Privacy Policy

Last updated: [6.3.26]

This Privacy Policy explains how Alexander Marler trading as Hippo Carts (“Hippo Carts”, “we”, “us”, or “our”) collects, uses, and protects your personal information when you visit or make a purchase from www.hippocarts.co.uk.

We are committed to protecting your privacy and handling your personal data transparently and securely in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for your personal information is:

Alexander Marler (Trading as Hippo Carts)

Website: www.hippocarts.co.uk

Phone: 07833 565355

If you have questions about this Privacy Policy or how your data is handled, please contact us using the details above.

2. Information We Collect

When you use our website, we may collect the following types of personal information:

Information You Provide

When you place an order, contact us, or fill out a form, we may collect:

Name
Billing and shipping address
Email address
Phone number
Order details
Any information you provide through contact forms or enquiries

Account Information

Customers may choose to create an account on our website. When creating an account, we may store your name, email address, and order history so that you can manage your basket, track orders, and access previous purchases more easily.

Payment Information

Payments on our website are processed securely through Stripe. We do not store your card details. Payment information is processed directly by Stripe in accordance with their privacy policies.

Technical Data

When you visit our website, certain information may be collected automatically, including:

IP address
Browser type and version
Device type
Pages visited
Date and time of access
Referring website addresses

This information helps us improve website functionality and user experience.

3. How We Use Your Information

We use personal data for the following purposes:

To process and fulfil orders
To communicate with you about your order or enquiry
To manage our website and business operations
To improve website functionality and user experience
To comply with legal obligations
To prevent fraud or misuse of our services

Email Communications

If you choose to subscribe or provide your email address, we may use it to send updates about our products, company news, blog posts, or newsletters. You can unsubscribe from these communications at any time using the unsubscribe link included in our emails or by contacting us directly.

Our legal basis for processing personal data under UK GDPR includes:

Performance of a contract (processing orders)
Legitimate interests (running and improving our business)
Legal obligations
Consent, where applicable

4. Website Platform

Our website is hosted using the Odoo website platform, which provides the infrastructure required to operate our online store.

Odoo may process certain technical data necessary for website functionality and security.

5. Third-Party Services

We may share necessary information with trusted third parties to operate our business, including:

Stripe – payment processing
Website hosting providers (Odoo) – site infrastructure
Delivery and courier services – shipping orders

These providers only receive the data necessary to perform their services and are required to protect your information.

6. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, including:

Processing orders
Maintaining financial records for tax and legal requirements
Handling customer enquiries or disputes

In the UK, financial records may be retained for up to 6 years to comply with legal obligations.

7. Your Data Protection Rights

Under UK GDPR, you have the right to:

Request access to the personal data we hold about you
Request correction of inaccurate information
Request deletion of your personal data
Request restriction of processing
Object to certain types of processing
Request data portability
Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled improperly.

8. Cookies

Our website uses cookies to improve functionality and analyse website usage.

Details of how cookies are used are explained in our separate Cookie Policy.

9. Children's Information

Our website and services are not intended for children under the age of 13, and we do not knowingly collect personal data from children.

If we become aware that we have collected personal information from a child without parental consent, we will take steps to remove that information.

10. Changes to This Privacy Policy

We may update this Privacy Policy occasionally to reflect changes in legal requirements or business practices. Updates will be posted on this page with a revised date.

11. Consent

By using our website, you consent to the terms of this Privacy Policy.