Privacy Notice
What we collect when you order, why, and what your rights are.
Who is responsible for your data
The controller is KTechnology Solutions Limited (trading as Loshy Bear), company number 16625813, 71-75 Shelton Street, London WC2H 9JQ. Contact: hello@loshybear.co.uk.
What we collect
- For orders: your name, email address, delivery address, the items you ordered, and payment status. Payment card details are entered on Stripe and are never seen or stored by us.
- If you email us: your email address and what you tell us.
Why we use it, and our lawful basis
- To take payment, dispatch and deliver your order, and handle returns: performing our contract with you.
- To keep accounting and VAT records: legal obligation.
- To respond to queries and deal with safety issues or recalls: legitimate interests, and legal obligation where product safety law applies.
Who we share it with
- Stripe processes your payment and acts as a processor for us (and an independent controller for its own fraud and compliance purposes).
- Our fulfilment partner receives your name and delivery address (and the contact details needed by the carrier) so they can dispatch and deliver your order.
- Vercel hosts this website and so processes technical data such as your IP address when you visit.
We do not sell your data and do not use it for advertising.
Cookies and local storage
We do not use analytics or advertising cookies. We only use your browser's local storage to remember the contents of your basket on your own device, which is essential for the shop to work. Stripe may set its own essential cookies on its checkout page for security and fraud prevention.
How long we keep it
We keep order and accounting records for 6 years to meet tax and legal requirements. Emails about queries are kept for up to 2 years, then deleted.
International transfers
Some of our providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework.
Your rights
Under UK GDPR you have the right to access your data, have it corrected or erased, restrict or object to its use, and to data portability, in each case where the law applies. Email hello@loshybear.co.uk to use these rights.
Complaints
If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.