Privacy Policy

Who is responsible for your data

Free Splash Ltd (company number SC902519) is responsible for your personal data. Email hello@freesplash.co.uk or use the contact form for privacy enquiries.

Information we collect

• Account and order details: your name, email, phone number, addresses, order contents, prices, delivery choices, and payment references.
• Enquiries: the details you submit through the contact form or send by email, including an order number when supplied.
• Payment data: Stripe processes payment details. We do not receive or store your full card number.
• Technical and security data: IP address, browser and device information, request logs, and essential cookie identifiers used to operate and secure the shop. If you allow PostHog analytics, it processes product views, cart and checkout activity, order totals, and session replays with form inputs masked. Account, checkout, verification, and order pages are excluded from replay. PostHog counts page visits without an analytics cookie whether or not you make a choice. Your choice is not saved if you leave the prompt unanswered.

Why we use your information

• To take payment, fulfil orders, and provide support.
• To maintain accounts, baskets, and order history.
• To prevent fraud and keep the service secure.
• To meet accounting, tax, and other legal obligations.
• To establish, exercise, or defend legal claims.
• To understand and improve shop usage.

Our UK GDPR lawful bases include performance of a contract, compliance with legal obligations, and legitimate interests in operating, protecting, and improving the shop and supporting customers. We do not currently send marketing email or use advertising cookies.

Who receives your data

We do not sell personal data. We share only what is necessary with service providers such as Stripe, PostHog, delivery carriers, hosting, database, and email providers. We may also disclose data where required by law. Some providers may process data outside the UK using an adequacy decision or approved contractual safeguards.

Retention

Order and accounting records are normally retained for up to six years. Account data is kept while the account is active and as needed for orders or legal obligations. Enquiries and security logs are reviewed and deleted when no longer needed; an enquiry connected to an order, dispute, or legal claim may be retained with the relevant record.

Your rights

Depending on the circumstances, you may ask to access, correct, erase, restrict, or receive your personal data, or object to its use. You may also withdraw consent where processing relies on consent. Use the contact form to make a request. We may need to verify your identity.

Cookies and complaints

See our Cookie Policy for the essential cookies used by the shop. If you are unhappy with how we handle your data, please contact us first. You may also complain to the Information Commissioner's Office at ico.org.uk.