Here’s a GDPR-compliant Privacy Policy tailored for your UK-based print-on-demand business Wave Catcher:
Privacy Policy for Wave Catcher
Effective Date: [01/05/2025]
At Wave Catcher, we are committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, store, and protect your personal data when you use our website and services. It also explains your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant legislation.
1. Who We Are
Wave Catcher is a UK-based apparel and accessories eCommerce business.
Email: contact@wavecatcher.co.uk
2. What Data We Collect
We may collect and process the following personal data:
- Identity Data: name, username, or similar identifier.
- Contact Data: billing address, delivery address, email address, phone number.
- Transaction Data: details about payments, purchases, and order history.
- Technical Data: IP address, browser type, time zone, and device information.
- Usage Data: information about how you use our website, products, and services.
- Marketing and Communications Data: your preferences in receiving marketing from us.
3. How We Collect Your Data
We use various methods to collect data, including:
- Direct interactions (e.g. placing an order, creating an account, contacting us).
- Automated technologies (e.g. cookies, server logs).
- Third parties (e.g. payment processors, print fulfilment partners, analytics providers).
4. How We Use Your Data
We use your personal data for the following purposes:
- To process and deliver your orders.
- To manage payments and prevent fraud.
- To communicate with you about your order.
- To provide customer support.
- To improve our website and services.
- To send you marketing communications if you have opted in.
5. Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases for processing your data:
- Contract: To fulfil our obligations when you make a purchase.
- Consent: When you subscribe to marketing.
- Legal Obligation: To comply with legal or regulatory requirements.
- Legitimate Interests: For running our business and improving customer experience.
6. Sharing Your Data
We may share your data with:
- Print-on-demand partners (to fulfil and deliver your order).
- Payment processors (to process transactions).
- Service providers (e.g. hosting, marketing tools).
- Professional advisers (legal, accounting).
- Regulatory authorities (if required by law).
All third parties are required to respect the security of your data and process it in accordance with UK GDPR.
7. International Transfers
Some of our partners may process your data outside the UK or EEA. In such cases, we ensure adequate protection is in place, such as Standard Contractual Clauses or UK adequacy decisions.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.
9. Data Retention
We retain your personal data only as long as necessary for the purposes we collected it for, including for legal, accounting, or reporting requirements.
10. Your Data Protection Rights
Under the UK GDPR, you have the following rights:
- Access – Request a copy of your personal data.
- Correction – Request correction of any inaccurate or incomplete data.
- Erasure – Request deletion of your personal data (where applicable).
- Objection – Object to processing based on legitimate interest.
- Restriction – Request restriction of processing.
- Portability – Request transfer of your data to another service provider.
- Withdraw Consent – Where processing is based on your consent.
To exercise your rights, contact us at contact@wavecatcher.co.uk.
11. Cookies
If you leave a comment on our site, you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
12. Changes to This Privacy Policy
We may update this policy from time to time. Any changes will be posted on this page and, where appropriate, notified to you via email.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact:
Email: contact@wavecatcher.co.uk
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk