GDPR & UK GDPR Privacy Policy
Last updated: 25 July 2025
This Privacy Policy explains how Wuffies (“we”, “us”, “our”) collects, uses, shares, and protects your personal data when you use our website and services. It covers your rights under the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) (where applicable), and the Privacy and Electronic Communications Regulations (PECR).
1. Who We Are
Wuffies is the Data Controller for personal data processed in connection with our services.
- Company: Wuffies
- Website: https://wuffies.co.uk
- Contact Email: customercare@wuffies.co.uk
If you are based in the UK, our supervisory authority is the Information Commissioner’s Office (ICO). If you are based in the EEA, you can contact your local Data Protection Authority.
2. Types of Data We Collect
We may collect and process the following types of personal data:
- Identity & Contact Data – name, address, email, phone number.
- Account Data – login credentials, order history, preferences.
- Transaction Data – payment details, billing information.
- Technical Data – IP address, browser type/version, device details.
- Usage Data – pages visited, time spent, links clicked.
- Marketing & Communications Data – your preferences for receiving marketing.
- Cookies & Tracking Data – see Section 7.
We do not knowingly collect data from children under 13 in the UK or 16 in the EU without parental consent.
3. How We Use Your Personal Data & Lawful Basis
| Purpose | Example Activities | Lawful Basis |
|---|---|---|
| To provide our service | Processing orders, managing accounts | Contract |
| To process payments | Handling card or PayPal transactions | Contract / Legal Obligation |
| To deliver marketing | Emailing offers and product updates | Consent / Legitimate Interests |
| To improve our website | Analytics, bug fixing, design changes | Legitimate Interests |
| To meet legal requirements | Tax records, fraud prevention | Legal Obligation |
| To personalise experiences | Product recommendations | Consent / Legitimate Interests |
| For security & fraud prevention | Monitoring unusual activity | Legitimate Interests |
4. Your Rights
Under UK GDPR and EU GDPR, you have the right to:
- Access – request a copy of the data we hold about you.
- Rectification – correct inaccurate or incomplete data.
- Erasure – request deletion of your data.
- Restriction – limit how we process your data.
- Portability – request your data in a machine-readable format.
- Object – to processing based on legitimate interests or for direct marketing.
- Withdraw Consent – at any time, where processing is based on consent.
How to exercise your rights: Email customercare@wuffies.co.uk. We may need to verify your identity before responding.
5. Data Retention
We only keep personal data for as long as necessary:
- Orders & transactions – up to 7 years for tax/legal purposes.
- Marketing data – until you withdraw consent or after 24 months of inactivity.
- Website analytics – retained in anonymised form for analysis.
6. International Data Transfers
Your data may be transferred outside the UK/EEA (e.g., to our cloud service providers). Where this happens, we ensure:
The destination country has an adequacy decision by the UK or EU; or
We use Standard Contractual Clauses (SCCs) or equivalent safeguards.
7. Cookies & Tracking Technologies
We use cookies to:
- Make our website work (essential cookies)
- Remember your settings (functional cookies)
- Analyse site traffic (analytics cookies)
- Show personalised ads (marketing cookies)
Non-essential cookies are only set if you consent. You can change your cookie preferences at any time via our Cookie Settings link.
For details, see our Cookie Policy.
8. How We Share Your Data
We may share your data with:
- Service providers – hosting, analytics, payment processors.
- Business partners – where you’ve agreed to joint promotions.
- Legal authorities – if required by law.
- Business transfers – in the event of a merger, acquisition, or sale.
We never sell your personal data.
9. Security
We use encryption, secure hosting, and regular audits to protect your personal data. No system is 100% secure, but we take all reasonable steps to minimise risks.
10. Automated Decision-Making & Profiling
We may use automated systems (e.g., ad targeting) to personalise content or offers. You have the right to object and request human review.
11. Changes to This Policy
We may update this policy from time to time. The latest version will always be posted on this page with the “Last updated” date.
12. Contact Us
Email: customercare@wuffies.co.uk
Address: Wuffies, Ashton Old Baths, Ashton-under-Lyne, Lancashire, OL6 7FW
Website: https://wuffies.co.uk
If you are in the UK, you can complain to the ICO: www.ico.org.uk.
If you are in the EEA, contact your local Data Protection Authority.