Legal Bases for Processing Personal Information

If you are located in the United Kingdom or European Economic Area, we process your personal information only where we have a valid legal basis to do so.

Depending on how you interact with Hot Pottery, we may rely on the following legal bases:

Performance of a contract

We process personal information where necessary to enter into or perform our contract with you. This includes processing and fulfilling orders, taking payments, arranging delivery, managing returns, refunds and exchanges, and providing services associated with your account or purchase.

Consent

Where required, we rely on your consent for certain activities, including sending electronic marketing communications and using non-essential cookies or similar technologies for analytics, personalisation and advertising. You may withdraw your consent at any time, including through the Cookie Preferences link on our website or the unsubscribe link in our marketing emails.

Legitimate interests

We may process personal information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. These interests may include operating and improving our website and services, providing customer support, understanding how customers use our services, protecting our business and customers, preventing fraud and misuse, and maintaining the security of our systems.

Legal obligations

We may process personal information where necessary to comply with our legal and regulatory obligations, including requirements relating to taxation, accounting, consumer protection, fraud prevention, legal claims and responding to lawful requests from public authorities.

Where we rely on legitimate interests, we consider whether the processing is necessary and balance our interests against your rights and interests.

This supplement should be read together with our main Privacy Policy, which provides further information about the personal information we collect, how we use and share it, how long we retain it, international transfers and your rights.

That covers the missing disclosure Shopify itself flags for UK stores using its automated policy.   It also identifies the legitimate interests rather than merely saying “legitimate interests,” which is important under current ICO guidance.