Privacy Policy

Last updated: September 2026

Core of the Sun respects your privacy and aims to be clear about how your personal information is used.

This Privacy Policy explains what information we collect when you visit our website, place an order or contact us.

Who we are

Core of the Sun is operated by:

[LEGAL NAME]
Trading as: Core of the Sun
Address: [ADDRESS]
Email: [EMAIL]

For data-protection purposes, [LEGAL NAME] is the controller of personal information described in this policy.

Information we collect

Depending on how you use our website, we may collect:

• your name;
• billing and delivery address;
• email address;
• telephone number, where supplied;
• details of products you order;
• order and transaction information;
• correspondence between you and us;
• technical information relating to use of our website;
• cookie and similar technology information where applicable; and
• marketing preferences where you choose to receive marketing communications.

Payment information

Payments are processed by [PAYMENT PROVIDER].

Payment providers may process payment-card and transaction information in accordance with their own privacy policies.

We do not normally receive or store your complete payment-card number or card security code.

Why we use your information

We may process personal information in order to:

• process and fulfil your orders;
• take and reconcile payments;
• deliver products;
• provide order and delivery updates;
• deal with enquiries, refunds and complaints;
• maintain appropriate business, tax and accounting records;
• prevent or investigate fraud and misuse;
• maintain the security and operation of our website;
• comply with legal and regulatory obligations; and
• send marketing communications where we have an appropriate lawful basis to do so.

Our lawful bases

Depending upon the purpose, we may process your information because:

Contract — processing is necessary to take steps at your request before entering into a contract or to fulfil our contract with you, such as processing and delivering an order.

Legal obligation — we need to retain or process certain information to comply with laws applying to our business.

Legitimate interests — processing is necessary for a legitimate business purpose, provided your interests and fundamental rights do not override those interests. Examples may include website security, fraud prevention and improving our customer service.

Consent — where we rely on your permission, for example for certain marketing or non-essential website technologies. You may withdraw consent where applicable.

Who we share information with

We only share personal information where reasonably necessary.

This may include:

• payment processors;
• delivery and postal companies;
• website hosting and technical service providers;
• email service providers;
• professional advisers such as accountants;
• government, regulatory or law-enforcement bodies where required by law; and
• other suppliers necessary to operate our business and fulfil your order.

These organisations receive only the information appropriate to the service they provide.

How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting and regulatory requirements.

Order and transaction records may therefore be retained for longer than general enquiries or website-session information.

We periodically review information we hold and securely delete or anonymise it when it is no longer required.

Marketing

We will not simply add you to a marketing list because you placed an order unless we have a lawful basis to send that marketing.

Where consent is required, we will ask for it.

You can unsubscribe from marketing communications at any time using the unsubscribe facility provided or by contacting [EMAIL].

Service communications concerning an order are not marketing communications and may still be sent where necessary to fulfil your purchase.

Cookies

Our website may use cookies and similar technologies.

Further information is available in our Cookie Policy.

International transfers

Some technology providers may process information outside the UK.

Where personal information is transferred internationally, we will take appropriate steps required under UK data-protection law to protect it.

[THIS SECTION SHOULD BE CHECKED AGAINST THE ACTUAL HOSTING, PAYMENT, ANALYTICS AND EMAIL PROVIDERS.]

Keeping your information secure

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

No internet-based system can be guaranteed to be completely secure, but we aim to use measures proportionate to the information we process.

Your rights

Depending on the circumstances, UK data-protection law gives you rights concerning your personal information, which may include rights to:

• access personal information we hold about you;
• ask us to correct inaccurate information;
• request deletion of information in certain circumstances;
• restrict certain processing;
• object to certain processing;
• receive certain information in a portable format; and
• withdraw consent where processing relies upon consent.

These rights are subject to legal conditions and exceptions.

To exercise a right, contact [EMAIL].

Complaints

If you have concerns about how we use your personal information, please contact us first so that we can investigate.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator.

Changes to this policy

We may update this Privacy Policy when our services, technology or legal obligations change.

The latest version will be published on this page.

Contact

Questions about privacy can be sent to:

Core of the Sun
[LEGAL NAME]
[ADDRESS]
[EMAIL]