Privacy policy

Benjamin Griffiths trading as Woollaston White, a UK sole trader, is the controller responsible for the personal information we use to operate our business. Shopify and some other providers are separately responsible for their own processing, as explained below.

For privacy questions, requests or complaints, email sales@woollastonwhite.co.uk or write to Woollaston White, 4 Ashes Lane, Stalybridge, Cheshire, SK15 2RH, United Kingdom. You can also use our contact form. We reply to enquiries within 24 hours; completing a formal data-rights request may take longer within the applicable legal timeframe.

This notice explains our practices. Browsing the store or reading this notice does not, by itself, give consent to optional marketing or tracking.

Information you provide may include your name, email, telephone number, delivery and billing addresses, account preferences, order details, messages, return enquiries and any reviews or photographs you choose to submit.

Payment providers process the payment credentials you enter. Order records include payment status, transaction references and relevant payment-method information. Please never send full card details, passwords or sign-in codes to our customer-service email.

When you browse, Shopify and connected services may collect device and browser details, IP address, identifiers, pages and products viewed, basket activity and interactions with the store or communications. Optional tracking is subject to the choices and rules described below.

We receive information directly from you and from providers involved in your transaction, such as payment, delivery, account, review and store-platform services. We also receive information from marketing partners where applicable. We need the information necessary to process payment and deliver an order; without it we may be unable to fulfil your purchase. Marketing permission is not a condition of buying.

Orders, accounts and customer support: to process purchases, deliver goods, manage returns and communicate about your order. Our basis is performing our contract with you or taking steps you request before a contract. For general enquiries, our legitimate interest is responding helpfully and running our business.

Security and service improvement: to prevent fraud, investigate misuse, maintain reliable systems and understand how to improve our services. We rely on legitimate interests in protecting customers and operating our business, balanced against your rights. Where cookie or other tracking consent is required, we obtain it separately.

Legal and accounting records: to meet tax, accounting and other legal duties. Our basis is legal obligation. Handling disputes and protecting legal claims may also involve legitimate interests.

Marketing and personalisation: we rely on consent where required. Where the law permits marketing about our own similar products under the existing-customer exception, our basis is legitimate interests, with the required opt-out opportunities. You can object to direct marketing at any time.

Shopify hosts our store and processes information when you visit or buy. We share information with Shopify and providers supporting payments, delivery, hosting, customer support, reviews, analytics and marketing as needed for those purposes. Providers may operate outside your country.

Shopify Network Intelligence is enabled. Its enhanced services use information from interactions with our store, other merchants and Shopify to support protection, improvement, personalisation and advertising. Shopify is responsible for its processing for those enhanced services. Advertising based on activity across merchants is subject to the consent and opt-out requirements that apply to you.

Read the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal to learn about Shopify's processing and exercise relevant rights, including objection or withdrawal of consent. Shop and Shop Pay also involve Shopify's own privacy practices.

We may share information when you ask us to, to comply with lawful requests, with professional advisers for legal or accounting purposes, or in connection with a lawful business transfer with appropriate safeguards. Public reviews and content you choose to publish may be visible to other visitors.

Cookies and similar technologies support functions such as your basket, checkout and security, and may also support analytics and personalised advertising. Necessary functions do not depend on optional marketing consent. Where consent is required, optional technologies should only be used after you agree.

Use the store's cookie banner and preference controls to accept or decline optional uses. Contact us if you need help changing your choice. Browser controls can also block or remove cookies, although this may affect essential store functions and is not a substitute for withdrawing an existing marketing consent. Shopify explains its technologies in its cookie policy.

You can unsubscribe using the link in a marketing email or contact us at sales@woollastonwhite.co.uk. Opting out does not stop essential messages about an order, return or account. Withdrawing consent does not affect processing that was lawful before withdrawal.

For customers covered by relevant US state laws, certain advertising disclosures may count as a sale or sharing of information. Use Your Privacy Choices to exercise applicable opt-out rights. Applicable Global Privacy Control signals are recognised for the browser or device and, where Shopify can associate it, the account. Other browser Do Not Track signals are not treated as equivalent requests. These US controls do not replace UK or EEA consent rights.

We keep information for as long as needed for its purpose and applicable legal obligations. For orders and payments, we consider tax and accounting requirements, returns, warranties and legal claims. For account and support records, we consider whether the account is needed, whether an enquiry is resolved and whether a dispute remains possible. Marketing records depend on your preferences; a limited suppression record may be retained to honour an unsubscribe request. Contact us for details relevant to your records.

We use appropriate measures to protect personal information, but no system can guarantee absolute security. Please avoid sending unnecessary sensitive information through ordinary email or public reviews.

Shopify and other providers may process data overseas. Where required, transfers rely on recognised adequacy arrangements or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum and, for relevant EEA transfers, the European Commission's Standard Contractual Clauses. Contact us for information about the safeguards relevant to your data and how to obtain a copy.

Subject to applicable conditions, you can request access, correction, deletion, restriction or transfer of your information, and withdraw consent. Some information may need to be retained to fulfil legal obligations or address claims. We may ask for proportionate identity checks before releasing or changing records.

Your right to object: you can object to direct marketing at any time, including related profiling. You can also object to processing based on legitimate interests on grounds relating to your circumstances.

Email sales@woollastonwhite.co.uk to exercise your rights. We normally respond to UK data-rights requests within one month, subject to lawful extensions or pauses, and explain where an exception applies. We will not discriminate against you for exercising your rights.

You may complain directly to the Information Commissioner's Office (ICO), the UK data protection regulator, or call its helpline on 0303 123 1113. You do not have to complete our complaints process first. Customers elsewhere can contact their relevant supervisory authority.

Our store is not directed at children. If you believe a child has supplied personal information inappropriately, contact us so we can investigate and take appropriate action. We do not knowingly sell or share information of children under 16 for targeted advertising.

Third-party websites and sign-in or payment services have their own privacy notices. Please read these when using their services.

We review this notice when our services or data practices change, update the date and provide additional notice where required. This policy is maintained by Woollaston White rather than automatically generated by Shopify.