The Care Shop (Dumfries) Limited is committed to protecting your privacy and handling your personal information responsibly and in accordance with UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​

1. Who We Are

THE CARE SHOP (DUMFRIES) LIMITED

25–31 Loreburn Street
Dumfries
Dumfries & Galloway
Scotland
DG1 1HN

Email: officedumfries@gmail.com
Telephone: 01387 251255
VAT Number: 945 2455 13

​

2. What Information We Collect

We collect personal information that you voluntarily provide through our website contact form. This may include your name, email address and contact telephone number.

When you visit our shop, we may also collect personal information necessary to process a transaction or administer a VAT relief declaration.

Where VAT relief is claimed, we may collect and retain information provided on a handwritten declaration completed in the shop. This may include:

• Your name and address

• Details of the goods purchased

• Your signature and the date of the declaration

• Information about your disability or health condition relevant to the VAT relief claim

We do not currently collect VAT relief declarations through our website. These forms are completed in the shop and retained securely on our premises.

​

3. How We Use Your Information

We use personal information where necessary to:

• Respond to website enquiries

• Provide information about our care, mobility and daily living products

• Process transactions and customer requests

• Assess and document eligibility for VAT relief where applicable

• Maintain records required for tax compliance and other legal obligations

We do not use your data for marketing purposes unless you have specifically requested this or another lawful basis applies.

Health and disability information collected through a VAT relief declaration is used only where necessary for the administration and verification of the relevant VAT relief claim and associated record-keeping.

​

4. Lawful Basis for Processing

We process personal information using an appropriate lawful basis under UK GDPR, depending on the purpose for which it is collected. This may include:

Legitimate interests: Where necessary to respond to enquiries and administer our business, provided these interests do not override your rights and interests.

Legal obligation: Where we need to process or retain information to comply with applicable legal and tax record-keeping requirements.

Consent: Where consent is the appropriate basis for a particular activity.

Information about a person's health or disability is special category personal data. We will only process this information where necessary for the relevant VAT relief process and where an applicable special category condition under Article 9 UK GDPR is satisfied.

​

5. Data Storage and Security

We take appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

Website enquiries are handled securely and access is restricted to authorised personnel and relevant service providers where necessary.

Completed VAT relief declarations are stored securely on our premises in a locked storage facility. Access is restricted to authorised personnel who need the information to administer the relevant transaction, maintain records or meet legal obligations.

We treat health and disability information confidentially and take appropriate steps to protect it from unauthorised access or disclosure.

​

6. Data Retention

We retain personal information only for as long as necessary for the purpose for which it was collected and to meet applicable legal, tax, accounting and administrative obligations.

Website enquiry information is retained for as long as necessary to respond to the enquiry and fulfil any related obligations.

VAT relief declarations and associated accounting records are retained for the applicable statutory record-keeping period. This is generally at least six years for VAT and company accounting records, although the precise period and starting point may depend on the type of record and applicable rules. Records will be securely disposed of when they are no longer required to be retained.

​

7. Sharing Your Information

We do not sell, rent or trade your personal information.

Your information may be shared where necessary with relevant service providers, such as our website hosting provider Wix, or with HM Revenue & Customs or other appropriate authorities where required by law or necessary to meet our legal obligations.

We limit access to personal information to those who need it for legitimate business or legal purposes.

​

8. Your Rights

Under UK data protection law, you may have the right to:

• Request access to the personal data we hold about you

• Request correction of inaccurate or incomplete information

• Request deletion of your personal data in certain circumstances

• Request restriction of processing in certain circumstances

• Object to processing where applicable

• Withdraw consent where processing is based on consent

• Lodge a complaint with the Information Commissioner's Office (ICO)

These rights are subject to certain conditions and legal exceptions, including where records must be retained to comply with legal obligations.

For further information about your rights, visit www.ico.org.uk.

​

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. Any changes will be published on this page.