ChinUp sells one product: a dog life jacket with a chin rest. This policy explains how we handle personal information under the UK GDPR and the Data Protection Act 2018. It applies to chinuppets.com and to messages you send us by email or Instagram.
1. Who is responsible for your data
ChinUp is a trading name of Jacob Orsborn-Smith, a sole trader based in the United Kingdom. We are the data controller for the information described here.
Email support@sitework.uk for anything to do with privacy, including a request to see or delete your data.
Insert the trading address here. A geographical postal address is required of a UK online trader by the Consumer Contracts Regulations 2013 and the Electronic Commerce Regulations 2002, and it has to appear on this page, the terms, and the delivery and returns page.
2. What we collect
When you order. Your name, delivery address, email address, and the details of what you bought. If you give us a phone number for the courier, we hold that too.
Payment. Card details are entered on Stripe's own hosted checkout page and never reach our website or our systems. We receive confirmation that a payment succeeded, the amount, and the last four digits and card brand for reconciliation.
When you message us. The content of emails, Instagram comments and Instagram direct messages, including anything the automated reply sends you. Instagram tells us your handle, not your account password or private profile data.
Automatically. Our hosting provider processes limited technical data needed to serve and secure the site, such as IP address, browser type and server logs. If you accept analytics cookies, we also receive the usage data described in the cookie policy.
Please do not send us special category data, such as health information, and do not send card numbers by email or DM. We will delete them if you do.
3. Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Take payment, order your jacket from our supplier, ship it and keep you updated | Performing our contract with you |
| Answer your questions before you buy | Taking steps at your request before entering a contract |
| Handle returns, refunds, faults and complaints | Performing our contract, and complying with consumer law |
| Keep sales and tax records | Complying with a legal obligation |
| Prevent fraud and chargeback abuse, and keep the site secure | Our legitimate interests in protecting the business |
| Measure how the site is used | Your consent, given through the cookie banner and withdrawable at any time |
| Send you an email about ChinUp products | Your consent, or our legitimate interest in contacting existing customers about the same product. Every email has an unsubscribe link |
We do not sell personal data, we do not run advertising audiences off it, and we do not build profiles about you.
4. Who else processes it
We use a small number of providers to run the store. Each of them only gets what they need to do their job.
| Provider | What they handle |
|---|---|
| Stripe | Payment processing and fraud checks. Stripe is its own controller for payments data. See the Stripe privacy policy |
| Vercel | Website hosting and the order endpoint |
| Supabase | Stores the order record |
| Our fulfilment supplier | Your name and delivery address only, so your jacket can be dispatched to you. Some orders are shipped to you directly by the supplier |
| Royal Mail or the courier used for your order | Delivery and tracking |
| ManyChat and Meta | The Instagram comment and DM automation, if you interact with us on Instagram |
| Google Analytics | Site measurement, only if you accept analytics cookies |
| Our email provider | Sending order confirmations and dispatch notices |
We may also disclose information where the law requires it, or to establish, exercise or defend a legal claim, including in response to a chargeback.
5. International transfers
Some of these providers process data outside the UK. Where that happens, the transfer relies on a safeguard recognised by UK data protection law, normally UK adequacy regulations or the International Data Transfer Addendum to the standard contractual clauses. Ask us and we will tell you which safeguard applies to your information.
6. How long we keep it
- Order and payment records: six years after the end of the tax year they fall in, because HMRC requires it.
- Support messages that did not lead to an order: up to 24 months.
- Instagram conversations: retained inside ManyChat and Instagram under their retention settings, and deleted from our side when the conversation is closed.
- Analytics data: 14 months in Google Analytics, then deleted automatically.
7. Cookies
Nothing that is not strictly necessary is set until you accept it. The full list, and the button to change your mind, is on the cookie policy.
8. Security
The site is served over HTTPS, payment happens on Stripe's hosted page so no card data touches our systems, and access to order records is restricted to the owner of the business. No system is perfectly secure, but if a breach affects your rights we will tell you and the Information Commissioner's Office within the time the law allows.
9. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or hand it to another provider. You can object to processing we base on legitimate interests, and you can withdraw consent for analytics or marketing at any time without affecting anything done before you withdrew it.
Email support@sitework.uk and we will respond within one month. There is no charge. Note that we cannot delete an order record we are legally required to keep for tax purposes, but we can remove everything else.
You can complain to the UK regulator, the Information Commissioner's Office. We would rather you gave us the chance to fix it first.
10. Children and automated decisions
You must be 18 or over to buy from this site. We do not knowingly collect data from children. We do not make decisions about you by automated means alone; the Instagram auto-reply sends a link and nothing more.
11. Changes to this policy
We update this page when the business or the law changes. The date at the top of the page tells you when it last changed.
ChinUp, a trading name of Jacob Orsborn-Smith, sole trader, United Kingdom. Email support@sitework.uk.