Here's the full copy, ready to paste directly into the Privacy Policy page:

Last updated: [insert date]

Spider Farm ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect information when you visit our website, browse our products, or make a purchase. It applies to all customers, including those in the UK, the European Economic Area (EEA), and elsewhere.

If you have any questions about this policy or how we handle your data, please contact us at contact@spiderfarm.co.uk.

Who we are

Spider Farm is the data controller responsible for your personal data. Our registered address is Burcott Lane
Bierton, Aylesbury, HP22 5AU, and we can be reached at contact@spiderfarm.co.uk, (+44) 07495 786846

Information we collect

We collect the following types of information:

Information you give us directly: your name, email address, postal/shipping address, phone number, and payment details when you place an order, create an account, contact customer support, or sign up for updates.

Information collected automatically: your IP address, browser type and device information, pages viewed, referring website, and general location (derived from IP address), collected through cookies and similar technologies when you browse our site.

Information from third parties: payment confirmation from our payment processor, and delivery status updates from our couriers.

We do not knowingly collect any special category data (such as health information) beyond what you voluntarily provide to us.

How we use your information

We use your personal data to: process and fulfil your orders, including arranging delivery of live animals and related supplies; create and manage your account; communicate with you about your orders, enquiries, or customer support requests; send you marketing communications about new stock, offers, or updates, where you have consented to receive them; understand how visitors use our site, so we can improve it, using analytics tools; detect and prevent fraud, and keep our site secure; and comply with our legal and regulatory obligations, including those relating to the sale of livestock.

Legal basis for processing (UK visitors)

Where UK GDPR applies, we rely on the following legal bases: contract, to process your order and deliver what you've purchased; consent, for marketing emails and non-essential cookies, which you can withdraw at any time; legitimate interests, to run and improve our website, prevent fraud, and understand our customers, in a way that does not override your rights; and legal obligation, to meet accounting, tax, and animal welfare/licensing requirements.

Cookies and similar technologies

Our website uses cookies and similar technologies to operate correctly, remember your preferences, and understand how the site is used. This includes essential cookies, provided by our website platform, Squarespace, needed for core functionality such as your shopping cart and checkout; analytics cookies, via Google Analytics, which help us understand site traffic and usage patterns; and advertising cookies, via the Meta (Facebook/Instagram) Pixel, which help us measure and tailor advertising.

You can control or disable non-essential cookies through our cookie banner when you first visit the site, or through your browser settings. Disabling essential cookies may affect the site's functionality, such as your ability to check out.

Who we share your data with

We share personal data with trusted third parties who help us run our business, including: Squarespace, our website and e-commerce platform, which processes orders, payments, and hosts our site; payment processors (such as Squarespace Payments, Stripe, or PayPal), to securely process your payment; couriers and delivery partners, to deliver your order, including live animals requiring special handling; Google Analytics, to help us understand website usage; Meta (Facebook/Instagram), for advertising and audience measurement, where you have consented to advertising cookies; and professional advisors and regulators, where required by law, such as for tax, accounting, or animal welfare compliance purposes.

We do not sell your personal data to third parties.

International data transfers

As a UK/EU-based business, your data may sometimes be transferred to and processed in countries outside the UK/EEA (for example, by service providers such as Google or Meta based in the United States). Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or an equivalent approved transfer mechanism.

Data retention

We keep your personal data only for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements. Order and transaction records are typically kept for 10 years to meet tax and accounting obligations. Marketing data is kept until you unsubscribe or withdraw consent.

Your rights

If UK GDPR or EU GDPR applies to you, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data, in certain circumstances; object to or restrict certain processing, including direct marketing; request a copy of your data in a portable format; withdraw consent at any time, where processing is based on consent; and lodge a complaint with a supervisory authority, such as the UK Information Commissioner's Office (ICO) at ico.org.uk, or your local EU data protection authority.

To exercise any of these rights, please contact us at contact@spiderfarm.co.uk.

Age restrictions

Our products, including live invertebrates, are not intended for children, and our website is not directed at individuals under the age of 18. By placing an order, you confirm that you are at least 18 years old and legally able to purchase and keep the species offered on our site. We do not knowingly collect personal data from children.

Data security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including secure hosting through Squarespace and encrypted payment processing. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. Any changes will be posted on this page with an updated "Last updated" date.

Contact us

If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us at:

contact@spiderfarm.co.uk
Burcott Lane, Bierton, Aylesbury, HP22 5AU