1. Data Controller

Whetherday Supplies Limited
Millfield Business Park,
Banbury Lane, Pattishall,
Towcester, Northamptonshire,
NN12 8FB, United Kingdom

Email: [email protected]
We act as the Data Controller for the personal data you provide to us.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity & Contact Data

• Name
• Email address
• Phone number (if provided)
• Postal address

Demographic Data

• Postcode
• Preferences and interests (if provided)

Technical & Usage Data

• IP address
• Browser type and version
• Cookies and similar technologies
• Pages visited, time spent, and other analytical data

Marketing & Communications Data

• Your preferences for receiving marketing communications
• Responses to surveys or promotions

3. Legal Bases for Processing (GDPR Article 6)

We process your personal data on the following legal bases:

a) Contractual Necessity

To process orders, deliver products, manage payments, and provide customer support.

b) Legitimate Interests

To improve our website, understand customer behaviour, run analytics, and conduct limited marketing activities where our interests do not override your rights.

c) Consent

For:

• Direct marketing emails (if you opt in)
• Non-essential cookies
  You may withdraw consent at any time.

d) Legal Obligation

For meeting UK tax, accounting, and regulatory requirements.

4. How We Use Your Personal Data

We use the information we collect for the following purposes:

• Processing orders and internal record keeping
• Improving our products, services, and website functionality
• Sending promotional emails or offers if you have consented
• Contacting you for market research purposes via email, phone, mail, or other agreed channels
• Customising the website according to your preferences
• Ensuring website security and preventing fraud

We will never use your personal data for automated decision-making that produces legal or similarly significant effects.

5. Cookies and Tracking Technologies

We use cookies to:

• Analyse website traffic
• Improve user experience
• Remember user preferences

We use both essential and non-essential cookies.
You may accept or decline cookies at any time through your browser settings.

A full Cookie Policy can be created if needed.

6. Data Sharing and Third Parties

We will not sell, distribute, or lease your personal information to third parties unless:

• You have given explicit consent;
• It is required to fulfil your order (e.g., courier or payment processor);
• Required by law or regulatory authorities.

All third parties are contractually obligated to process your data securely and only in accordance with GDPR.

7. International Data Transfers

If any third-party services we use transfer your data outside the UK or EEA, such transfers will be protected by:

• UK Adequacy Regulations, or
• Standard Contractual Clauses (SCCs), or
• Other legally compliant safeguards.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations.

Typical retention periods:

• Order information: 6 years (for tax and accounting obligations)
• Marketing data: Until you withdraw consent
• Cookies: As specified in your browser or cookie banner

After retention periods expire, data is securely deleted or anonymised.

9. Your GDPR Rights

You have the following rights under the UK-GDPR:

Right to Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure (“Right to be Forgotten”)

Request deletion of your personal data where legally applicable.

Right to Restrict Processing

Request that we limit how we use your personal data.

Right to Data Portability

Receive your data in a structured, machine-readable format and transfer it to another controller.

Right to Object

Object to:

• Direct marketing
• Processing based on legitimate interests

Right to Withdraw Consent

Withdraw consent for processing at any time.

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you can complain to:

Information Commissioner’s Office (ICO)
www.ico.org.uk

We encourage you to contact us first so we can try to resolve your concerns.

10. Security Measures

We implement appropriate technical and organisational measures to protect your personal data from:

• Unauthorised access
• Disclosure
• Alteration
• Loss or destruction

These include secure servers, access controls, and encryption where appropriate.

11. Controlling Your Personal Information

You can control your data by:

• Opting out of marketing at any time
• Adjusting cookie settings in your browser
• Contacting us to update or delete your information

If you believe information we hold is incorrect or incomplete, please contact us using the details above.

12. Changes to This Privacy Policy

We may update this policy from time to time.
Any changes will be posted on this page with an updated “Last updated” date.
You should check this page periodically to stay informed.

13. Contact Us

For questions, concerns, or data rights requests, contact:

Whetherday Supplies Limited
Email: [email protected]
Postal Address:
Millfield Business Park,
Banbury Lane, Pattishall,
Towcester, Northamptonshire,
NN12 8FB, United Kingdom