Privacy policy.

1. Who we are

digsforfigs.com is operated by Digs for Figs, run by Martin and Sonia Parsons, based in Honiton, Devon, UK. We are the “data controller” for the personal data described in this policy — meaning we decide how and why it’s used. [Add ICO registration reference here once registered, if applicable.]

Any questions about this policy or your data can be sent to minifigs@digsforfigs.com.

2. What personal data we collect

We only collect what we need to run the shop and talk to our customers. Depending on how you use the site, this can include:

• Name, delivery address and billing address
• Email address and phone number
• Order details and order history (what you bought, when, and value)
• Payment confirmation details from our payment provider — we never see or store your full card number (see section 5)
• Anything you tell us directly, e.g. via our contact form or email
• Technical data collected automatically via cookies — IP address, browser/device type, and pages visited (see section 6)

3. How we collect it

Mostly directly from you: when you place an order at checkout, when you get in touch through our contact form or by email, or if you ever create an account with us. We also collect some data automatically through cookies when you browse the site — see our cookie policy for the specifics.

4. How we use it, and why

We use your data for the following purposes, each with a lawful basis under UK GDPR:

• To process and fulfil your order — take payment, arrange delivery, send dispatch confirmations. Basis: performance of a contract with you.
• To respond to enquiries — answer questions sent via our contact form or email. Basis: contract / our legitimate interest in customer service.
• To meet legal obligations — e.g. keeping records for tax purposes. Basis: legal obligation.
• To improve the site — understanding how visitors use digsforfigs.com via analytics. Basis: legitimate interest, or your consent for non-essential cookies.
• To send marketing — only if you’ve opted in. Basis: consent, and you can withdraw it at any time.

We don’t use your data for any automated decision-making or profiling that has a legal or similarly significant effect on you.

5. Who we share your data with

We don’t sell your personal data to anyone, ever. We do share it with a small number of trusted service providers who help us run the business:

• Payment processors (Stripe and/or PayPal) — to take payment securely. They process your card details directly; we never see or store your full card number.
• Delivery couriers — to get your order to you, we share your name, delivery address and contact details.
• Our website host (SiteGround) — stores the site and its data on our behalf.
• Analytics providers (Google Analytics / Google Site Kit) — help us understand site traffic, generally using anonymised or aggregated data where possible.

We’ll only share data with anyone else if we’re legally required to (e.g. a request from HMRC or law enforcement).

6. Cookies

Our site uses cookies — small files stored on your device — for things like keeping your basket working, remembering preferences, and (with your consent) understanding how visitors use the site. We use CookieYes to manage cookie consent; you can review and change your preferences at any time using the cookie settings link in our site footer.

Essential cookies (needed for the site and checkout to function) are used regardless of consent, as permitted by law. Non-essential cookies (analytics, etc.) are only set once you’ve given consent via the banner.

7. How long we keep your data

We keep order and transaction records for as long as required by UK tax law (currently 6 years). Contact form enquiries are kept only as long as needed to deal with them, then deleted. If you’ve given marketing consent, we’ll keep your details until you unsubscribe or ask us to stop.

8. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Ask us to delete your data (“right to be forgotten”), subject to certain legal exceptions (e.g. tax records)
• Restrict or object to how we process your data
• Receive your data in a portable format
• Withdraw consent at any time, where we’re relying on consent

To use any of these rights, email minifigs@digsforfigs.com and we’ll respond within one month.

9. Keeping your data safe

We use industry-standard measures to protect your data — our site runs over HTTPS, and we rely on reputable, secure providers (our host, and our payment processors) who maintain their own security standards. We never store full card details ourselves.

10. International transfers

Some of our service providers (for example, parts of Google’s and Stripe’s infrastructure) may process data outside the UK. Where this happens, we rely on providers who maintain appropriate safeguards, such as the UK’s International Data Transfer Agreement or equivalent standard contractual clauses.

11. Children’s privacy

Our site is intended for adults purchasing display products, and we don’t knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we’ll remove it.

12. Changes to this policy

We may update this policy from time to time, for example if the law changes or our processes change. The current version will always be on this page, with the date it was last updated at the top.