Privacy Policy

Data protection & privacy · SHVDE

Last updated: 4 September 2026

1. Introduction and Scope

This Privacy Policy describes how SHVDE ("we," "our," or "us") collects, uses, shares, and protects your personal information when you visit our website, make purchases, or interact with our services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website, you acknowledge that you have read and understood this policy.

2. Information We Collect

Personal Information: Name, email, phone number, billing and delivery address, and payment details.

Business Information: Business name, VAT number, and compliance-related data where applicable.

Technical Information: IP address, browser type, device information, pages visited, and timestamps.

Communication Data: Records of emails, calls, and customer support interactions.

3. How We Use Your Information

• Order Processing: To fulfil orders and manage delivery and returns.
• Account Management: To maintain your account and preferences.
• Customer Support: To respond to enquiries and improve service quality.
• Legal Compliance: To meet regulatory, tax, and statutory obligations under UK law.
• Business Operations: Analytics and internal improvements to our website and services.

4. Lawful Basis for Processing

Under the UK GDPR, we process your personal data on the following lawful bases:

• Performance of Contract: Processing necessary to fulfil your order and deliver goods.
• Legal Obligation: Compliance with UK tax, consumer protection, and accounting laws.
• Legitimate Interests: Fraud prevention, service improvement, and business analytics.
• Consent: Where you have provided express consent, such as for marketing communications.

5. Information Sharing and Disclosure

• Service Providers: Trusted partners assisting with website hosting, payment processing, and customer relationship management.
• Delivery Carriers: Royal Mail, DPD, Evri, Yodel, and other UK carriers for order fulfilment.
• Payment Processors: Secure third-party providers including PayPal, Klarna, and card payment processors.
• Legal Requirements: Disclosure when required by UK law, court order, or regulatory authority.
• Business Transfers: Data may be transferred during mergers, acquisitions, or asset sales.

6. Data Security and Protection

We implement industry-standard security measures including encryption, SSL/TLS protocols, and restricted access controls to protect your data. Whilst we strive for maximum protection, no internet transmission or electronic storage system is completely secure.

7. Cookies and Tracking Technologies

We use cookies to enhance user experience, analyse website traffic, and improve functionality. Our use of cookies complies with the Privacy and Electronic Communications Regulations 2003 (PECR). You may manage cookie preferences through your browser settings. For full details, please see our Cookie Policy.

8. Your Privacy Rights

Under the UK GDPR and Data Protection Act 2018, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: Request limitation of how we process your data.
• Right to Data Portability: Request transfer of your data to another organisation.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Complain: Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

To exercise any of these rights, please contact us using the details below.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy and to comply with legal obligations. Order and transaction records are retained for seven years in accordance with UK accounting and tax requirements. Marketing data is retained until you withdraw consent.

10. Third-Party Services and Links

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of external sites. We recommend reviewing their privacy policies before providing personal information.

11. Children's Privacy

Our services are intended for users aged 18 and over. We do not knowingly collect personal data from children under the age of 13. If we become aware that we have collected such data, we will delete it promptly.

12. International Data Transfers

Your personal data is primarily processed within the United Kingdom. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK government or transfers to countries with UK adequacy decisions. You have the right to request details of these safeguards.

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of our services following updates constitutes acceptance of the revised policy.

14. Contact Information