1. Who We Are

IoW Defibrillators Online Store is a community-run charitable shop that raises funds to place life-saving defibrillators across the Isle of Wight. Our website is at iow-defibrillators-store.base44.app. You can contact us at info@iowmap.co.uk.

2. What Information We Collect

When you place an order we collect the following personal information:

• Full name
• Email address
• Phone number (optional)
• Delivery address
• Order and payment details (processed securely by PayPal — we never see your card number)

If you create an account or log in, we also store your email address and any profile information you provide.

3. How We Use Your Information

• To process and fulfil your order and send you an order confirmation email
• To contact you about your order if there is a problem
• To keep records required for charitable and financial purposes
• To improve our website and shop

We do not use your data for marketing emails or share it with third parties for marketing purposes.

4. Legal Basis for Processing

We process your personal data on the basis of contract (to fulfil your order) and our legitimate interests in running the shop and charitable fundraising. Where required, we will obtain your consent.

5. Payments

All payments are processed securely by PayPal. We do not store or have access to your credit or debit card details. PayPal's own privacy policy applies to the payment process and can be found at paypal.com/uk/legalhub/privacy-full.

6. How Long We Keep Your Data

We retain order records for up to 7 years for accounting and charity reporting purposes. If you create an account and wish to have it deleted, please contact us and we will remove your data where we are not legally required to retain it.

7. Sharing Your Data

We only share your personal data with:

• PayPal – to process your payment
• Royal Mail / postal carriers – your name and address on the parcel label
• Base44 – our website hosting platform, which stores data securely on our behalf

We do not sell your data.

8. Cookies

Our website uses minimal cookies required for the site to function (such as keeping items in your shopping cart). We do not use advertising or tracking cookies. No third-party analytics tools (e.g. Google Analytics) are currently active on this site.

9. Your Rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data (subject to legal retention requirements)
• Object to or restrict how we use your data
• Complain to the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, please email us at info@iowmap.co.uk.

10. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date.