Privacy Policy
Effective Date: 14/09/2025
Company Name: Punga
Website: https://punga.co.uk
Punga (“we,” “our,” “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our website in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
​
Information We Collect
​
We may collect and process the following types of personal data:
-
Identity Data: name, username, or similar identifiers.
-
Contact Data: email address, phone number, postal address.
-
Technical Data: IP address, browser type, operating system, device information.
-
Usage Data: information about how you use our website (e.g., page visits, time spent).
-
Marketing & Communications Data: preferences for receiving updates, newsletters, or promotional material.
​
How We Collect Your Data
​
We collect data in the following ways:
-
When you provide it directly (e.g., filling out forms, subscribing to our newsletter, contacting us).
-
Automatically, through cookies and similar technologies when you use our website.
-
From third-party services (e.g., analytics providers, social media platforms).
​
How We Use Your Data
​
We process your personal data for the following purposes:
-
To provide, operate, and improve our website.
-
To respond to your enquiries or requests.
-
To send you updates, newsletters, or marketing communications (if you have consented).
-
To monitor website performance and usage trends.
-
To comply with legal or regulatory obligations.
​
4. Legal Bases for Processing
​
Under UK GDPR, we rely on the following legal bases:
-
Consent – when you opt-in to receive marketing or newsletters.
-
Contractual necessity – to provide services you request.
-
Legitimate interests – to improve website performance and user experience.
-
Legal obligation – to comply with applicable laws and regulations.
​
Data Sharing & Transfers
​
We will not sell your personal data. We may share your data with:
-
Service providers (e.g., website hosting, analytics, email providers).
-
Professional advisers (e.g., legal, financial).
-
Authorities, if required by law.
If we transfer your data outside the UK, we will ensure appropriate safeguards (e.g., adequacy decisions or standard contractual clauses).
​
Data Retention
​
We retain your personal data only as long as necessary to fulfil the purposes set out in this policy, or as required by law.
​
Your Rights
​
Under UK GDPR, you have the following rights:
-
Right to access – request a copy of your personal data.
-
Right to rectification – correct inaccurate or incomplete data.
-
Right to erasure – request deletion of your data (“right to be forgotten”).
-
Right to restrict processing – limit how your data is used.
-
Right to data portability – request transfer of your data.
-
Right to object – object to processing for direct marketing or legitimate interests.
-
Right to withdraw consent – where processing is based on consent.
To exercise your rights, please contact us using the details below.
​​
​
Data Security
​
We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse.
​
Contact Us
​
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Punga
Email: info@punga.co.uk
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection: https://ico.org.uk.