Last updated: 04/04/2026
Kojaycat (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you visit kojaycat.co.uk, make a purchase, or contact us.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller:
Kojaycat,
54 Findhorn Road,
Inverkip,
PA16 0HX
Email: sales@kojaycat.co.uk
🔍 1. What Personal Data We Collect
We collect the following categories of personal data:
A. Information You Provide
- Name
- Billing and shipping address
- Email address
- Telephone number
- Order details
- Account login details (if you create an account)
- Messages sent via contact forms or email
B. Payment Information
We do not store full payment card details. Payments are processed securely by third‑party providers such as:
- PayPal
- Stripe
- WooCommerce Payments
These providers process your data according to their own privacy policies.
C. Automatically Collected Data
When you visit our website, we may collect:
- IP address
- Browser type and version
- Device information
- Pages visited
- Time spent on the site
- Referring website
This includes data collected through Google Analytics (see section 7).
D. Cookies
We use essential, functional, and analytics cookies. For full details, see our Cookie Policy.
🎯 2. How We Use Your Personal Data
We use your data for the following purposes:
- Processing and fulfilling orders
- Managing payments and refunds
- Providing customer support
- Sending order confirmations and updates
- Maintaining your account (if created)
- Improving website performance and user experience
- Detecting and preventing fraud
- Complying with legal obligations
We do not use your data for automated decision‑making or profiling.
⚖️ 3. Legal Bases for Processing
Under UK GDPR, we rely on the following lawful bases:
| Purpose | Legal Basis |
|---|---|
| Processing orders, payments, deliveries | Contract |
| Customer service | Legitimate interest |
| Analytics and site improvement | Consent |
| Fraud prevention and security | Legitimate interest |
| Legal and tax compliance | Legal obligation |
| Marketing emails (if subscribed) | Consent |
📦 4. How We Share Your Data
We may share your data with trusted third parties, including:
- Payment processors (PayPal, Stripe, etc.)
- WooCommerce and related plugins
- Delivery and courier services
- Website hosting providers
- Google Analytics
- Email service providers
We never sell your personal data.
All third parties are required to keep your data secure and process it only for the purposes we specify.
🌍 5. International Data Transfers
Some service providers (e.g., Google) may process data outside the UK.
When this occurs, we ensure appropriate safeguards are in place, such as:
- UK GDPR‑approved Standard Contractual Clauses (SCCs)
- Adequacy decisions
🛡️ 6. How We Protect Your Data
We use a combination of technical and organisational measures, including:
- SSL encryption
- Secure payment gateways
- Access controls
- Regular security updates
- Encrypted backups
While no system is 100% secure, we take data protection seriously and follow industry best practices.
📊 7. Google Analytics
We use Google Analytics to understand how visitors use our website.
Google Analytics collects:
- IP address (anonymised)
- Device and browser information
- Pages visited
- Time spent on site
- General geographic region
Analytics cookies are only used with your explicit consent.
You can withdraw consent at any time.
📧 8. Marketing Communications
We may send marketing emails only if you have opted in.
You can unsubscribe at any time by:
- Clicking the “unsubscribe” link in any email
- Contacting us at sales@kojaycat.co.uk
We do not send unsolicited marketing messages.
🗂️ 9. Data Retention
We retain personal data only as long as necessary:
- Order records: 6 years (legal requirement)
- Customer accounts: until you request deletion
- Emails and enquiries: up to 2 years
- Analytics data: up to 26 months
After this period, data is securely deleted or anonymised.
🧑⚖️ 10. Your Rights Under UK GDPR
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion (“right to be forgotten”)
- Restrict processing
- Object to processing
- Withdraw consent
- Request data portability
- Lodge a complaint with the ICO
Information Commissioner’s Office (ICO) ico.org.uk
To exercise your rights, contact us at: sales@kojaycat.co.uk
📝 11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will be revised accordingly.
📬 12. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact:
Kojaycat
54 Findhorn Road
Inverkip
PA16 0HX
Email: sales@kojaycat.co.uk

