Chestertons Global Network Holdings Limited ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share and safeguard your personal data when you visit this shop or place an order with us.

This Privacy Policy should be read alongside our Terms & Conditions and Cookie Policy. By using this shop or placing an order, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of the General Data Protection Regulation (GDPR) and the UK GDPR, the data controller responsible for your personal data is:

• Chestertons Global Network Holdings Limited
• DD-15-134-004-007, Level 15, Wework Hub, Al Khatem Tower, ADGM Square, Al Maryah Island, Abu Dhabi 35665, United Arab Emirates
• Email: [shop contact email to be confirmed]

We collect the following categories of personal data:

• Identity & contact data: name, email address, delivery address, billing address, telephone number
• Order data: products purchased, order value, order history, size and product preferences
• Payment data: limited payment confirmation data provided by our payment processor. We do not store full card numbers
• Technical data: IP address, browser type and version, device information, and general location inferred from your IP address
• Usage data: pages viewed, time spent on the shop, referral source and other analytics data collected via cookies (see our Cookie Policy)
• Communications data: any correspondence you send us, including customer service enquiries and complaints

We use your personal data for the following purposes:

• To process and fulfil your order, including passing relevant order and delivery data to our print-on-demand and shipping partners
• To process payments through our payment providers
• To send you order confirmations, shipping updates and customer service communications
• To respond to enquiries, complaints and returns requests
• To send marketing communications, where you have opted in, from which you may unsubscribe at any time
• To improve our shop, products and customer experience through aggregated analytics
• To detect, investigate and prevent fraud or misuse of our shop
• To comply with our legal and regulatory obligations

If you are located in the European Union or United Kingdom, we rely on the following legal bases under the GDPR and UK GDPR to process your personal data:

We share your personal data only where necessary, with the following categories of recipient:

• Print-on-demand fulfilment partners: to manufacture and dispatch your order
• Payment processors: to securely process your payment
• Shipping and courier partners: to deliver your order and provide tracking
• Analytics and marketing service providers: where you have consented to cookies and marketing communications
• Professional advisers and regulators: where required by law or to protect our legal rights

As our shop operates internationally, your personal data may be transferred to, and processed in, countries outside your country of residence, including the United Arab Emirates and other countries where our fulfilment, payment or hosting partners are located.

Where we transfer personal data of EU or UK residents outside the European Economic Area or United Kingdom, we take steps to ensure an adequate level of protection is applied, including the use of Standard Contractual Clauses or equivalent safeguards recognised under the GDPR and UK GDPR, where applicable.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.

• Order and transaction data: retained for the period required by applicable tax and accounting law
• Customer service correspondence: retained for as long as reasonably necessary to resolve your enquiry and for a reasonable period thereafter
• Marketing data: retained until you unsubscribe or withdraw consent

Where we no longer need your personal data, we will securely delete or anonymise it.

Our shop uses cookies and similar tracking technologies to operate correctly, remember your preferences and understand how visitors use our shop. Full details of the cookies we use, their purpose and how to manage your preferences are set out in our Cookie Policy.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction, including secure transmission of payment data through our payment providers and restricted internal access to personal data.

While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

If you are located in the European Union or United Kingdom, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate or incomplete data
• Right to erasure: to request deletion of your personal data, subject to certain legal exceptions
• Right to restrict processing: to request that we limit how we use your data in certain circumstances
• Right to data portability: to request your data in a structured, commonly used, machine-readable format
• Right to object: to object to processing based on legitimate interest or for direct marketing purposes
• Right to withdraw consent: where processing is based on consent, at any time, without affecting the lawfulness of processing prior to withdrawal

To exercise any of these rights, please contact us using the details in Section 14. We will respond to your request within one month, as required under the GDPR.

Our shop is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can take appropriate action to delete such data.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational or regulatory reasons. Any changes will be posted on this page with an updated effective date.

We encourage you to review this Privacy Policy periodically. For significant changes affecting your rights, we will make reasonable efforts to notify registered customers by email.

If you have any questions about this Privacy Policy or wish to exercise any of your data protection rights, please contact us:

• Company: Chestertons Global Network Holdings Limited
• Address: DD-15-134-004-007, Level 15, Wework Hub, Al Khatem Tower, ADGM Square, Al Maryah Island, Abu Dhabi 35665, United Arab Emirates
• Email: [shop contact email to be confirmed]
• Response time: We aim to respond to all enquiries within 2 business days, and within one month for formal data protection requests