Privacy Policy

About this privacy policy

WOW Shelving Limited (“we”, “us”, “our”) respects your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website or interact with us in any way.

It also sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this policy carefully so you understand how we handle your information.

By using our website, you confirm that you have read and understood this Privacy Policy.

1. Who we are

WOW Shelving Limited is a company registered in England and Wales under company number 14269296, with its registered office at:

Unit 71, Staunton Court Business Park, Ledbury Road, Gloucestershire, GL19 3QS

We are the data controller responsible for your personal data.

2. Contact details

If you have any questions about this Privacy Policy or about how we handle your data, you can contact us by:

• Email: sales@wowshelving.com
• Post: WOW Shelving Limited, Unit 71, Staunton Court Business Park, Ledbury Road, Gloucestershire, GL19 3QS
• Telephone: 0345 5480 999

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk). However, we would appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.

3. What personal data do we collect?

We may collect and process the following types of personal data:

• Name and contact details (email address, telephone number, billing and delivery addresses)
• Payment details (credit/debit card information, billing records)
• Login details (account username and password)
• Purchase history and customer service interactions
• Marketing preferences and communication history
• Website usage data (IP address, device type, browser, location data, cookies – see our [Cookie Policy])
• Feedback, reviews, survey responses and competition entries
• Social media interactions (e.g. tagging or messaging us)

We do not routinely collect “special category data” (such as health information), but if you provide this (for example, accessibility or delivery requirements), we will only use it with your consent or where necessary for legal claims.

4. How we collect your personal data

We may collect personal data in the following ways:

• When you place an order on our website
• When you create an account with us
• When you contact us by email, phone, or via our website chat
• When you sign up to our newsletter or other marketing communications
• When you enter a competition, promotion or survey
• When you engage with us on social media
• When you browse our website (via cookies and similar technologies)
• When third-party partners (e.g. payment providers, delivery companies) share data with us in order to complete your transaction

5. How we use your personal data

We use your personal data only where we have a lawful basis to do so under UK GDPR. The purposes include:

Purpose	Lawful basis
To process and deliver your orders, including payments and deliveries	Performance of a contract
To create and manage your online account	Performance of a contract
To provide customer service and support	Legitimate interests / contract
To send you service-related messages (e.g. order updates, delivery notifications)	Legal obligation / contract
To send you marketing communications (where you have consented, or where permitted under “soft opt-in” rules for existing customers)	Consent / legitimate interests
To personalise your online shopping experience	Consent (cookies) / legitimate interests
To detect and prevent fraud or other crimes	Legitimate interests / legal obligation
To comply with legal and regulatory obligations (e.g. tax, accounting, product recalls)	Legal obligation
To conduct analytics and improve our website, products and services	Legitimate interests

You can withdraw consent at any time (e.g. unsubscribe from marketing emails) by following the link in our emails or contacting us directly.

6. Who we share your data with

We will never sell your personal data. We may share it with trusted third parties, including:

• Delivery and logistics providers (to fulfil your order)
• Payment processors (to process secure payments)
• IT and website service providers (hosting, email, analytics, cookies)
• Marketing agencies and advertising platforms (where you have consented to cookies/marketing)
• Professional advisers (lawyers, auditors, insurers)
• Regulators or law enforcement (where required by law)

Whenever we share data, we ensure appropriate contracts and safeguards are in place.

7. International transfers

Your personal data is normally stored within the UK or the European Economic Area (EEA). If we need to transfer your data outside the UK/EEA (for example, to a technology provider in the US), we will ensure that appropriate safeguards (such as the UK International Data Transfer Agreement or equivalent protections) are in place.

8. How long we keep your data

We only keep your personal data for as long as necessary for the purposes outlined in this policy, including to satisfy legal, accounting or reporting requirements.

For example:

• Customer orders and transaction records: kept for up to 6 years (for tax and legal purposes)
• Marketing data: kept until you unsubscribe or withdraw consent
• Account details: retained while your account is active (you may request deletion at any time)

9. Your rights under UK GDPR

You have the following rights:

• Right of access – request a copy of the personal data we hold about you
• Right to rectification – request correction of inaccurate or incomplete data
• Right to erasure – request deletion of your personal data in certain circumstances
• Right to restrict processing – request that we limit how we use your data
• Right to data portability – request that we transfer your data to another service provider
• Right to object – object to our processing, especially for direct marketing
• Rights relating to automated decision-making and profiling – request human review of decisions made solely by automated means

You can exercise these rights at any time by contacting us.

10. Marketing preferences

If you are a consumer and have opted in, we may send you offers, promotions and updates via email, SMS or post.

If you are a business customer, we may send you marketing based on our legitimate interest (you may opt out at any time).

You can stop receiving marketing messages at any time by:

• Clicking the “unsubscribe” link in our emails
• Adjusting your account preferences
• Contacting us directly

Stopping marketing messages will not affect service communications (e.g. order updates).

11. Cookies

Our website uses cookies and similar technologies to improve functionality, personalise your shopping experience and deliver relevant advertising. Full details are provided in our Cookie Policy. You can manage or disable cookies via your browser settings.

12. Security

We take the security of your personal data very seriously. We use encryption, firewalls, secure servers and access controls to protect your information. Only authorised employees and service providers have access to personal data, and they are bound by confidentiality obligations.

13. Updates to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a new “last updated” date. Where appropriate, we will notify you by email.