1. Who We Are

Sunshine Gifts (“we”, “us”, “our”) is responsible for the personal data collected through this website.

Contact email: hello@sunshinegifts.co.uk

We are committed to protecting your personal data and respecting your privacy in accordance with UK GDPR and the Data Protection Act 2018.

---

2. What Personal Data We Collect

We may collect and process the following personal data when you use our website or place an order:

• Name
• Billing and delivery address
• Email address
• Telephone number
• Payment information (processed securely by third-party payment providers)
• Order history
• Communications with us (emails, contact forms)

We do not store your full payment card details.

---

3. How We Use Your Data

We use your personal data to:

• process and deliver your orders
• manage payments, refunds, and returns
• communicate with you about your order
• provide customer support
• comply with legal and accounting obligations
• prevent fraud and secure our website

If you have opted in, we may also use your email address to send marketing communications. You can unsubscribe at any time.

---

4. Legal Basis for Processing

Under UK GDPR, we process your data based on the following legal grounds:

• Performance of a contract (to fulfil your order)
• Legal obligation (tax and accounting requirements)
• Legitimate interests (customer service, fraud prevention)
• Consent (for marketing communications, where applicable)

---

5. Sharing Your Data

We only share your personal data where necessary, including with:

• payment providers (e.g. PayPal)
• delivery and courier companies
• website hosting and e-commerce platform providers
• professional advisors where legally required

All third parties are required to keep your data secure and use it only for the agreed purpose.

---

6. How Long We Keep Your Data

We keep your personal data only for as long as necessary:

• order and transaction data – for legal and tax purposes
• customer service communications – as long as needed to resolve queries
• marketing data – until you withdraw consent

---

7. Your Rights

Under UK GDPR, you have the right to:

• access your personal data
• request correction of inaccurate data
• request deletion of your data
• restrict or object to processing
• withdraw consent at any time
• lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please contact us at hello@sunshinegifts.co.uk.

---

8. Data Security

We take appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, or disclosure.

---

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page.

---

10. Governing Law

This Privacy Policy is governed by the laws of Scotland.