Privacy Policy
1. Who We Are
This policy explains how Wavy ("we", "us", "our") collects, uses and protects your personal information when you visit our website, buy from us, or get in touch.
Wavy is the data controller for the information described below. Our registered company details and full postal address are shown in the footer of every page of this website, and our current contact channels — including email — are listed on our contact page. We keep those in one place so you always have the most up-to-date way to reach us.
If you would like to raise anything about your personal information, use any of the contact routes on our website and mark your message for the attention of our data protection contact.
2. What Information We Collect
Information you give us
- Name, email address, phone number, delivery address and billing address
- Order details and purchase history
- Account login details, if you create an account
- Marketing preferences, including whether you have opted in to email or SMS
- Messages you send us — customer service enquiries, returns requests, reviews and social media contact
- Size and fit preferences, where you choose to share them
Information we collect automatically
- Device and browser information, IP address and approximate location
- Pages viewed, products browsed, time on site and how you reached us
- Cookie and similar identifiers, as described in section 6
Information we receive from others
- Payment confirmation and fraud-screening results from our payment providers. We do not receive or store your full card number
- Delivery status from our couriers
- Aggregated advertising and analytics reporting from the platforms we advertise on
3. How We Use It, and Our Legal Basis
| What we do | Why | Legal basis |
|---|---|---|
| Process and deliver your order | To fulfil our contract with you | Contract |
| Take payment and screen for fraud | To complete the sale and protect against fraudulent transactions | Contract, and our legitimate interest in preventing fraud |
| Handle returns, exchanges and customer service | To meet our obligations to you | Contract, and legal obligation |
| Send order, dispatch and delivery updates | So you know where your order is | Contract |
| Send marketing by email or SMS | To tell you about new products, restocks and offers | Consent, or the soft opt-in where you have bought from us before |
| Measure and improve the website | To understand what works and fix what does not | Consent for non-essential cookies, otherwise our legitimate interest in improving our service |
| Advertising and audience measurement | To reach people likely to be interested in Wavy | Consent |
| Keep accounting and tax records | Because the law requires it | Legal obligation |
4. Marketing, Including SMS
If you opt in, we will send you marketing by email, by SMS, or both — you choose which, and you can change your mind at any time.
We will only text you if you have given us your number and agreed to receive marketing messages, or where you have bought from us before, we are marketing our own similar products, and you were given a clear chance to opt out when we collected your number. Every marketing text identifies us as the sender and includes a way to stop.
To stop marketing at any time:
- Email — use the unsubscribe link at the bottom of any message
- SMS — reply STOP to any marketing text
- Either — update your preferences in your account, or contact us using the details on our website
Opting out of marketing does not stop service messages about an order you have placed, such as dispatch and delivery updates. Those are part of fulfilling your order.
If you unsubscribe, we keep a minimal record of your contact details on a suppression list. This is so we can make sure we do not contact you again by mistake.
5. Who We Share It With
We share personal information only with organisations that help us run the business, and only as far as they need it to do their job:
- Shopify, our e-commerce platform and hosting provider
- Payment providers, to take payment securely and screen for fraud
- Couriers and fulfilment partners, to pick, pack and deliver your order
- Our email and SMS platform, to send marketing and service messages
- Analytics providers, to measure how the website performs
- Advertising platforms, to run and measure our advertising, where you have consented
- Reviews and content platforms, where you choose to leave a review
- Professional advisers, such as accountants and lawyers, where needed
- Law enforcement or regulators, where we are legally required to disclose
A current list of the specific providers we use is available on request through the contact details on our website.
We do not sell your personal information.
6. Cookies and Similar Technologies
We use cookies and similar technologies to make the site work, remember your basket, measure performance and — only with your consent — to personalise advertising.
When you first visit, you can accept or reject non-essential cookies. You can change your choice at any time through the cookie preferences link on our website. Essential cookies cannot be switched off, because the site will not function without them. Details of the individual cookies we set, what they do and how long they last are in our cookie preferences panel.
7. Sending Information Outside the UK
Some of the providers we work with are based outside the UK, including in the United States. Where your information is transferred outside the UK, we rely either on UK adequacy regulations, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, along with appropriate additional safeguards.
8. How Long We Keep It
| Information | How long we keep it |
|---|---|
| Order and transaction records | 6 years from the end of the financial year the order falls in, to meet tax and accounting requirements |
| Account details | For as long as your account is open. If your account is inactive for 3 years we will close and delete it, other than records we must keep for tax |
| Marketing contact details | Until you unsubscribe. After that we keep a minimal suppression record so we do not contact you again |
| Customer service correspondence | 2 years from the date the matter is closed |
| Returns, refunds and warranty records | 6 years, in line with the period in which a claim could be brought |
| Fraud and security records | 12 months, unless we need to keep them longer to investigate |
| Website analytics | Up to 26 months |
| Cookies | As set out in our cookie preferences panel |
9. Your Rights
Under UK data protection law you have the right to:
- Ask for a copy of the personal information we hold about you
- Ask us to correct anything that is wrong or incomplete
- Ask us to delete your information, in certain circumstances
- Object to how we use it, or ask us to restrict our use of it
- Withdraw your consent at any time, where we rely on consent
- Ask us to transfer your information to another provider
- Ask us not to make solely automated decisions about you that significantly affect you
To exercise any of these, get in touch using the contact details on our website. We will respond within one month. We do not charge for this.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would be glad of the chance to put it right first.
10. Keeping Your Information Secure
We use appropriate technical and organisational measures to protect your information, including encryption in transit, restricted access on a need-to-know basis, and providers we have checked. No system is completely secure, but we take this seriously and review our arrangements regularly.
11. Children
Our website and products are not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us their information, contact us and we will delete it.
12. Changes to This Policy
We may update this policy from time to time. The date at the top shows when it last changed. If we make a significant change we will make that clear on the website, and tell you directly where it is appropriate to do so.
13. Contact Us
For anything about this policy or your personal information, use the contact details on our website. Our registered company details and postal address appear in the footer of every page.