top of page

PRIVACY POLICY

1. Introduction

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

​

For the purpose of the EU GDPR, the version of the General Data Protection Regulation as implemented by the United Kingdom (UK GDPR) and the Data Protection Act 2018 (Act), we act as a controller in relation to your personal data.

​

2. Data Controller

The Data Controller responsible for your personal data is:

Daisy Doris May

Email: daisy@houseofdinosaur.com

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

​

3. Information We Collect

We may collect and process the following types of personal data:

  • Contact information: your name, email address, and any other details you provide when contacting us or signing up for a newsletter.

  • Transaction information: if you make a purchase, payment and billing details (processed securely through third-party payment providers).

  • Technical data: IP address, browser type, device information, time zone, and other data collected automatically through cookies and analytics tools.

  • Usage data: how you use our website, such as the pages you visit and the time spent on each page.

We do not collect any special categories of personal data (such as health, race, or political opinions).

​

4. How We Use Your Information

We use your personal data to:

  • Provide and improve our website and services.

  • Process transactions and deliver orders.

  • Send marketing or newsletter communications (only if you’ve opted in).

  • Comply with our legal obligations and resolve disputes.

​

5. Legal Basis for Processing

We process your personal data under the following lawful bases:

  • Consent – for marketing communications or newsletter sign-ups.

  • Contract – when processing data needed to fulfil a transaction or request.

  • Legal obligation – to comply with legal requirements.

  • Legitimate interests – for analytics, site improvement, and preventing fraud.

You may withdraw your consent at any time by contacting us at [Insert contact email].

​

6. Cookies and Analytics

We use cookies and similar technologies to improve your browsing experience and analyse website traffic. You can manage or disable cookies in your browser settings. Please note that disabling cookies may affect site functionality. We may use third-party analytics services (such as Google Analytics) which collect data in an anonymised form.

​

7. Sharing Your Data

We only share your data where necessary and lawful, for example with:

  • Service providers who support our website, payment processing, and email communications.

  • Regulatory authorities or law enforcement if required by law.

  • Analytics or marketing partners, only where permitted.

We never sell or rent your personal data.

​

8. International Data Transfers

If any service providers are located outside the UK, we ensure that appropriate safeguards are in place (such as adequacy regulations or standard contractual clauses) to protect your personal data.

​

9. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, including for legal, accounting, or reporting obligations.
When no longer required, we will securely delete or anonymise your data.

​

10. Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

  • Access a copy of your personal data.

  • Correct or update inaccurate data.

  • Request deletion of your data (“right to be forgotten”).

  • Restrict or object to certain processing.

  • Withdraw consent where processing is based on consent.

  • Request data portability.

To exercise any of these rights, contact us at [Insert contact email].
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://www.ico.org.uk/

​

11. Data Security

We use appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction.
However, no method of internet transmission is completely secure, and we cannot guarantee absolute protection.

​

12. Links to Other Websites

Our Site may contain links to external websites.
We are not responsible for the privacy practices or content of those third-party sites, and we encourage you to review their privacy policies.

​

13. Changes to this Policy

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our privacy policy.

bottom of page