Privacy Policy

Last updated:

1. Introduction

This Privacy Policy explains how Thefrynnryghun ("we", "us", "our") collects, uses, stores, shares, and protects your personal data when you visit our website at https://thefrynnryghun.world (the "Website") or use our services. We are committed to protecting your privacy and ensuring that your personal data is handled in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Data Controller

The data controller responsible for your personal data is:

Company Name: Thefrynnryghun
Address: 100 Princes Street, Edinburgh, EH2 3AA, United Kingdom
Email: help-center@thefrynnryghun.world
Website: https://thefrynnryghun.world

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

Contact Information: Full name, email address, phone number (optional), and message content when you submit our order form.
Consent Records: Records of your consent to our Privacy Policy and Terms of Use.

3.2 Information Collected Automatically

Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and referring URL.
Usage Data: Pages visited, time spent on pages, click patterns, and navigation paths.
Cookie Data: Information collected through cookies and similar technologies as described in our Cookie Policy.

4. How We Use Your Personal Data

We process your personal data for the following purposes and legal bases:

Purpose	Legal Basis (UK GDPR)
Processing and fulfilling your orders	Performance of a contract (Art. 6(1)(b))
Responding to your enquiries and messages	Legitimate interest (Art. 6(1)(f))
Sending order confirmations and updates	Performance of a contract (Art. 6(1)(b))
Website analytics and performance improvement	Consent (Art. 6(1)(a)) / Legitimate interest (Art. 6(1)(f))
Ensuring website security and preventing fraud	Legitimate interest (Art. 6(1)(f))
Complying with legal and regulatory obligations	Legal obligation (Art. 6(1)(c))

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only when necessary:

Service Providers: Trusted third-party providers who assist us with website hosting, email delivery, payment processing, and analytics. These providers are contractually bound to process your data only on our instructions and in compliance with applicable data protection laws.
Legal Authorities: When required by law, regulation, or legal process, or to protect our rights, property, or safety.
Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to the same privacy protections.

6. International Data Transfers

Your personal data is primarily processed within the United Kingdom and the European Economic Area (EEA). If we transfer your data outside the UK/EEA, we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO) or an adequacy decision.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Order Data: Retained for up to 6 years after the last transaction to comply with UK tax and accounting obligations.
Communication Records: Retained for up to 2 years after your last interaction with us.
Cookie and Analytics Data: Retained in accordance with the retention periods specified in our Cookie Policy.
Consent Records: Retained for as long as the consent is valid and for a reasonable period thereafter for legal compliance.

When personal data is no longer needed, it will be securely deleted or anonymised.

8. Your Rights Under UK GDPR

Under the UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

Right of Access (Art. 15): You have the right to request a copy of the personal data we hold about you.
Right to Rectification (Art. 16): You have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure (Art. 17): You have the right to request deletion of your personal data where there is no compelling reason for its continued processing.
Right to Restriction of Processing (Art. 18): You have the right to request that we limit the processing of your personal data in certain circumstances.
Right to Data Portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object (Art. 21): You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint: You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

To exercise any of these rights, please contact us at: help-center@thefrynnryghun.world

We will respond to your request within one month of receipt. In certain circumstances, we may extend this period by a further two months, in which case we will inform you of the reason for the delay.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

HTTPS encryption for all data transmitted between your browser and our website.
Secure storage of personal data with access restricted to authorised personnel only.
Regular security assessments and updates to our systems and processes.
Staff training on data protection and privacy best practices.

While we take reasonable steps to protect your data, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete it promptly.

11. Links to Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policies of any third-party websites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Email: help-center@thefrynnryghun.world
Address: 100 Princes Street, Edinburgh, EH2 3AA, United Kingdom