Privacy Policy

Data Controller

Karen Jessop

Data Protection & Privacy Notice

1. What data we collect When you make a purchase from the Defy Duchenne Collective, we collect the following personal information:

Name

Delivery Address

Email Address

Payment details (processed securely by [e.g., Shopify/PayPal/Stripe]; we do not see your full card details).

2. The Purpose of collecting this data We use your information solely for the following purposes:

Fulfillment: To process your order and ship your items to you.

Communication: To send you updates about your order (receipts and tracking info).

Legal Record Keeping: To maintain accurate accounts of our fundraising totals as required by UK law.

3. Legal Basis for Processing We process your data under the basis of Contract (to fulfil your order) and Legitimate Interests (to manage a fundraising shop effectively).

4. Data Sharing We do not sell or rent your data to third parties. Your information is only shared with:

Our shipping/courier partners (to deliver your order).

Our payment processor (to handle the transaction).

5. Data Retention We will only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

6. Your Rights Under UK GDPR, you have the right to access the data we hold about you, request corrections, or ask for your data to be deleted once the order is fulfilled. If you have any questions, please contact k.jessop67@hotmail.co.uk.