tech: for site functionality, analytics, personalization
    ​

c) Marketing Data (Optional)

If you opt in—preferences, consents, newsletters subscription details.

3. How We Use Your Data

a) Purpose

  • To fulfill orders, process payments, and deliver products

  • Customer support & service

  • Improve our website & offerings

  • Marketing & newsletters (if opted in)

  • Compliance, fraud prevention, legal obligations
     

b) Legal Basis

  • Performance of contract

  • Legitimate interests / contract

  • Legitimate interests

  • Consent

  • Legal obligations
     

c) Data Used

  • Identity, contact, payment, order history

  • Contact, order details

  • Usage and technical data

  • Contact and preference data

  • Various personal and technical data

5. Third‑Party Data Sharing

We may share your data with:

  • Service Providers (payment processors, hosting, logistics, analytics) — only as needed to provide services.

  • Legal Authorities — if legally required (e.g., fraud investigations).

  • Marketing Partners — only with your express consent.
    No data is sold to third parties

6. International Transfers

While primarily UK-based, some providers may be outside the UK/EU. We ensure your data is protected by using standard contractual safeguards or adequacy decisions in accordance with GDPR.

7. Data Retention

Your data is kept only as long as necessary:

  • Transaction & order records: at least 6 years to comply with HMRC obligations.

  • Marketing consents & pref­er­ences: until you withdraw consent.

  • Account info: while your account is active plus a retention period for legitimate interests.

8. Your Rights

Under GDPR and the UK Data Protection Act, you may:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent

  • Lodge a complaint with the ICO (Information Commissioner’s Office)

To exercise these rights, contact us at privacy@tattybojangles.co.uk.

9. Data Security

We employ technical and organizational safeguards (encryption, access controls, regular audits) to protect your data. Unfortunately, no system is fully secure—if a data breach occurs, we will notify the ICO and affected individuals within 72 hours as required.

10. Children’s Data

We employ technical and organizational safeguards (encryption, access controls, regular audits) to protect your data. Unfortunately, no system is fully secure—if a data breach occurs, we will notify the ICO and affected individuals within 72 hours as required.

11. Changes to This Policy

We may update this Privacy Policy. We’ll post changes here with an updated “Effective Date” at the top. Significant updates will be communicated via email or Site notice.

Effective Date: July 23, 2025

12. Contact Us

Data Controller: Tatty Bojangles Ltd (Reg. No. 13850617)
Address: 6 Longacre Crescent, Cuckfield, Haywards Heath, RH17 5HG, UK
Email: privacy@tattybojangles.co.uk
ICO: You have the right to lodge a complaint with the Information Commissioner’s Office (UK regulator for data protection).

bottom of page