Effective Date:November 28, 2025
1. Who We Are (Data Controller)
Peter Bates Holistic Books Limited (“we,” “us,” “the Company”) is the Data Controller responsible for your personal data. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR).
- Legal Name: Peter Bates Holistic Books Limited
- Registration: Registered in England and Wales, Company Number 16791845.
- Contact for Privacy Matters (Data Subject Rights):
- Email:
Enquiries@peterbates-holisticbooks.com - Purpose: This email is your primary contact point for all questions regarding this Privacy Policy and for exercising your data rights.
- Email:
2. The Data We Collect and How We Use It (Lawful Basis)
We collect personal data to fulfill your orders, run our business, and provide you with relevant information. Under UK GDPR, we must have a Lawful Basis for every data process.
| Data Type Collected | Purpose of Processing | Lawful Basis |
| Identity/Contact Data (Name, Address, Email, Phone) | To process, pack, and ship your books and send order updates. | Performance of a Contract (To fulfil your purchase). |
| Financial Data (Payment details – not full card number) | To process your payment via our payment processor. | Performance of a Contract / Legitimate Interest (Fraud prevention). |
| Marketing Data (Email address from sign-up) | To send you newsletters, updates, and promotional offers. | Consent (You gave clear, opt-in permission). |
| Technical Data (IP Address, Browser, Device Type) | To secure our website, troubleshoot technical issues, and run analytics. | Legitimate Interest (Operating a secure and functional e-commerce website). |
3. How We Share Your Data (Third Parties)
We share your data only when necessary to run our services or comply with the law. We do not sell your personal data.
- Payment Processing: Your payment details are securely passed to third-party processors (e.g., Stripe, PayPal) to complete the transaction. We do not store your full payment card details.
- Shipping & Logistics: Your name and address are shared with delivery companies (e.g., Royal Mail) to deliver your physical goods.
- Marketing: Your email address is shared with our email marketing provider (e.g., Mailchimp) to distribute newsletters, but only if you have given explicit consent.
- Analytics: We use tools like Google Analytics to understand how our site is used. This involves sharing anonymised or pseudonymised Technical Data.
4. Cookie Policy and Consent Management
This section details how Peter Bates Holistic Books Limited uses cookies and similar tracking technologies on our website.
4.1. What are Cookies?
A cookie is a small text file that is stored on your device (computer, phone, tablet) when you visit our website.1 Cookies are used to make the website work more efficiently and to provide reporting information.2
4.2. Categories of Cookies Used
We use cookies that are automatically categorised by the CookieYes platform based on their purpose:
| Cookie Category | Purpose | Legal Requirement |
| Necessary (Strictly Necessary) | Essential for core website functionality, such as keeping items in your shopping basket or maintaining a secure login area. These cannot be switched off. | Legitimate Interest (Providing the requested service). |
| Functional | Used for non-essential features like remembering user preferences (e.g., regional settings) to enhance your browsing experience. | Consent (Must be opted-in by the user). |
| Analytical (or Performance) | Helps us measure how you use the website (e.g., via Google Analytics) to improve the user experience and our content. | Consent (Must be opted-in by the user). |
| Advertisement (or Marketing) | Used to track visitor behaviour across websites to build a profile of your interests and show you relevant adverts on other sites. | Consent (Must be opted-in by the user). |
| Others | Cookies that are currently unclassified or awaiting review. | Consent (Must be opted-in by the user). |
4.3. Your Consent and Control (Using CookieYes)
In compliance with UK GDPR and PECR, we manage your consent using the CookieYes platform:
Withdrawal: You can withdraw or change your consent at any time by clicking the small floating “Revisit Consent” or “Cookie Settings” button provided by CookieYes, which is usually found at the corner of the screen.
Prior Consent: All non-essential cookies (Functional, Analytical, Marketing, Others) are blocked by default until you give us explicit, granular consent via the CookieYes banner.
Opt-In Required: The banner requires you to actively click “Accept All” or manually check the categories in the “Customise” or “Manage Preferences” section.
5. Data Security and Retention
- Security: We use an SSL Certificate (HTTPS) to encrypt data transfer. We implement appropriate physical, electronic, and managerial procedures to safeguard and secure the data we collect.
- Data Retention: We only keep your personal data for as long as necessary to fulfil the purposes we collected it for. Order and financial data will typically be kept for six years after the tax year end for UK tax and legal purposes.
6. Your Rights Under UK GDPR
Under UK GDPR, you have the following rights regarding your personal data. To exercise any of these rights, please contact us using the Enquiries@peterbates-holisticbooks.com email address provided above.
| Your Right | What It Means |
| Right to Access (SAR) | You can request a copy of the personal data we hold about you. |
| Right to Rectification | You can ask us to correct incomplete or inaccurate data we hold about you. |
| Right to Erasure | You can ask us to delete your personal data (“right to be forgotten”), unless we have a legal requirement to keep it (e.g., tax records). |
| Right to Object | You can object to us processing your data for direct marketing (and we must stop immediately). |
| Right to Lodge a Complaint | You have the right to complain to the UK’s supervisory authority, the Information Commissioner’s Office (ICO), if you believe we have violated data protection laws. |