Privacy matters to us.

The controller of your personal data is [LEGAL COMPANY NAME], trading as Inner Beast ("Inner Beast", "we", "us" or "our").

• Registered office: [REGISTERED OFFICE ADDRESS]
• Company number: [COMPANY NUMBER, IF APPLICABLE]
• Privacy email: privacy@innerbeast.co.uk
• Customer support: support@innerbeast.co.uk
• Data protection registration number: [ICO REGISTRATION NUMBER, IF REQUIRED]

The controller determines how and why your personal data is used.

Personal data means information that identifies you or can reasonably be linked to you. Depending on how you use our website, we may collect:

We do not normally seek special-category personal data, such as health, biometric, religious or political information. Please do not send this information unless it is necessary for a specific request and we have asked for it.

We collect personal data:

• directly from you when you order, register, subscribe, complete a form, submit a review or contact us;
• automatically through cookies, pixels, server logs and similar technology when you use the website;
• from payment providers, delivery partners and fraud-prevention services involved in completing your order;
• from social-media platforms when you interact with our official accounts or use a social sign-in feature; and
• from publicly available or lawfully supplied sources where permitted.

We use personal data only where we have a lawful basis under applicable UK data-protection law.

Where we rely on legitimate interests, we consider whether our use is necessary, proportionate and balanced against your rights and reasonable expectations.

We use your information to confirm stock, take payment, detect payment fraud, fulfil your order, provide tracking, handle returns and maintain financial records.

Payments are processed by [PAYMENT PROVIDER NAMES, FOR EXAMPLE STRIPE, PAYPAL, KLARNA OR SHOP PAY]. These providers may process your information as an independent controller or as our processor under their own privacy terms. Their privacy information should be made available at checkout where required.

Where a buy-now-pay-later or credit service is offered, the provider may carry out identity, affordability, credit or fraud checks. Inner Beast does not make the provider's lending decision.

We may send marketing emails or messages where you have asked to receive them or where applicable law otherwise permits us to contact an existing customer about similar products.

You can opt out at any time by:

• clicking the unsubscribe link in an email;
• using the opt-out instruction in an SMS;
• changing your account preferences; or
• emailing privacy@innerbeast.co.uk.

Opting out of marketing does not stop essential service messages relating to an order, account, security issue, return or legal notice. We do not sell your personal data to third parties.

We use cookies and similar technologies to operate the basket and checkout, keep accounts secure, remember preferences, understand website performance and, where you agree, measure or personalise advertising.

Strictly necessary cookies may be used without consent because the website cannot function properly without them. We will request consent before using non-essential analytics, advertising or personalisation cookies where consent is required.

You can accept, reject or manage non-essential cookies through the cookie banner or cookie-settings link. Withdrawing consent does not affect processing that occurred before withdrawal.

The live website should also publish a separate Cookie Policy listing each cookie or category, its provider, purpose and duration.

We may share only the information reasonably required with:

• website, ecommerce, hosting, cloud and database providers;
• payment processors and finance providers;
• warehouse, fulfilment, packaging, delivery and returns partners;
• customer-support, email, SMS and communication providers;
• fraud-prevention, identity-verification and cybersecurity providers;
• analytics, advertising and social-media partners, where permitted and subject to cookie choices;
• accountants, auditors, insurers, banks, legal advisers and other professional advisers;
• potential buyers, investors or advisers involved in a business sale, merger or restructuring; and
• courts, regulators, law-enforcement bodies, tax authorities or other organisations where disclosure is required by law or necessary to protect legal rights.

Service providers acting as our processors may use personal data only on our documented instructions, must protect it and must not use it for unrelated purposes.

Some suppliers may store or access personal data outside the United Kingdom.

Where personal data is transferred internationally, we will use a lawful safeguard where required, such as:

• transferring to a country covered by UK adequacy regulations;
• using the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses;
• relying on another legally recognised transfer mechanism; and
• applying additional technical or organisational safeguards where appropriate.

Contact privacy@innerbeast.co.uk for more information about safeguards relevant to your data.

We keep personal data only for as long as reasonably necessary for the purpose collected, including legal, tax, accounting, fraud-prevention and dispute-resolution requirements.

Typical retention periods are:

• order, payment, refund and accounting records: generally up to 6 years after the end of the relevant financial period;
• account information: while the account remains active and for a reasonable period afterwards;
• customer-service correspondence: normally up to 3 years after the issue is closed, unless needed longer for a dispute;
• unsuccessful or abandoned basket information: for a limited period needed for recovery, analytics or fraud prevention;
• marketing records: until you opt out, followed by a limited suppression record so we can respect the opt-out;
• consent records: for as long as needed to demonstrate when and how consent was obtained; and
• cookie and analytics data: for the period stated in the live Cookie Policy or consent tool.

We may keep information longer where a legal claim, investigation, chargeback, safety issue or legal requirement makes this necessary. We may anonymise information so that it can no longer identify you and then use it for statistical purposes.

We use appropriate technical and organisational measures designed to protect personal data against accidental loss, misuse, unauthorised access, alteration or disclosure.

These measures may include encryption in transit, restricted access, secure password handling, monitoring, backups and supplier due diligence. No internet service is completely secure, so you should use a unique password, keep account credentials confidential and contact us promptly if you suspect unauthorised access.

We and our payment or fraud-prevention providers may use automated tools to identify suspicious transactions, protect accounts or decide whether additional verification is required.

Where a decision is made solely by automated means and produces legal or similarly significant effects, we will provide the information and rights required by law, including an opportunity for human review where applicable.

Depending on the circumstances, you may have the right to:

• request access to your personal data;
• ask us to correct inaccurate or incomplete data;
• request deletion of personal data;
• ask us to restrict how data is used;
• object to processing based on legitimate interests or to direct marketing;
• receive certain data in a portable format;
• withdraw consent at any time where processing is based on consent; and
• ask for safeguards or human review relating to certain automated decisions.

These rights are not absolute and legal exemptions may apply. We may ask for information needed to verify your identity. We do not normally charge a fee, but the law allows a reasonable fee or refusal where a request is manifestly unfounded or excessive. To exercise a right, email privacy@innerbeast.co.uk. We aim to respond within one month, although the law may allow an extension for complex or multiple requests.

Please contact us first so we can try to resolve your concern:

• Email: privacy@innerbeast.co.uk
• Post: [PRIVACY CONTACT ADDRESS]

You also have the right to complain to the UK Information Commissioner's Office. Details of how to complain are available on the ICO website. You may also have the right to seek a remedy through the courts.

Our website and products are intended for a general audience, but purchases must be made by someone aged 18 or over or with the involvement of a parent or legal guardian.

We do not knowingly collect personal data directly from children under 13 for online services requiring consent. Contact us if you believe a child has provided personal data without appropriate permission.

Our website may link to third-party websites, apps or social-media services. We do not control their privacy practices. Review their privacy information before providing personal data.

We may update this Privacy Policy to reflect changes in law, technology, suppliers or business operations. The current version will be posted on this page with a revised "Last updated" date. Where a change is significant, we may provide an additional notice.

For privacy questions or requests:

• Privacy email: privacy@innerbeast.co.uk
• Customer support: support@innerbeast.co.uk
• Postal address: [REGISTERED OR PRIVACY CONTACT ADDRESS]