GDPR Statement

Privacy Policy

This Privacy Policy explains how Lazy Lazy Line Ltd ("we", "us", or "our") collects, uses, stores, and protects your personal data when you visit or make a purchase from lazylazyline.com ("the Website"). We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).

1. Who We Are

Data Controller: Lazy Lazy Line Ltd

Website: lazylazyline.com

Contact email: contact@lazylazyline.com

If you have any questions about this policy or how we handle your data, please contact us at the email above.

2. What Personal Data We Collect

We collect the following categories of personal data:

2.1 Names and Email Addresses

• Your name and email address when you create an account, place an order, or sign up to our mailing list.
• We use this to process your order, send order confirmations and updates, and communicate with you about your account.

2.2 Payment Information

• Payment card details and billing information when you make a purchase.
• Please note: we do not store full card details on our servers. Payments are processed securely by a third-party payment processor (e.g. Stripe or PayPal) who are themselves GDPR compliant.

2.3 Cookies and Analytics Data

• We use cookies and similar tracking technologies to understand how visitors use our Website.
• This may include your IP address, browser type, pages visited, time on site, and referring URLs.
• We use this information to improve our Website and your shopping experience.
• You can control cookie preferences via our cookie consent banner. See Section 7 for more details.

3. Legal Basis for Processing

We only process your personal data where we have a lawful basis to do so under UK/EU GDPR:

• Contract performance – to process and fulfil your orders, and to manage your account.
• Legal obligation – to comply with tax, accounting, and consumer protection laws.
• Legitimate interests – to improve our Website, prevent fraud, and ensure security.
• Consent – for marketing communications and non-essential cookies. You may withdraw your consent at any time.

4. How We Use Your Data

We use your personal data for the following purposes:

• To process and fulfil your orders, including sending order confirmations and shipping updates.
• To manage your customer account.
• To process payments securely.
• To respond to your enquiries and provide customer support.
• To send you marketing emails if you have opted in (you can unsubscribe at any time).
• To improve our Website through analytics.
• To comply with our legal and regulatory obligations.
• To prevent fraud and ensure the security of our Website.

5. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with trusted third parties only where necessary:

• Payment processors (e.g. Stripe, PayPal) to securely handle transactions.
• Delivery and logistics partners to fulfil and ship your orders.
• Email marketing platforms (e.g. Mailchimp) if you have opted in to marketing.
• Analytics providers (e.g. Google Analytics) to help us understand Website usage.
• IT and hosting providers who support the operation of our Website.
• Legal and regulatory authorities where required by law.

All third parties we work with are required to handle your data securely and in accordance with applicable data protection law.

6. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy:

• Order and transaction data: retained for 7 years to comply with legal and tax obligations.
• Account data: retained for as long as your account is active, and for up to 2 years after account closure.
• Marketing data: retained until you unsubscribe or withdraw consent.
• Analytics data: typically retained for up to 26 months, in line with standard analytics platform settings.

When data is no longer needed, it is securely deleted or anonymised.

7. Cookies

We use the following types of cookies on our Website:

• Essential cookies – necessary for the Website to function (e.g. shopping cart, login sessions). These cannot be disabled.
• Analytics cookies – help us understand how visitors use our Website. These are only set with your consent.
• Marketing cookies – used to deliver relevant advertising. These are only set with your consent.

When you first visit our Website, you will be shown a cookie consent banner. You can update your preferences at any time via the cookie settings link in our website footer.

8. Your Rights Under UK/EU GDPR

You have the following rights in relation to your personal data:

• Right of access – you can request a copy of the personal data we hold about you.
• Right to rectification – you can ask us to correct inaccurate or incomplete data.
• Right to erasure – you can request that we delete your personal data, subject to certain legal obligations.
• Right to restriction of processing – you can ask us to limit how we use your data in certain circumstances.
• Right to data portability – you can request your data in a structured, machine-readable format.
• Right to object – you can object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent – where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us at contact@lazylazyline.com. We will respond within 30 days.

9. Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration. Payment data is handled by PCI DSS-compliant payment processors and is never stored on our servers in full.

While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. If you have concerns about the security of your data, please contact us.

10. International Transfers

Some of our third-party service providers may be based outside the UK or EU. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the relevant supervisory authority, or reliance on adequacy decisions.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Complaints

If you have concerns about how we handle your personal data, please contact us in the first instance at dom@lazylazyline.com. You also have the right to lodge a complaint with a supervisory authority:

UK: Information Commissioner's Office (ICO) – ico.org.uk

EU: Your local national data protection authority.