Wasama Privacy Policy

For www.wasama.co.uk (Shopify)

1. Who We Are

For the purposes of UK data protection law, the data controller is Wasama Ltd, company number 11678729, registered office 512 Streetsbrook Road, Solihull, B91 1RH ("Wasama", "we", "us"). This policy covers personal data collected through www.wasama.co.uk only. If you buy from us via Amazon or Etsy, those marketplaces are separately responsible for the data they collect from you at checkout, under their own privacy policies.

2. Information We Collect

•      Contact and order details: name, email, phone number, billing and delivery address, order history.

•      Payment information: processed by our payment providers (via Shopify Payments and/or other listed gateways) — we do not store full card details ourselves.

•      Technical and usage data: IP address, browser and device type, and cookie identifiers (see Section 5).

•      Communications: any correspondence you send us, e.g. customer service enquiries.

3. How We Use Your Information and Our Legal Basis

UK GDPR requires us to have a lawful basis for each way we use your data:

•      To take and fulfil your order, and manage returns or refunds — necessary to perform our contract with you.

•      To respond to customer service enquiries — contract / legitimate interests in resolving your query.

•      To send you order updates and essential service communications — contract.

•      To send marketing emails — only where you have opted in (consent); you can withdraw this at any time.

•      To detect and prevent fraud, and to comply with tax, accounting and customs obligations — legal obligation / legitimate interests.

•      To understand and improve how our website performs — legitimate interests, or consent where cookies require it (see Section 5).

4. Who We Share Your Information With

We do not sell or rent your personal data. We share it only where necessary, with:

•      our website platform, Shopify Inc., which hosts the site and processes orders on our behalf;

•      payment processors, to take payment securely;

•      couriers and logistics partners, to deliver your order;

•      our accountant and any professional advisers, where necessary for our legal and tax obligations;

•      law enforcement or regulators, where we are required to by law.

Some of these providers (including Shopify) may process data outside the UK. Where that happens, we rely on legally recognised safeguards such as the UK's International Data Transfer Agreement or an adequacy decision, and can provide more detail on request.

5. Cookies and Similar Technologies

We use cookies and similar technologies for:

•      strictly necessary purposes (e.g. keeping your basket working, checkout, security) — these don't require consent;

•      analytics and site functionality/preference cookies used only by us — under the Data (Use and Access) Act 2025, these no longer require your prior consent, but you have the right to clear information about them and a free, easy way to opt out;

•      advertising and third-party tracking cookies (e.g. for retargeting) — these still require your consent, which we ask for via our cookie banner before they are set.

You can manage or withdraw cookie consent at any time via our cookie settings tool [link/if in place], or through your browser settings, though disabling some cookies may affect site functionality.

6. How Long We Keep Your Information

•      Order and transaction records: 6 years from the end of the relevant tax year, to meet HMRC record-keeping requirements.

•      Marketing consent and preferences: until you withdraw consent, then a short record kept to evidence the withdrawal.

•      Customer service correspondence: typically 2 years from resolution, unless a longer period is needed to deal with a dispute.

7. Data Security

We use SSL encryption and rely on Shopify's PCI-DSS-compliant infrastructure to protect data in transit and at checkout. No online system is completely secure, but we take reasonable technical and organisational steps to protect your information and to notify affected individuals and the ICO of any serious data breach as required by law.

8. Your Rights

Under UK data protection law, you have the right to:

•      access the personal data we hold about you;

•      have inaccurate data corrected;

•      request erasure of your data, subject to our legal obligations (e.g. tax records);

•      object to or restrict certain processing, including direct marketing;

•      request a portable copy of data you've provided to us;

•      withdraw consent at any time where we rely on consent;

•      complain to the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113 if you're unhappy with how we've handled your data.

To exercise any of these rights, contact us at info@wasama.co.uk. Wasama Ltd is registered with the ICO under reference ZC232893.

9. Children

Our products and website are not directed at children, and we do not knowingly collect personal data from anyone under 18 without parental consent.

10. Changes to This Policy

We may update this policy from time to time; the current version will always be available on this page, dated accordingly.

11. Contact Us

Wasama Ltd, 512 Streetsbrook Road, Solihull, B91 1RH. Email: info@wasama.co.uk.