Wrap & Cover: Privacy Policy- How We Protect Your Data

Privacy Policy

This privacy policy explains how Wrap & Cover Ltd ("we", "us", "our") collects, uses and protects your personal data when you visit wrapandcover.co.uk or place an order with us. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Wrap & Cover Ltd is the data controller responsible for your personal data. Our contact email is support@wrapandcover.co.uk.

What Data We Collect

We may collect the following personal data from you:

Name, email address, phone number and delivery/billing address
Payment information (processed securely by Shopify Payments - we do not store card details)
Order history and account preferences
IP address, browser type and device information (collected automatically via cookies)
Communications you send to us (e.g. enquiry forms, emails)

How We Use Your Data

We use your personal data to:

Process and fulfil your orders
Send order confirmations and shipping updates
Respond to your enquiries and provide customer support
Send marketing emails where you have given consent (you can unsubscribe at any time)
Improve our website and understand how customers use it
Comply with legal and regulatory obligations

Lawful Basis for Processing

Contract - processing necessary to fulfil your order
Consent - for marketing communications (which you can withdraw at any time)
Legitimate interests - for fraud prevention, improving our services and website analytics
Legal obligation - for tax, accounting and regulatory compliance

Third Parties We Share Data With

We share data only where necessary with:

Shopify Inc - our e-commerce platform (data may be processed in the USA under appropriate safeguards)
Payment processors - Shopify Payments, PayPal and other payment providers
Delivery partners - couriers and postal services to fulfil your order
Email marketing providers - where you have opted in to receive marketing
Analytics providers - Google Analytics (anonymised data only)

We do not sell your personal data to third parties.

Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes outlined in this policy. Order data is retained for 7 years for accounting and legal purposes. Marketing consent records are retained until you withdraw consent.

Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request erasure of your data ("right to be forgotten")
Restrict or object to processing
Data portability
Withdraw consent at any time

To exercise any of these rights, contact us at support@wrapandcover.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data is being handled unlawfully.

Cookies

We use cookies to improve your browsing experience, analyse site traffic and personalise content. You can manage cookie preferences through the cookie consent banner when you first visit our site. For full details see our Cookie Policy.

Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure. Our website uses SSL encryption and our e-commerce platform (Shopify) is PCI DSS compliant.