Privacy Policy

1. Who We Are

Safety-Shoes.co.uk is a trading name of Abacus Repro Limited, a company registered in England and Wales under company number 04971774, with its registered office at St Marys House, Netherhampton, Salisbury, SP2 8PU. We are the data controller responsible for your personal data under UK GDPR and the Data Protection Act 2018. Questions about this policy? Email privacy@safety-shoes.co.uk.

2. What Data We Collect

When you use our website, we may collect:

Information you provide: name, email address, phone number, delivery address, company name and VAT number (for business customers), and payment details (processed securely by Stripe — we do not store your card details).

Information collected automatically: IP address, browser type, pages visited, time on site, and referring website. We use cookies and similar technologies to collect this data, subject to your consent for non-essential cookies.

Marketing preferences: if you subscribe to our newsletter or opt in to marketing communications, we record your consent and email address.

3. How We Use Your Data

We use your personal data to process and fulfil your orders (including sharing delivery details with our supply and logistics partners); to communicate with you about your orders (confirmations, dispatch notifications, delivery updates); to send marketing communications where you have opted in (you can unsubscribe at any time); to improve our website and services through aggregated analytics; and to comply with our legal and regulatory obligations.

4. Legal Basis for Processing

We process your data under the following legal bases as defined by UK GDPR: Contract performance — to fulfil your order. Legitimate interest — to improve our services and send relevant communications to existing customers. Consent — for marketing communications to non-customers and for non-essential cookies. Legal obligation — to comply with tax, accounting and consumer law requirements.

5. Who We Share Data With

We share your data with our supply and fulfilment partners (Portwest, Base Protection, Regatta Professional, Gardiner Bros) to process and deliver your orders; Stripe for payment processing; DPD and other courier services for delivery and tracking; Resend and similar providers for transactional and marketing email; Google Analytics 4 for anonymised usage analytics. We never sell your personal data to third parties.

6. Marketing Communications

We will only send you marketing emails if you have explicitly opted in, either by subscribing to our newsletter, ticking the marketing consent checkbox at checkout, or otherwise giving clear consent. Every marketing email includes an unsubscribe link. We may send existing customers information about similar products under the PECR soft opt-in rules, with an easy opt-out in every message.

7. How Long We Keep Data

Order and transactional records are kept for 6 years to comply with HMRC requirements. Marketing preferences are kept until you unsubscribe or request deletion. Analytics data is retained in aggregated form for up to 26 months. Account data is kept for as long as your account is active and for 12 months thereafter in case of reactivation.

8. Your Rights

Under UK GDPR you have the right to: access your data; correct inaccurate data; request erasure (subject to our legal retention obligations); restrict processing; object to processing; data portability; and withdraw consent at any time. To exercise any of these rights, email privacy@safety-shoes.co.uk. We will respond within one month.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data, including encrypted connections (HTTPS/TLS), PCI-DSS compliant payment processing via Stripe, access controls on admin systems, and regular software updates. No system is completely secure, and you share information at your own risk.

10. International Transfers

Some of our service providers (for example Stripe, Google Analytics) may process data outside the UK. Where this happens we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or UK adequacy decisions, as required under UK GDPR.

11. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

12. Changes to This Policy

We may update this privacy policy from time to time. The “Last updated” date above shows when it was most recently changed. Significant changes will be notified via email or a prominent notice on our website.