2.1 In this Section 2 we have set out:
(a) the general categories of personal data that we may process;
(b) in the case of personal data that we did not obtain directly from you, the source and specific categories of that data;
(c) the purposes for which we may process personal data; and
(d) the legal bases of the processing.

2.2 We may process data about your use of our website and services (“usage data”) via Google Analytics. The legal basis is our legitimate interests in monitoring and improving our website and services.

2.3 We may process your account data (e.g. name and email address) for administration and communication. The legal basis is our legitimate interests.

2.4 We may process personal data submitted through the use of our services (e.g. name, email address, phone number, date of birth) for website operation, backups, and communication. The legal basis is our legitimate interests.

2.5 We may process enquiry data (information submitted via forms) to offer, market, and sell products. The legal basis is consent.

2.6 We may process transaction data (contact details, card details, and transaction details) for order fulfilment and recordkeeping. The legal basis is contract performance and our legitimate interests.

2.7 We may process notification data for email communications or newsletters. The legal basis is consent.