Privacy Policy

Data Controller

The data controller responsible for your personal data is:

For any questions about how we handle your data, or to exercise your rights under UK GDPR, please contact us using the details above.

What Personal Data We Collect

We collect and process the following categories of personal data depending on how you interact with our website and services:

Full name, email address, phone number, billing address, shipping address, payment information (processed securely by our payment providers, as we do not store your full card details), order history, and any communication related to your order.

Name, email address, password (encrypted), and any preferences you set within your account.

Email address and, where provided, your name. You can unsubscribe at any time using the link in every email.

Name, email address, and any information you provide in your message, including order numbers and details of your enquiry.

IP address, browser type and version, operating system, device type, pages visited, time spent on pages, referring URLs, and cookie data. See Section 7 (Cookies) for details.

Lawful Bases for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

How We Use Your Data

We use your personal data for the following purposes: processing and fulfilling orders, sending order confirmations and dispatch notifications with tracking information, managing returns, exchanges, and refunds, responding to customer enquiries and support requests, sending marketing communications where you have opted in, improving our website functionality and user experience, preventing fraud and maintaining website security, and complying with legal and regulatory obligations.

We will never sell, rent, or trade your personal data to third parties for their marketing purposes.

Third-Party Service Providers

We share your personal data with trusted third-party service providers who process data on our behalf to operate our business. These providers are contractually obligated to handle your data securely and only for the purposes we specify.

Some of these providers may transfer data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the ICO, to protect your data in accordance with UK GDPR.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Cookies

Our website uses cookies, which are small text files stored on your device, to provide and improve our services. We use the following types of cookies:

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of our website, including the ability to add items to your cart and complete checkout.

Your Rights Under UK GDPR

Under the UK General Data Protection Regulation, you have the following rights regarding your personal data:

You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR).

You have the right to request that we correct any inaccurate or incomplete personal data.

You have the right to request that we delete your personal data, subject to certain legal exceptions (for example, data required for tax records).

You have the right to request that we limit how we use your data in certain circumstances.

You have the right to request your personal data in a structured, commonly used, machine-readable format for transfer to another service.

You have the right to object to processing based on legitimate interest or for direct marketing purposes. Where you object to marketing, we will stop processing immediately.

Where we rely on your consent to process data (for example, marketing emails), you can withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at help@klaykicks.co.uk. We will respond to your request within one calendar month, as required by UK GDPR. There is no charge for most requests, although we may charge a reasonable fee for manifestly unfounded or excessive requests.

Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

These measures include SSL and TLS encryption across our entire website, PCI-compliant payment processing through Shopify Payments, access controls limiting data access to authorised personnel only, and regular reviews of our data handling practices.

While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. We encourage you to keep your account credentials confidential and contact us immediately if you suspect unauthorised access to your account.

Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at help@klaykicks.co.uk and we will take steps to delete that information.

International Data Transfers

Some of our third-party service providers (such as Shopify, Google, and Meta) operate outside the United Kingdom. Where your personal data is transferred outside the UK, we ensure that appropriate safeguards are in place to protect your data in accordance with UK GDPR.

These safeguards include transfers to countries recognised by the UK government as providing an adequate level of data protection, or the use of Standard Contractual Clauses (SCCs) approved by the Information Commissioner's Office (ICO).

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Where changes are significant, we may notify you by email or through a notice on our website.

Complaints

If you are unhappy with how we have handled your personal data, we encourage you to contact us first so we can try to resolve your concern at help@klaykicks.co.uk.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection: