Privacy

Who is responsible for your data

Scott John Mathews trading as uglydog, 31 Holcroft Drive, Wigan, WN2 5YP, United Kingdom, is the data controller for the information described here. That means we decide what is collected and why, and we are accountable for it. Email scott@uglydog.online about anything on this page.

What we collect, and why

When you order something

Your email address, delivery name and address, what you ordered and the price. We need these to make and send your order, to email you a receipt and progress updates, and to keep the sales records HMRC requires. The lawful basis is performing our contract with you, and for the tax records, a legal obligation.

Your card details never reach us. Payment happens on Stripe's own checkout; we only receive a reference, the amount, and whether it succeeded.

When you ask for a quote

Your name, email and the description of the project you send us — kept so we can quote and, if you go ahead, do the work. The lawful basis is taking steps at your request before a contract.

If you create an account

An account is optional; you can buy as a guest with just an email. If you make one we store your email, an encrypted version of your password, and your order history so you can track orders online.

If you email us

We keep the message and your contact details so we can reply and keep a record of what was agreed. The lawful basis is our legitimate interest in answering you and running the business properly.

When you browse the site

We count page views to understand which pages help and where people give up. What is collected and how to refuse it is set out on our cookies page.

Who else sees it

Only the suppliers we need to run the shop, and only for that purpose. None of them may use your data for their own marketing.

• Stripe — takes the payment and handles card data.
• Couriers — get the delivery name and address, to deliver the parcel.
• Our hosting and email providers — store the site and send our emails.
• Google Analytics — only if you accept analytics cookies.

We do not sell your information, and we do not share it for anyone else's advertising. We will disclose data if the law requires it.

Where your data is held

Our servers are in the UK and the EU. Some suppliers, including Stripe and Google, may process data outside the UK. Where that happens it is covered by UK adequacy regulations or the standard contractual clauses approved for international transfers.

How long we keep it

• Order and payment records — six years after the tax year, as HMRC requires.
• Quote requests that go nowhere — up to two years, then deleted.
• Account details — until you close the account or ask us to delete it.
• Emails — up to three years, so we can look back at what was agreed.
• Analytics — as set out on the cookies page.

Your rights

Under UK data protection law you can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything that is wrong;
• delete it, where we do not have to keep it for tax or legal reasons;
• stop or limit what we do with it, or object to it;
• hand it to you, or another provider, in a portable format.

Email us and we will respond within one month. There is no charge. We may ask you to confirm who you are first, so we do not hand your details to somebody else.

If you are not happy with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can fix it.

Marketing

We only send marketing email if you have asked for it, and every one has an unsubscribe link. Order confirmations and progress updates are not marketing — you get those because you bought something, and they stop when your order is complete.

Children

The shop is not aimed at children and we do not knowingly collect their data. If you think a child has given us information, tell us and we will remove it.

Changes

If we change how we handle your data we will update this page, and the date at the top will tell you when.