Who operates this site

The operational email address identifies a contact route for this site. It does not establish the legal operator or data controller.

Controller and privacy contact

The legal data controller is TO BE CONFIRMED. The dedicated privacy contact is TO BE CONFIRMED. Until those factual fields are replaced, privacy enquiries can be sent through the verified operational route info@simplyshoes.net.

This policy covers personal information handled through Simply Shoes at www.simplyshoes.net. It does not make a parent company, another publication or another storefront the controller.

Information we handle

• Browsing and security: device/browser details, requested pages, IP address or derived identifiers, timestamps, referrer and security events.
• Customer and order information: name, email, telephone, billing and delivery addresses, order contents, value, status, delivery instructions, returns and customer-service correspondence when checkout is enabled and used.
• Payment information: payment status, provider reference and limited fraud signals. The payment provider and exact data flow are TO BE CONFIRMED. Full payment-card details should be handled by the disclosed payment provider.
• Marketing choices: email or other contact details, preferences, consent records and unsubscribe history if marketing is offered.
• Reviews and enquiries: content, display name, contact details and moderation records where those features are enabled.

Purposes and lawful bases

• Take payment, fulfil orders, deliver goods, handle returns and provide customer service: contract steps and performance of a contract.
• Maintain tax, accounting, consumer and transaction records: legal obligations.
• Prevent fraud, secure the service and resolve disputes: legitimate interests in protecting customers and the business, legal obligations, and legal claims.
• Send requested service messages: performance of a contract and legitimate interests in order administration.
• Send optional direct marketing: consent or another lawful basis where legally available, with a simple opt-out.
• Measure and improve the storefront: consent where required, or a statutory exception only if all conditions are met.

Who receives information

Information is shared only where needed for the purposes above, with safeguards appropriate to the relationship. Recipient categories include:

• Payment provider: TO BE CONFIRMED.
• Delivery, returns and fulfilment providers: TO BE CONFIRMED.
• Ecommerce platform, hosting and support providers: TO BE CONFIRMED.
• Professional advisers, insurers, auditors, regulators, courts or law-enforcement bodies where justified or required.
• A buyer or successor in a genuine restructuring, subject to confidentiality and data-protection requirements.

We do not describe personal information as sold. Any advertising or data-sharing arrangement that changes this position must be added before activation.

International transfers

Locations in which providers process information and the applicable transfer safeguards are TO BE CONFIRMED. Where information is transferred outside the UK, the controller must use a lawful transfer mechanism and provide information about how to obtain a copy of the safeguards.

Retention

Personal information is kept only as long as reasonably necessary for the stated purpose, legal obligations, security, accounting and disputes. Exact period-by-purpose retention schedules are TO BE CONFIRMED. Until approved periods are inserted, records must not be retained indefinitely merely because a deletion schedule is absent.

Your rights

Depending on the circumstances, UK data-protection law may give you rights to be informed, access your information, correct it, erase it, restrict or object to processing, receive portable information, and challenge certain automated decisions. Where processing relies on consent, you may withdraw consent without affecting earlier lawful processing.

Send a request to the operational contact above while the dedicated privacy contact remains to be confirmed. We may request proportionate information to verify identity and authority.

Complaints

Please contact us first so the issue can be investigated. You may also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint/. This does not limit other legal remedies.

Security, children and automated decisions

Appropriate technical and organisational measures should protect information according to risk. No internet service can promise absolute security. The service is not intended to solicit personal information from children without appropriate authority. The presence and logic of any solely automated decision with legal or similarly significant effects are TO BE CONFIRMED.

Changes

Material changes will be issued as a new version. The version and effective date above identify the exact policy served for this canonical company.