Privacy policy
PRIVACY POLICY
Last updated: 22 August 2026
This Privacy Policy explains how [YOUR LEGAL BUSINESS NAME], trading as [YOUR STORE NAME] (“we”, “us” or “our”), collects, uses, shares and protects personal information when you visit our website, contact us or place an order.
1. WHO WE ARE
Data controller: [YOUR LEGAL BUSINESS NAME]
Trading name: [YOUR STORE NAME]
Business address: [FULL BUSINESS ADDRESS]
Privacy email: hello@test.com
Our online store is hosted and operated using Shopify. We are the controller of the personal information described in this policy, except where another organisation acts as an independent controller for its own purposes.
2. INFORMATION WE COLLECT
Depending on how you use our store, we may collect:
• identity and contact information, including your name, email address, telephone number, billing address and delivery address;
• business information, including your company or store name and wholesale enquiry details;
• order and transaction information, including products ordered, amounts paid, payment status, refunds, delivery information and customer-service history;
• payment-related information processed by our payment providers. We do not normally receive your complete payment-card number;
• technical information, including IP address, device type, browser, operating system, cookie identifiers and security information;
• website usage information, including pages viewed, links selected, referring pages and interactions with our store;
• marketing preferences and information about how you respond to our communications; and
• information you provide in emails, forms, reviews or other communications.
3. HOW WE COLLECT INFORMATION
We collect information:
• directly from you when you order, create an account, contact us, subscribe or complete a form;
• automatically through cookies, server logs and similar technologies;
• from Shopify and service providers involved in payments, fraud prevention, delivery, analytics or marketing; and
• from publicly available or lawful business sources where appropriate.
4. HOW AND WHY WE USE INFORMATION
We use personal information for the following purposes and legal bases:
Contract
• to process and confirm orders;
• to take and verify payment;
• to arrange fulfilment, shipping and delivery;
• to provide order, tracking and service updates; and
• to respond to questions before and after a purchase.
Legal obligations
• to maintain tax, accounting and transaction records;
• to comply with product, consumer, customs and other legal requirements;
• to respond to valid legal requests; and
• to prevent or report unlawful activity where required.
Legitimate interests
• to operate, secure and improve our store;
• to prevent fraud, misuse and payment risk;
• to understand store performance and customer demand;
• to manage wholesale enquiries and customer relationships;
• to establish, exercise or defend legal rights; and
• to send limited business-related communications where permitted.
Where we rely on legitimate interests, we consider whether those interests are overridden by your rights and reasonable expectations.
Consent
Where required, we rely on consent for email marketing, advertising cookies or other optional activities. You may withdraw consent at any time by using an unsubscribe link, changing available cookie settings or contacting us.
5. WHO WE SHARE INFORMATION WITH
We may share information, where reasonably necessary, with:
• Shopify and providers that support our ecommerce store;
• payment processors, banks and fraud-prevention providers;
• warehouse, fulfilment, courier and delivery providers;
• website hosting, IT, email, customer-support and security providers;
• analytics, advertising and marketing providers, where permitted;
• accountants, insurers, lawyers and other professional advisers;
• regulators, courts, law-enforcement bodies or public authorities where required; and
• a buyer, seller or adviser involved in a proposed or completed sale, merger or reorganisation of our business or assets.
These recipients may use information only as permitted by their role, contract and applicable law.
6. INTERNATIONAL TRANSFERS
Some providers may process personal information outside the United Kingdom. Where required, we rely on an adequacy regulation, recognised contractual clauses or another lawful safeguard. Contact us if you would like more information about safeguards relevant to your information.
7. COOKIES AND SIMILAR TECHNOLOGIES
Our store uses cookies and similar technologies for essential store functions, checkout, security, preferences, analytics and, where enabled, advertising.
Where required, non-essential cookies are used only with consent. You can manage available choices through our cookie banner or browser settings. Blocking cookies may cause parts of the store or checkout to work incorrectly.
8. HOW LONG WE KEEP INFORMATION
We keep personal information only for as long as reasonably necessary for the purpose collected, including to complete orders, maintain legal and accounting records, resolve disputes and enforce agreements.
Retention periods vary depending on the type of record, our relationship with you, legal requirements, limitation periods and whether information is needed for an active dispute or investigation. When information is no longer required, we delete or anonymise it where reasonably possible.
9. SECURITY
We and our providers use reasonable technical and organisational measures intended to protect personal information against unauthorised access, alteration, loss or misuse. However, no internet transmission or storage system can be guaranteed completely secure.
You are responsible for keeping account credentials confidential and for contacting us if you believe your account or personal information has been compromised.
10. YOUR DATA PROTECTION RIGHTS
Depending on the circumstances and applicable law, you may have the right to:
• request access to personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request erasure of information;
• request restriction of processing;
• object to processing based on legitimate interests;
• object at any time to direct marketing;
• receive certain information in a portable format;
• withdraw consent where processing is based on consent; and
• complain to a data protection regulator.
These rights are not absolute, and legal exemptions may apply. We may request information reasonably necessary to verify your identity before acting on a request.
To exercise a right, email hello@test.com.
11. MARKETING
You can unsubscribe from marketing emails at any time by selecting the unsubscribe link or contacting us. We may still send non-marketing messages relating to an order, account, enquiry or legal notice.
12. CHILDREN
Our wholesale store is not directed at children, and we do not knowingly collect personal information from children for the purpose of selling wholesale stock. Contact us if you believe a child has provided personal information without appropriate authority.
13. THIRD-PARTY LINKS
Our website may link to third-party websites. We do not control their privacy practices. Review the privacy information provided by those third parties before submitting information to them.
14. COMPLAINTS
Please contact us first at hello@test.com if you have a concern about how we use personal information.
You also have the right to complain to the UK Information Commissioner’s Office:
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
15. CHANGES TO THIS POLICY
We may update this policy when our practices, service providers or legal obligations change. The latest version will be published on our website with a revised “Last updated” date.
16. CONTACT
[YOUR LEGAL BUSINESS NAME]
[FULL BUSINESS ADDRESS]
Email: hello@test.com