Privacy Policy (GDPR Notice)

Effective Date: 01/01/2026

Last Updated: 01/01/2026

1. Who We Are – The Hidden Hatch Ltd

The Hidden Hatch Ltd (“we,” “us,” or “our”) acts as the Data Controller responsible for the personal data collected via our website, https://funkystride.com. We are committed to protecting your privacy in compliance with the General Data Protection Regulation (GDPR) and related data protection laws.

Contact Information	Details
Full Legal Name:	The Hidden Hatch Ltd
Address:	The Hidden Hatch Ltd Suite A 82 James Carter Road Mildenhall IP28 7DE
Email for Privacy Matters:	[email protected]

2. The Data We Collect and Why

We collect different categories of personal data based on your interaction with our shop.

Category of Data	What We Collect	Purpose of Processing	Lawful Basis (GDPR)
Identity/Contact Data	Name, billing address, shipping address, email, phone number.	To process and deliver your order, manage your account, and provide customer support.	Performance of a Contract (to sell and ship goods to you).
Financial Data	Payment card details (processed securely via our third-party payment processor).	To complete and manage payment for your order.	Performance of a Contract (to accept payment).
Technical Data	IP address, browser type, time zone, cookies.	To ensure website security, prevent fraud, and improve website functionality.	Legitimate Interests (to operate a secure and functional online shop).
Marketing Data	Email address (if you subscribe to our newsletter).	To send you updates, special offers, and product information.	Consent (you opt-in via a clear tick-box).

3. How We Collect Your Data

We collect data in the following ways:

• Direct Interaction: When you create an account, place an order, sign up for a newsletter, or contact us directly via email or form.
• Automated Technology: As you browse our website, we collect Technical Data via Cookies and similar tracking technologies.
• Third Parties: We may receive data from providers such as payment processors (e.g., PayPal, Stripe) when they confirm your payment is complete.

4. Who We Share Your Data With (Recipients)

We only share your data with trusted third parties necessary for the operation of our shop:

• Shipping Providers: We share your Identity and Contact Data (Name, Address) with shipping companies (e.g., Royal Mail, FedEx) to deliver your order.
• Payment Processors: We share your Financial Data with secure payment services (e.g., Stripe, PayPal) to process your payment. We never store full credit card details on our servers.
• Website Analytics: We share limited Technical Data with tools like [e.g., Google Analytics] to understand website usage and improve our shop.

5. Data Security and Retention

• Security: We have implemented appropriate security measures, including SSL encryption for all website data transfer, to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way.
• Retention: We only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. We typically retain order data for 6 years after a purchase for tax and warranty purposes.

6. Your Rights Under GDPR

Under the GDPR, you have the following rights concerning your personal data:

• Right to be Informed: You have the right to know how we use your data (this Policy does that).
• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct data that is inaccurate or incomplete.
• Right to Erasure (‘Right to be Forgotten’): You can ask us to delete your personal data where there is no good reason for us to continue processing it.
• Right to Restrict Processing: You can ask us to pause the processing of your data under certain conditions.
• Right to Data Portability: You can request that we transfer your data to you or another party in a structured, commonly used format.
• Right to Object: You can object to us processing your data where we are relying on a Legitimate Interest.
• Right to Withdraw Consent: Where we rely on Consent to process your data (e.g., for marketing), you can withdraw that consent at any time.

To exercise any of these rights, please contact us at the dedicated email address listed in Section 1. We will respond to your request within one month.

7. How to Complain

If you have concerns about our use of your personal information, you have the right to make a complaint at any time to the relevant supervisory authority for data protection. In the UK, this is the Information Commissioner’s Office (ICO). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.