Privacy Policy

---

1. Introduction

This Privacy Policy describes how  WALKABOUT (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit or make a purchase from our online store.

We are the Data Controller of your personal data under the UK GDPR and Data Protection Act 2018. 

2. What Data We Collect

We collect information when you browse the site, contact us, or place an order.

A. Information You Provide Directly

• Name
• Billing address
• Shipping address
• Email address
• Phone number (optional)
• Order details
• Returns information
• Customer service messages

B. Payment Information

We do not store or process payment card data ourselves. Payments are processed securely by third-party processors

These providers act as Data Processors and handle card data on their own secure platforms.

C. Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address
• Device type
• Browser type
• Operating system
• Pages viewed
• Time and date of visits
• Referral links
   

D. Cookies & Tracking Technologies

We use functional, performance, and analytics cookies. You can control cookies via your browser settings.

3. How We Use Your Information

We use your data to:

• Process and fulfill orders
• Deliver product
• Provide customer support
• Send order updates
• Operate and improve our website
• Detect fraud and security threats
• Conduct analytics and performance tracking
• Send marketing emails (only with consent)

4. Legal Basis for Processing (GDPR)

We process your personal data under the following lawful bases:

Purpose:                                                                                                             Legal Basis:

Fulfilling orders                                                                                             Contract

Customer support                                                                                        Legitimate interests   

Fraud prevention                                                                                          Legitimate interests

Marketing emails                                                                                          Consent

Analytics & improvements                                                                      Legitimate interests

Legal obligations (tax, accounting)                                                     Legal requirement 

5. Sharing Your Information

We do not sell personal data. We may share information with:

A. Service Providers (Data Processors)

Including but not limited to:

• 123 Reg (website hosting)
• Payment gateways (e.g., Stripe, PayPal)
• Email marketing tools (e.g., Mailchimp, Klaviyo)
• Analytics providers (e.g., Google Analytics)
• Couriers & logistics companies (e.g., Royal Mail, DPD, DHL)
• Accounting software (e.g., Xero, QuickBooks)
   

These providers only receive data needed to perform their services.

B. Legal Requirements

We may disclose information if required by law or to protect legal rights.

6. Data Retention

We keep data only as long as necessary for the purposes outlined above.

Data Type:                                                                                                    Retention Period:

Order information                                                                                   6 years (accounting/tax laws)

Customer communications                                                                3 years

Email marketing data                                                                             Until you unsubscribe

Analytics data                                                                                             26 months (Google Analytics default) 

After this, data is securely deleted or anonymised.

7. Your Rights (UK GDPR)

You have the right to:

• Access your personal data (“Subject Access Request”)
• Request correction of inaccurate data
• Request deletion (“Right to be Forgotten
• Withdraw consent (e.g., marketing)
• Object to processing
• Request restriction of processing
• Data portability
• Make a complaint to the ICO

8. Marketing Communications

If you opt-in, we may send marketing about:

• New products
• Promotions
• Brand updates
   

You can unsubscribe at any time by:

• Clicking “unsubscribe” in emails

9. Cookies

We use cookies for:

• Essential site functions
• Basket & checkout functionality
• Analytics & performance
• Marketing (only with consent)

You can control cookies via:

• Browser settings
• Cookie banners (if enabled)

10. Protecting Your Data

We implement technical and organisational measures including:

• SSL encrypted checkout
• Secure hosting via 123 Reg
• Restricted access to personal data
• Staff confidentiality safeguards
• Password and access control policies

11. Changes to This Policy

We may update this policy from time to time. Any changes will be posted with a revised “Last Updated” UK date.

Last Updated: 12/01/2025