Privacy Policy
Last updated: 3 September 2025
Summary: we collect only what’s needed to run our store and support you, keep it for as long as required, and never sell your data.
This Privacy Policy explains how Shrimpz.co.uk (“we”, “us”, “our”) collects, uses, and shares information when you browse our site, place an order, or contact support. We follow the UK GDPR and the Data Protection Act 2018.
Who we are & how to contact us
Shrimpz.co.uk is an online-only store (no public address shown). For any privacy question or request, email contact@shrimpz.co.uk.
Information we collect
- Account & orders: name, email, phone (optional), billing/delivery details, items purchased.
- Payments: processed via Apple Pay / Google Pay (through our processor). We do not store full card numbers.
- Support: messages you send us and any attachments (e.g., DOA photos).
- Marketing preferences: opt-in email choices (Mailchimp).
- Website usage: analytics data (Google Analytics 4) only after consent; see Cookie Policy.
Where it comes from
- You provide it at checkout or via forms/email.
- With consent, cookies/analytics capture usage (aggregated/technical).
- Our providers return limited metadata (e.g., payment authorisation).
How & why we use information
- Fulfil orders & provide support — contract.
- Process payments & prevent fraud — contract / legitimate interests.
- Tax & legal compliance — legal obligation.
- Email marketing (optional) — consent; unsubscribe anytime.
- Site performance & analytics — legitimate interests (balanced, privacy-respectful).
Our processors
- Platform: WordPress + WooCommerce
- Hosting: IONOS
- Payments: Apple Pay / Google Pay (via our processor)
- Email marketing: Mailchimp
- Analytics: Google Analytics 4 (after consent)
- Forms: Formspree
- Support: Zendesk
- Delivery: Royal Mail
These providers process data for us under contracts aligned to UK GDPR.
Sharing & international transfers
We share data only with the providers above to run our store. We do not sell your data.
Some providers (e.g., Mailchimp, Zendesk, Google) may process data outside the UK. We rely on safeguards such as SCCs where required.
How long we keep data
| Category | Typical retention | Reason |
|---|---|---|
| Orders & VAT/tax records | 6 years | Legal requirement |
| Support messages | 24 months | Customer service & fraud prevention |
| Customer accounts | While active; delete on request (legal holds may apply) | Service & compliance |
| Marketing preferences | Until you unsubscribe or request deletion | Consent management |
Your rights
- Access, correction, deletion
- Restriction & objection (where applicable)
- Data portability
- Withdraw consent (e.g., marketing) anytime
To use any right, email contact@shrimpz.co.uk. We’ll respond within one month (extensions possible for complex requests).
Complaints
You can complain to the Information Commissioner’s Office (ICO): ico.org.uk/concerns.
Cookies & similar technologies
We use cookies essential to the site (cart/checkout). Non-essential cookies (e.g., analytics) only load after you consent. See our Cookie Policy for details.
Changes to this policy
If we update this policy, we’ll change the date at the top.