Privacy Policy

This policy explains what personal information Lotty8 Supps collects when you use lotty8supps.idevelopment.site, how we use it, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).

1. Who we are

REXON RETAIL E-COMMERCE & WHOLESALE LTD is the controller of your personal information. Address: Unit 15a, Redbridge Enterprise Centre, Thompson Close, Ilford, Essex, England, IG1 1TY. Email: info@lotty8supps.com. Phone: +44 7955 204 290.

2. What we collect

• Order details – your name, billing and delivery address, email, phone number, the products you buy and your order history.
• Account details – if you create an account: your login details, saved addresses and wishlist.
• Payment information – payments are handled by our payment providers (such as Stripe and PayPal). We receive confirmation of payment and limited details such as the card type and last four digits, but never your full card number.
• Messages – anything you send us through our contact form, email, phone, WhatsApp or Facebook Messenger.
• Reviews – the name and content you choose to publish.
• Marketing preferences – if you sign up to our emails.
• Technical data – your IP address, browser and device type, and how you use our site, collected through cookies (see our Cookie Policy).

3. How we use it, and why we are allowed to

• To process and deliver your order, handle returns and answer questions – because it is needed to perform our contract with you.
• To keep financial and tax records – because the law requires it.
• To prevent fraud and keep our website secure – in our legitimate interests.
• To improve our website and range – in our legitimate interests, using information that is aggregated where possible.
• To send marketing emails – only with your consent, which you can withdraw at any time using the unsubscribe link in every email.

4. Who we share it with

We never sell your personal information. We share only what is needed with:

• our warehouse and fulfilment partners, who pack and dispatch orders;
• delivery companies such as Royal Mail, so they can deliver your parcel and send tracking updates;
• payment providers (such as Stripe and PayPal), to take payment and prevent fraud;
• our website hosting, email and IT providers, and our email marketing provider if you sign up to our emails;
• professional advisers such as accountants, and authorities such as HMRC or the police where the law requires it.

Some of these providers may process data outside the UK. When they do, we make sure appropriate safeguards are in place, such as UK adequacy regulations or approved contract clauses.

5. How long we keep it

• Order and financial records: 6 years from the end of the tax year, as required by law.
• Account details: until you close your account, then removed unless we must keep them for the reasons above.
• Messages and enquiries: up to 2 years.
• Marketing data: until you unsubscribe.

6. Keeping it safe

Our website uses a secure (HTTPS) connection, payments are handled by specialist providers, and access to customer information is limited to people who need it.

7. Your rights

You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, to have it transferred to you or another company, and to withdraw consent at any time. To use any of these rights, email info@lotty8supps.com. We will reply within one month.

8. Children

Our website is not intended for anyone under 18 and we do not knowingly collect information from children.

9. Complaints

If you are unhappy with how we have handled your information, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page.