Privacy Policy
Last Updated: 15-08-2025
1. Who We Are
The Bug Parc("we", "our", or "us") is the data controller responsible for your personal data.
Our registered address is: The Bug Parc, Nowhere Lane, Lenwade, Norfolk, NR9 5PD
Contact: info@thebugparc.com | 01603 855165
This Privacy Notice explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What Personal Data We Collect
We may collect and process the following types of personal data:
- Name, email address, and phone number
- Property, billing, and delivery address
- Enquiry details submitted via our website
- Order history and transaction details
- Payment information (processed via secure third-party gateways)
- IP address, device/browser type (via analytics tools)
- Cookies and tracking identifiers
- Marketing preferences and consent records
- Records of communication (email, phone, or live chat)
3. How We Collect Your Data
We collect your personal data when you:
- Place an order or make a purchase via our website
- Fill in an enquiry, contact, or account registration form
- Subscribe to marketing communications
- Contact us by phone, email, or live chat
- Interact with our website (e.g. via cookies or analytics tools)
4. Why We Use Your Data
We only use your personal data when we have a lawful basis. This may include:
Purpose | Legal Basis |
---|---|
To process and fulfil your order | Contractual Necessity |
To respond to enquiries | Consent / Legitimate Interests |
To issue invoices or manage accounts | Contractual Necessity / Legal Obligation |
To send order confirmations and updates | Contractual Necessity |
To prevent fraud or misuse | Legitimate Interests / Legal Obligation |
To manage subscriptions or marketing opt-ins | Consent |
To analyse website use and improve services | Consent (for non-essential cookies) |
5. Who We Share Your Data With
We may share your data with:
- Payment processors (e.g. Stripe, PayPal)
- Delivery and logistics providers
- Cloud-based service providers (e.g. email, hosting)
- Website and IT developers
- Accountants or financial service providers
- Marketing and analytics platforms (only if consented)
All third parties are subject to strict confidentiality obligations and only process data in line with applicable law.
6. International Data Transfers
Some of our service providers (e.g. Google) are based outside the UK.
Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as:
- Standard contractual clauses approved by the UK ICO
- Adequacy decisions granted by the UK government
7. How Long We Keep Your Data
We retain personal data only for as long as necessary. Typical retention periods:
- Order and payment records: up to 7 years (for legal / accounting reasons)
- Enquiry data (if no contract): up to 2 years
- Contract/customer data: Up to 7 years (for legal / accounting reasons)
- Email records: up to 7 years, unless deleted earlier
We securely delete or anonymise data once the retention period ends.
8. Your Rights Under the UK GDPR
You have the following rights regarding your personal data:
- Right to be informed - what we collect and why
- Right of access - request a copy of your data
- Right of rectification - correct inaccurate data
- Right to erase - request deletion (where applicable)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right not to be subject to automated decision-making
To exercise any of these rights, please contact:
Martin French martin@thebugparc.com
9. Cookies and Website Tracking
We use cookies on our website to improve your experience and monitor usage. Some cookies are essential; others require your consent.
For more details, please read our:
Cookie Policy
We use Google Analytics and, where applicable, Google Ads Enhanced Conversions. These tools collect anonymous usage data and may set cookies if you have consented via our cookie banner.
10. Payment Processing
We do not store your payment card details directly. All payments are securely processed via third-party payment gateways (e.g. Stripe, PayPal). These processors comply with PCI-DSS standards and handle your payment data directly.
11. How to Complain
If you have concerns about how we handle your personal data, we encourage you to contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: https://ico.org.uk
Telephone: 0303 123 1113
12. Changes to This Notice
We may update this Privacy Notice from time to time. The latest version will always be available on our website, and we'll update the "Last Updated" date accordingly.