Privacy Policy
Privacy Policy
Wolvex ("we", "us") respects your privacy. This policy explains, in plain English, what information we collect when you use wolvex.co.uk, why we collect it, how long we keep it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who is responsible for your data
Wolvex is the "data controller". You can contact us about anything in this policy at:
Wolvex, Unit 29 Highcroft Industrial Estate, Enterprise Road, Waterlooville PO8 0BT
Phone: +44 7459 471000 — Email: [email protected]
What we collect and why
- Order details — your name, delivery and billing address, email address, phone number and the items you buy. We need these to fulfil your order (legal basis: performance of a contract).
- Payment — payments are processed by Stripe. Your card number goes directly to Stripe over a secure connection; we never see it or store it. We keep only a payment reference so we can trace and refund payments (legal basis: contract and legal obligation).
- Account sign-in — we use one-time codes sent to your email instead of passwords, so there is no password for anyone to steal.
- Enquiries — if you phone, WhatsApp or email us we keep the correspondence so we can help you (legal basis: legitimate interests).
- Website analytics — with your consent we use Google Analytics 4 (GA4) and Google Search Console to understand how the website is used (pages visited, approximate location by country/town, device type) so we can improve it. This information does not identify you personally, and analytics cookies are only set after you choose to accept them in our cookie banner (legal basis: consent).
Who we share information with
- Stripe — to take payment securely.
- Delivery couriers — your name, address and phone number, so they can deliver your parcel.
- Google — anonymous usage statistics (GA4 / Search Console), only if you consent to analytics cookies.
- HMRC, banks and our accountants — order and invoice records, where the law requires it.
We never sell your personal information, and we do not send you marketing you have not asked for.
How long we keep your information
- Order and invoice records — 6 years after the end of the financial year, because HMRC requires us to keep business and tax records for at least six years.
- Account details — for as long as you keep an account with us.
- Enquiries — up to 2 years, so we can refer back if you contact us again.
Deleting your account
You can ask us to delete your account at any time. When you do, we delete or anonymise your personal details. Where we must keep an order record for HMRC, we keep the transaction but anonymise it so it can no longer be linked to you.
Your rights
- To see a copy of the information we hold about you (a "subject access request").
- To have mistakes corrected.
- To have your information deleted (as described above).
- To object to, or restrict, how we use your information.
- To receive your information in a portable electronic format.
- To withdraw consent (for example for analytics cookies) at any time.
To use any of these rights, contact us at [email protected] or call +44 7459 471000. We will respond within one month.
Keeping your information safe
Our website uses encryption (HTTPS) throughout. Access to customer information is limited to people who need it to do their job, and sensitive settings such as payment keys are stored encrypted.
Complaints
If you are unhappy with how we have handled your information, please tell us first and we will do our best to put it right. You also have the right to complain to the UK regulator: the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — helpline 0303 123 1113 — ico.org.uk.