PRIVACY POLICY
Who We Are
Hannah Matthews Taxidermy (“we”, “us”, “our”) is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this Privacy Policy or how we handle your data, please contact us using info@hannahmatthewstaxidermy.com
Policy Definitions
• “I”, “our”, “us”, or “we” refer to the business, Hannah Matthews Taxidermy
• “you”, “the user” refer to the person(s) using this website.
• GDPR means General Data Protection Act.
• PECR means Privacy & Electronic Communications Regulation.
• ICO means Information Commissioner’s Office.
• Cookies mean small files stored on a users computer or device.
​
The Personal Data We Collect
We may collect and process the following categories of personal data:
A. Information You Provide
-
Full name
-
Billing and shipping address
-
Email address
-
Telephone number
-
Payment details (processed securely via third-party providers)
-
Membership account details (username, password)
-
Booking details for classes or services
-
Enquiry form submissions
-
Marketing preferences
B. Automatically Collected Information
When you visit our website hosted on Wix, we may automatically collect:
-
IP address
-
Browser type and version
-
Device information
-
Time zone setting
-
Pages visited and time spent on site
-
Referring website
-
Cookie identifiers
How We Use Your Personal Data
We only process your personal data where we have a lawful basis under UK GDPR.
Contractual Necessity
To:
-
Process and deliver physical products
-
Arrange international shipping upon request
-
Provide booked classes and services
-
Manage membership accounts
-
Process payments
-
Provide customer support
Legitimate Interests
To:
-
Improve our website and services
-
Analyse website performance
-
Prevent fraud
-
Manage business administration
We ensure our legitimate interests do not override your rights.
Consent
Where you:
-
Subscribe to our mailing list or newsletter
-
Agree to receive marketing communications
-
Accept non-essential cookies
You may withdraw consent at any time by clicking “unsubscribe” or contacting us.
Legal Obligation
To:
-
Comply with tax and accounting requirements
-
Respond to lawful requests from authorities
Payments
Payments are processed securely via:
-
PayPal
-
Debit and credit card providers via secure payment gateways
We do not store full card details. Payment providers process your information in accordance with their own privacy policies.
Marketing Communications
If you subscribe to our newsletter or opt in to marketing, we may send you:
-
Product updates
-
Special offers
-
Class announcements
-
Business news
We use email marketing tools provided through Wix or integrated email marketing services.
You can unsubscribe at any time using the link in our emails.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to improve functionality and analyse performance.
We use:
-
Google Analytics (website traffic analysis)
-
Meta Platforms tracking tools including Meta Pixel (advertising and remarketing)
-
Wix Analytics
These tools may collect information about your browsing behaviour.
Non-essential cookies (analytics and marketing) are only activated with your consent via our cookie banner.
You can manage or withdraw cookie consent at any time.
International Data Transfers
Some of our third-party service providers (e.g., PayPal, Google, Meta, Wix) may store or process data outside the UK.
Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as:
-
UK International Data Transfer Agreement (IDTA)
-
Adequacy regulations
-
Standard contractual clauses
International Shipping
If you request international shipping, we will process the necessary personal data (such as your address and contact details) to arrange delivery and comply with customs requirements.
Data Retention
We retain personal data only as long as necessary:
-
Order and tax records: up to 6 years (for HMRC compliance)
-
Marketing data: until you unsubscribe
-
Membership accounts: until account deletion or inactivity period
Your Legal Rights
Under UK data protection law, you have the right to:
-
Access your personal data
-
Request correction of inaccurate data
-
Request deletion
-
Restrict processing
-
Object to processing
-
Data portability
-
Withdraw consent at any time
To exercise your rights, contact us at info@hannahmatthewstaxidermy.com .
​
Data Security
We implement appropriate technical and organisational measures to protect your data from unauthorised access, alteration, disclosure, or destruction.
Our website infrastructure is provided by Wix, which maintains secure hosting environments.
​
Children’s Data
Our website and services are not intended for children under 13. We do not knowingly collect personal data from children.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.
​