This Privacy Policy sets out how York Lucky Cats collects, uses, and protects any personal data that you provide when you use this website. We are committed to ensuring that your privacy is protected and that your data is handled in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Important Information and Our Details (Data Controller)

Data Controller: York Lucky Cats (referred to as “We”, “Us”, or “Our”).
Email: sales@yorkluckycats.co.uk
Trading Address:  34 Coney Street, York, YO1 9ND

For any questions regarding this policy or to exercise your legal rights, please contact us using the details above.

2. The Data We Collect About You

Personal data, or personal information, means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you, which we have grouped as follows:

• Identity Data: Includes first name, last name, title.
• Contact Data: Includes billing address, shipping address, email address, and telephone numbers.
• Financial Data: Includes payment card details (processed securely by third-party payment providers, we do not store full details).
• Transaction Data: Includes details about payments to and from you and other details of products and services you have purchased from us.
• Technical Data: Includes internet protocol (IP) address, browser type and version, time zone setting and location, operating system, and platform.
• Marketing and Communications Data: Includes your preferences in receiving marketing from us and your communication preferences.

3. How Your Personal Data is Collected

We use different methods to collect data from and about you, including:

• Direct Interactions: You may give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes data provided when you purchase our products.
• Automated Technologies or Interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.
• Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties, such as payment processors (e.g., PayPal, credit card companies) and analytics providers (e.g., Google Analytics).

4. Lawful Basis for Using Your Data (UK GDPR)

We will only use your personal data when the law allows us to. This is known as a Lawful Basis. Most commonly, we will use your personal data in the following circumstances:

• Contract: Where we need to perform the contract we are about to enter into or have entered into with you (e.g., processing your order and dispatching goods).
• Legitimate Interest: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., improving our products, detecting fraud).
• Legal Obligation: Where we need to comply with a legal obligation (e.g., tax and accounting rules).
• Consent: Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications to you via email. You have the right to withdraw consent at any time.

5. Sharing Your Personal Data

We may have to share your personal data with the parties set out below for the purposes set out in section 4.

• Internal Third Parties: Other companies in our group.
• External Third Parties: Service providers acting as processors based in the UK and overseas who provide IT and system administration services.
• Professional Advisers: Lawyers, bankers, auditors, and insurers.
• HMRC, regulators, and other authorities based in the UK who require reporting of processing activities in certain circumstances.
• Couriers/Shipping Providers: Sharing Identity and Contact Data to facilitate delivery of your order.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We only permit them to process your personal data for specified purposes and in accordance with our instructions.

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

7. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. For example, by law, we have to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers for tax purposes.

8. Your Legal Rights (UK GDPR)

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:

• Request access to your personal data (commonly known as a “data subject access request”).
• Request correction of the personal data that we hold about you.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request restriction of processing of your personal data.
• Request the transfer of your personal data to you or a third party (data portability).
• Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us at sales@yorkluckycats.co.uk.

You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

9. Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, please see our separate Cookie Policy [Note: you should create a separate Cookie Policy and link to it here].

10. Changes to the Privacy Policy

We keep our Privacy Policy under regular review. Any changes we make to our Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by email. This version was last updated on 28th November 2025..