Privacy Policy

1. Who we are — Controller & Contact Details

“Burn My Footprint” (“we”, “us”, “our”) runs the website burnmyfootprint.org.
For any privacy-related questions — including exercising your data protection rights — you can contact us at:
Email: info@burnyourfootprint.org
Postal address: See Contact Page

This policy applies to all visitors, customers and subscribers interacting with Burn My Footprint via burnmyfootprint.org.

 

2. What personal data we collect

We collect and process the following categories of personal data:

• Identity & Contact Data: e.g. name, email address, postal address — for instance, when you sign up for our newsletter, contact us, or place an order.

• Transactional Data: e.g. order details, billing/shipping address, where you buy our products (note: payment card data is processed by our payment provider).

• Technical / Usage Data: Automatically collected when you visit the site — e.g. IP address, browser type and version, device type, pages visited, time/date of visit, referring pages.

• Cookies and Tracking Data: Data generated by cookies or similar technologies (see Cookies section below).

We will only collect data that is necessary for the purposes described below, in line with the data-minimisation principle.

 

3. Why we collect your data — Purposes & Lawful Bases

We process your personal data for the following purposes, each with an appropriate legal basis:

If you subscribe to the newsletter or accept non-essential cookies, we rely on your consent. You are free to withdraw consent at any time (see “Your Rights” below).

 

4. Cookies and Similar Technologies

We use cookies / tracking technologies for various purposes:

• Strictly necessary cookies — essential to run the website, manage session states, shopping basket, login, etc.

• Analytics/performance cookies — to understand how visitors use the site, how to improve it.

• Functionality/optional cookies — for optional features such as remembering preferences, newsletter sign-ups, etc.

We will only use non-essential cookies (analytics, functionality, marketing) if you give informed consent. You will be given a clear cookie banner on first visit, with the option to accept or reject non-essential cookies before they are set. You will also have a way to change your preferences later.

We maintain a separate Cookie Policy (or include a dedicated section) that lists the cookies we use, their purpose, and their lifespan.

 

5. Who we share your data with

We may share personal data with:

• Service providers / processors — e.g. web-hosting providers, payment processors, email-marketing platforms, analytics providers.

• Third parties acting as independent controllers — e.g. where required for deliveries (couriers), accounting, legal compliance.

• Authorities or legal/regulatory bodies — when required by law (fraud prevention, taxes, compliance).

We enter into Data Processing Agreements with any processor we use, ensuring they meet UK GDPR standards.

We do not sell or share personal data for marketing with unrelated third parties.

If any personal data is transferred outside the UK (or EEA), we will ensure appropriate safeguards are in place (e.g. standard contractual clauses, as applicable).

 

6. How long we keep your data (Retention)

We only keep personal data as long as necessary for the relevant purpose, e.g.:

• Order and transactional data: retained for [e.g. 6 or more] years (or as required by accounting/tax law).

• Newsletter subscriber data: retained until you unsubscribe or request deletion.

• Website analytics / usage data: retained for a limited period (e.g. [e.g. 12 or 24] months) or anonymised, to monitor and improve the site.

Once data is no longer needed, we securely delete or anonymise it.

 

7. How we protect your data (Security)

We implement appropriate technical and organisational measures to safeguard your personal data, including: secure servers and hosting; encryption in transit (HTTPS); access controls; regular security reviews; and limiting access to only those who need to process the data.

 

8. Your rights under UK GDPR

You have the following rights (where applicable):

• Right to access the personal data we hold about you.

• Right to request correction or erasure of your personal data.

• Right to restrict processing or object to processing (especially where based on legitimate interests).

• Right to data portability (where applicable).

• Right to withdraw consent, at any time, for processing based on consent (e.g. marketing, cookies).

To exercise any of these rights, contact us at the contact details above. We will respond within the timeframes required by law.

 

9. Marketing & Newsletter

If you have opted in to receive marketing or newsletters, you can opt out at any time by clicking “unsubscribe” in any email or contacting us directly.

We will never send marketing emails without consent (unless you are already a customer, and even then only if lawfully permitted).

 

10. Children’s Data

Our website and services are not directed at children under 16. We do not knowingly collect personal data from children under 16. If we become aware we have collected data relating to a child under 16, we will delete it immediately.

 

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time (e.g. if our services or data-practices change, or to reflect legal updates). Any changes will be posted here with a revised “Last updated” date. 

 

12. How to Complain

If you believe we have not complied with this Privacy Policy or UK data-protection law, you have the right to lodge a complaint with the supervisory authority — the Information Commissioner’s Office (ICO).

Contact details for ICO are published on their website: ico.org.uk.