Privacy Policy | The Workwear Supplier

This Privacy Policy explains how The Workwear Supplier Ltd (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website or place an order with us. We are committed to ensuring your privacy is protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

WHO WE ARE

The Workwear Supplier Ltd is the data controller responsible for your personal data.

If you have any questions about how we handle your data, please contact us at the details above.

WHAT DATA WE COLLECT

INFORMATION YOU GIVE US

Contact details: Name, email address, phone number, delivery and billing address
Order information: Products purchased, sizes, quantities, branding/ customisation instructions
Payment details: We do not store card details — payments are processed securely by our payment provider
Account details: Username and password if you create an account
Trade account details: Business name, company registration number, VAT number
Communications: Emails, enquiries, and messages you send us
Branding files: Logos and artwork uploaded for embroidery or printing orders

INFORMATION WE COLLECT AUTOMATICALLY

HOW WE USE YOUR DATA

We only use your data for legitimate business purposes. Here’s what we use it for:

Processing your orders: Fulfilling purchases, processing payments, and arranging delivery
Customer service: Responding to enquiries, handling returns, and resolving issues
Embroidery & printing orders: Using artwork and instructions to produce branded workwear
Account management: Managing your customer or trade account
Marketing (with consent): Sending promotional emails, offers, and product updates — only if you've opted in
Legal compliance: Meeting our obligations under UK law, including tax and financial records
Fraud prevention: Protecting our business and customers from fraudulent activity
Website improvement:Analysing how customers use our site to improve the experience

We will never sell your personal data to third parties. We do not use your data for any purpose beyond what is described in this policy.

LEGAL BASIS FOR PROCESSING

Under UK GDPR, we must have a lawful basis to process your data. We rely on the following

SHARING YOUR DATA

We share your data only where necessary to deliver our services. We never sell it. Third parties we work with include

Delivery carriers: DPD and Royal Mail receive your name and delivery address to fulfil shipments
Payment processors: Our payment gateway processes card transactions securely. We never see or store your full card details
Email marketing platforms: If you've opted into marketing, your email may be stored in our email marketing platform
Website hosting: Our site is hosted on Cloudways — data is stored on UK/EEA servers
Analytics: We may use Google Analytics to understand site usage — data is anonymised where possible
Legal authorities: We may disclose data if required to do so by law or in response to legal proceedings

All third parties are contractually required to handle your data in accordance with UK GDPR.

COOKIES

Our website uses cookies — small text files stored on your device — to make the site work properly and improve your experience.

TYPES OF COOKIES WE USE

You can manage or withdraw your cookie consent at any time via the cookie banner on our website, or through your browser settings. Disabling essential cookies may affect how the site works.

DATA RETENTION

We only keep your data for as long as necessary for the purpose it was collected:

After these periods, data is securely deleted or anonymised.

YOUR RIGHTS

Under UK GDPR, you have the following rights regarding your personal data:

RIGHT TO ACCESS: Request a copy of the personal data we hold about you (Subject Access Request).
RIGHT TO RECTIFICATION: Ask us to correct inaccurate or incomplete data we hold about you.
RIGHT TO ERASURE: Request deletion of your data where there's no legitimate reason to keep it.
️ RIGHT TO RESTRICTION: Ask us to restrict processing of your data in certain circumstances.
RIGHT TO PORTABILITY: Receive your data in a structured, commonly used format to transfer elsewhere.
RIGHT TO OBJECT: Object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, email us at info@theworkwearsupplier.co.uk. We will respond within 30 days. If you are unhappy with how we’ve handled your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

DATA SECURITY

We take the security of your data seriously and have appropriate technical and organisational measures in place:

SSL encryption: All data transmitted via our website is encrypted using SSL/TLS
Secure hosting: Our site is hosted on Cloudways with regular security updates and backups
Payment security: Card payments are processed via a PCI-DSS compliant payment gateway. We never store card details.
Access controls: Access to customer data is restricted to authorised staff only
Regular reviews: We regularly review our data security practices
RIGHT TO OBJECT: Object to processing based on legitimate interests, including direct marketing.

In the unlikely event of a data breach that poses a risk to your rights, we will notify you and the ICO within 72 hours as required by UK GDPR.

THIRD-PARTY LINKS

Our website may contain links to third party websites (such as brand websites or social media platforms). These websites have their own privacy policies, and we have no responsibility or liability for their content or practices.

We encourage you to review the privacy policy of any website you visit via a link from our site.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last Updated” date at the top of this page will always show when it was last revised.

We recommend checking this page periodically. For significant changes, we will notify registered customers by email.

CONTACT US

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please get in touch: