Privacy policy

This Privacy Policy explains how WE2YOU LTD (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit or make a purchase from we2you.co.uk (the “Website”). We are committed to handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are (the Data Controller)

WE2YOU LTD is the data controller responsible for your personal data.

2. What information we collect

We collect and process the following categories of personal data:

• Identity & contact data — name, billing address, delivery address, email address, telephone number.
• Order data — items purchased, order value, order history, and correspondence with our customer service.
• Payment data — payment is processed by our third-party payment provider. We do not store full card numbers on our systems. We may retain the last four digits and the transaction reference.
• Account data — username and password (encrypted) if you create an account.
• Technical & usage data — IP address, browser type, device information, and pages visited, collected via cookies and similar technologies.
• Marketing preferences — your choices about receiving marketing from us.

3. How and why we use your information

We only use your personal data when the law allows us to. Our lawful bases and purposes are:

4. Cookies

Our Website uses cookies. Strictly necessary cookies are required for the Website and checkout to function. Analytics and marketing cookies are only set with your consent, which you give via our cookie banner and can change at any time.

5. Who we share your data with

We do not sell your personal data. We share it only with trusted third parties who help us run our business, including:

• Our payment provider.
• Our delivery and courier partners.
• Our website hosting and IT service providers;
• Our email and analytics providers.
• Professional advisers and HMRC, where required by law.

All processors are required to keep your data secure and to use it only as instructed by us.

6. International transfers

Where any of our service providers are based outside the UK, we ensure an appropriate safeguard is in place (such as an adequacy decision or the International Data Transfer Agreement) so your data receives an equivalent level of protection.

7. How long we keep your data

We keep your personal data only as long as necessary. Order and transaction records are kept for 6 years to meet UK tax and accounting law. Marketing data is kept until you unsubscribe. Account data is kept while your account remains active.

8. How we protect your data

We use appropriate technical and organisational measures — including encryption (SSL), access controls, and secure hosting — to protect your data against loss, misuse, or unauthorised access.

9. Your rights

Under UK data protection law you have the right to:

• access a copy of your personal data;
• have inaccurate data corrected;
• have your data erased (in certain circumstances);
• restrict or object to our processing;
• data portability;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email us at info@we2you.co.uk. We will respond within one month.

10. Complaints

If you are unhappy with how we handle your data, please contact us first so we can try to resolve it. You also have the right to complain to the UK regulator, the Information Commissioner’s Office (ICO), at ico.org.uk or by calling 0303 123 1113.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “last updated” date at the top shows when it was last revised.