This Privacy Policy explains how Conwy Kayaks (“we”, “our”, “us”) collects, uses, and protects your personal information when you visit our website (www.conwykayaks.co.uk) or purchase products from us. We are committed to safeguarding your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Conwy Kayaks is a trading name of Stands Out Ltd, registered in England and Wales.
Registered Office: Unit 3, Mochdre Business Park, Blackmarsh Road, Mochdre, Conwy, LL28 5HA
Company Number: 6547586
VAT Registration Number: 945465494
Email: help@conwykayaks.co.uk
Telephone: 01492330203

2. Information We Collect

We collect and process the following categories of personal information when you interact with our website or place an order:

• Identity information: name, billing and delivery address, and contact details.
• Order details: products purchased, payment amount, and order history.
• Payment information: processed securely via our payment provider; we do not store full card details.
• Account information: if you create an account, we store your login credentials (encrypted) and order history.
• Technical data: IP address, browser type, device identifiers, and cookies (see section 6).
• Marketing preferences: your choices for receiving newsletters, promotions, or service updates.

3. How We Use Your Information

We use your information for the following lawful purposes:

• To process and fulfil your orders, including shipping and delivery.
• To communicate with you about your order status or respond to enquiries.
• To manage returns, refunds, and customer service requests.
• To maintain your account and purchase history.
• To comply with legal obligations, including accounting and tax records.
• To send marketing communications (only if you have given consent).
• To analyse website traffic and improve our services.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases to process your personal data:

• Contractual necessity – to fulfil your orders and provide customer support.
• Legal obligation – to retain transaction data for tax and accounting purposes.
• Consent – for email marketing or optional cookies (which you can withdraw at any time).
• Legitimate interests – to maintain website security and improve user experience.

5. Data Retention

We retain personal information only as long as necessary for the purposes described above or as required by law (e.g., HMRC record retention). After this period, data is securely deleted or anonymised.

6. Cookies and Analytics

Our website uses cookies to enhance your browsing experience, analyse website traffic, and support essential site functions such as the shopping cart. You can manage or disable cookies through your browser settings at any time.

• Essential cookies: required for site operation and checkout functionality.
• Analytics cookies: used via Google Analytics to understand visitor behaviour (IP addresses anonymised).
• Marketing cookies: may be used for remarketing campaigns if you consent.

For more information, see our Cookie Policy.

7. How We Share Your Data

We only share your information with trusted third parties necessary to operate our business, including:

• Delivery and courier partners (e.g., Royal Mail, Parcelforce, APC, DX Freight).
• Payment processors (e.g., Shopify Payments, PayPal, or Stripe).
• IT and website hosting providers who support our online systems.
• Professional advisers such as accountants or auditors (where legally required).

All third parties are required by contract to protect your data and use it only for the intended purpose.

8. International Data Transfers

Where we transfer personal data outside the UK (for example, to servers located in the EU or US), we ensure that appropriate safeguards are in place, such as UK adequacy decisions or Standard Contractual Clauses approved by the ICO.

9. Your Rights Under UK GDPR

You have the following rights regarding your personal information:

• The right to access a copy of your personal data.
• The right to request correction of inaccurate or incomplete data.
• The right to request deletion of your data (“right to be forgotten”).
• The right to restrict or object to processing in certain circumstances.
• The right to data portability (to move your data elsewhere).
• The right to withdraw consent at any time where processing is based on consent.

To exercise these rights, please contact us at help@conwykayaks.co.uk.

10. Security of Your Information

We implement technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. All transactions are processed using secure SSL encryption.

11. Marketing Communications

You may choose to receive updates or promotional emails from us. You can opt out at any time by clicking “unsubscribe” in our emails or by contacting us directly.

12. Links to Other Websites

Our website may include links to external websites. We are not responsible for the privacy practices or content of those websites. Please review their privacy policies before providing any personal information.

13. Updates to This Privacy Policy

We may update this Privacy Policy periodically. The latest version will always be available on this page, and the “last updated” date will reflect the most recent revision.

14. Contact and Complaints

If you have any questions or concerns about how we handle your personal data, please contact our Data Protection Officer (DPO) at help@conwykayaks.co.uk.

You also have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: www.ico.org.uk