Last updated: [insert date]

Wye Valley Pools (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal data we collect, how we use it, and your rights regarding that data, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Wye Valley Pools, Herefordshire, United Kingdom.
Email: wyevalleypools@outlook.com
Phone: 07904 898269

2. What Personal Data We Collect

We may collect and process the following data when you use our website or place an order:

• Contact details: name, email address, phone number, delivery and billing address
• Order information: products purchased, order value, order history
• Payment information: processed securely by our payment provider — we do not store full card details on our servers
• Account information: if you create an account, login details and saved preferences (e.g. wishlist)
• Communications: enquiries sent via email, contact forms, or WhatsApp
• Technical data: IP address, browser type, device information, collected automatically via cookies (see Section 6)

3. How We Use Your Data

We use your personal data to:

• Process and fulfil your orders, including arranging delivery
• Communicate with you about your order, enquiries, or quote requests
• Provide customer support and after-sales service
• Send marketing communications, where you have opted in (you can unsubscribe at any time)
• Improve our website and services
• Comply with legal and regulatory obligations (e.g. tax records)

4. Legal Basis for Processing

We process your data under the following legal bases:

• Contract: to fulfil an order or provide a service you’ve requested
• Consent: for marketing communications, which you can withdraw at any time
• Legitimate interest: to improve our services and prevent fraud
• Legal obligation: to meet accounting, tax, and consumer protection requirements

5. Sharing Your Data

We do not sell your personal data. We may share it with:

• Delivery/courier partners, to fulfil your order
• Payment processors, to handle transactions securely
• IT and website service providers, who support our systems under data processing agreements
• Regulatory or legal authorities, where required by law

6. Cookies

Our website uses cookies to improve your browsing experience, remember items in your basket, and understand how visitors use the site. You can control or disable cookies through your browser settings. Some site features may not function correctly if cookies are disabled.

7. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy, or as required by law (e.g. financial records are typically retained for 6 years for tax purposes).

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (“right to be forgotten”), where applicable
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Withdraw consent to marketing at any time

To exercise any of these rights, contact us at wyevalleypools@outlook.com.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

10. Complaints

If you have concerns about how we handle your data, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

11. Changes to This Policy

We may update this policy from time to time. The “last updated” date at the top reflects the most recent revision.

12. Contact Us

Wye Valley Pools
Herefordshire, United Kingdom
Email: wyevalleypools@outlook.com
Phone: 07904 898269