Putney Privacy Policy for Customers

Introduction

This Privacy Policy describes how Putney collects, uses, and protects the personal data of customers who place orders with us in Putney and the surrounding districts. We are committed to processing your data securely and transparently in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Scope of This Policy

This policy applies to all individuals who place orders with Putney for products or services, whether for delivery or collection, in Putney and neighboring areas. It covers only those data processing activities related to customer orders and inquiries.

What Personal Data We Collect

When you place an order with Putney, we collect the following categories of personal data:

• Identity Information: Name, address, and contact details (including delivery address and instructions where provided)
• Order Information: Items purchased, order amounts, and purchasing history
• Payment Details: Transaction details (note: we do not store full payment card numbers)
• Communication Data: Records of your communication with us regarding your order
• Technical Data: Device and browser information, IP addresses, and cookies (where applicable and subject to consent)

Lawful Basis for Processing

We only process personal data where a lawful basis under GDPR applies. These include:

• Contractual Necessity: Processing your data to fulfill your order with us
• Legal Obligation: Retaining invoices or transaction records for legal and tax purposes
• Legitimate Interests: Using purchase history for business analytics to improve our service (without impacting your rights and freedoms)
• Consent: For marketing communications or use of non-essential cookies, only if you have given explicit consent

How We Use Your Personal Data

Your data is used for the following purposes:

• To process and deliver your orders efficiently
• To communicate with you about your order, delivery, or any post-order queries
• To comply with legal and financial recordkeeping requirements
• To improve our products and customer experience through internal analysis
• If you have consented, to send you marketing materials about offers or new products

Data Retention

We store your data only for as long as necessary according to the purpose for which it was collected and our legal obligations.

• Customer order and account data: Kept for up to 6 years after your last order, unless a longer period is legally required
• Payment and transaction data: Retained in line with statutory financial requirements (typically up to 6 years)
• Marketing data (if consent given): Retained until you withdraw your consent or request removal

After expiry of the retention period, data is deleted or anonymised unless statutory obligations require otherwise.

Processors and Data Sharing

We may employ third-party service providers ("processors") to assist in delivering our services, such as payment processing, IT hosting, and delivery logistics. These processors only process data on our behalf and according to our strict instructions. We ensure that processors provide appropriate security and comply with GDPR requirements. Your data is never sold to third parties.

Putney may also disclose personal data when required by law, court order, or other legal processes.

International Transfers

Your data is generally processed within the United Kingdom or the European Economic Area (EEA). If data must be transferred outside of these areas, we ensure adequate protection in compliance with GDPR, including approved safeguards or contractual clauses.

How We Protect Your Data

We take your data security seriously. Putney uses technical and organisational security measures—including encryption, restricted access, and staff training—to safeguard your data against loss, unauthorised access, or misuse. Access to your personal information is limited to those staff and processors who have a need to know.

Your Data Protection Rights

Under GDPR, you have the following rights concerning your personal data:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request corrections to inaccurate or incomplete data
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data where legally permitted
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Request transfer of your data to another provider in a commonly used format
• Right to Object: Object to certain uses of your data, such as direct marketing
• Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time

If you wish to exercise any of these rights, you can do so by contacting us via our usual customer service channels. We will respond in accordance with legal obligations and timeframes.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available via our official customer communication channels. We encourage you to review this policy periodically.

Contact and Complaints

If you have concerns about how we process your data or wish to make a complaint, please contact our customer service team. If you are not satisfied with our response, you also have the right to lodge a complaint with the relevant Data Protection Authority.

Conclusion

Your trust is important to us. By placing orders with Putney, you acknowledge your understanding of how we collect, use, and protect your personal data as set out in this Privacy Policy.