This Privacy Policy explains how POWONE LTD, operating Powoo and https://powoo.co.uk, collects and uses personal data. POWONE LTD is the data controller for the personal data described in this notice unless another organisation is identified as the controller for a particular service.
Powoo is operated by POWONE LTD (company number 11761974), a UK private limited company.
Registered office: 10 Claremont Road, Folkestone, Kent, United Kingdom, CT20 1DQ. The registered office is not a retail shop or customer returns address.
Email: support@powoo.co.uk
Support phone: +44 1923 231899
1. Personal data we may collect
- Identity and contact data, such as your name, delivery and billing address, email address and telephone number if you provide one.
- Order and transaction data, such as products ordered, order value, refunds, delivery information and payment status. Payment-card details are handled by payment providers rather than intentionally stored in full by us.
- Account data, if you create an account.
- Customer-service data, including messages, complaints, returns and support history.
- Technical and usage data, such as IP address, device/browser information, cookie identifiers, pages viewed and interactions with the Website.
- Marketing preferences and consent records.
- Fraud-prevention and security information where necessary to protect customers and the Website.
2. How we collect data
We collect data directly from you when you browse, order, contact us, create an account or subscribe to marketing. We may also receive data from service providers involved in payments, ecommerce hosting, delivery, fraud prevention, analytics, advertising or customer support, subject to applicable law.
3. Why we use personal data and our lawful bases
| Purpose | Typical lawful basis |
|---|---|
| Process orders, payments, deliveries, returns and customer service | Performance of a contract; steps taken at your request before entering a contract |
| Maintain accounting, tax and compliance records | Legal obligation |
| Prevent fraud, secure the Website, manage disputes and improve our services | Legitimate interests, where those interests are not overridden by your rights; legal obligation where applicable |
| Send service messages about your order or account | Performance of a contract or legitimate interests |
| Send direct marketing | Consent, or another basis permitted by PECR and data-protection law, with an easy opt-out |
| Use non-essential analytics or advertising cookies | Consent where required |
Where we rely on legitimate interests, those interests may include running and protecting our retail business, preventing fraud, improving customer service and understanding how our Website is used. You may object to processing based on legitimate interests in the circumstances described below.
4. Marketing
You can opt out of marketing emails at any time by using the unsubscribe link in the message or contacting us. Opting out of marketing does not stop service messages that are necessary for an order, account, refund, security issue or other transaction.
5. Cookies and similar technologies
We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies should only be used where the required consent has been obtained. You can change your choices through the cookie-preference controls available on the Website.
6. Who we may share data with
We may share personal data only as reasonably necessary with categories of recipients such as:
- our ecommerce platform and website-hosting providers, including Shopify;
- payment processors and financial institutions;
- delivery, warehousing and fulfilment providers;
- IT, security, communications, customer-service and fraud-prevention providers;
- analytics and advertising providers, subject to consent and other legal requirements;
- professional advisers such as accountants, insurers and legal advisers;
- regulators, courts, law-enforcement agencies or other authorities where disclosure is required or permitted by law; and
- a buyer or successor if our business or relevant assets are sold or reorganised, subject to appropriate safeguards.
We do not sell personal data for money.
7. International transfers
Some service providers may process personal data outside the United Kingdom. Where UK data-protection law treats a transfer as restricted, we will use a lawful transfer mechanism where required, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved EU Standard Contractual Clauses, or another legally permitted safeguard.
8. How long we keep data
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting, fraud-prevention, warranty and dispute-resolution requirements. Transaction and accounting records may need to be kept for several years, commonly up to six years or longer where law or a live dispute requires it. Consent and suppression records may be retained as necessary to respect your marketing choices.
9. Your UK data-protection rights
Depending on the circumstances, you may have rights to request access to your personal data, correction, erasure, restriction of processing, data portability and to object to certain processing. Where processing is based on consent, you can withdraw consent at any time without affecting earlier lawful processing.
Your right to object: You have the right to object to direct marketing at any time. You may also object to processing based on legitimate interests, although we may continue if we have compelling legitimate grounds or need the data for legal claims.
To exercise a right, email support@powoo.co.uk. We may need to verify your identity before acting on a request.
10. Complaints to the ICO
If you have concerns about how we use personal data, please contact us first so we can try to resolve them. You also have the right to complain to the UK Information Commissioner’s Office (ICO). Information about making a complaint is available at ico.org.uk.
11. Automated tools
We or our service providers may use automated tools for fraud, security or risk screening. We do not intend to make solely automated decisions that produce legal or similarly significant effects on you unless permitted by law and appropriate safeguards are provided.
12. Children
The Website is intended for a general retail audience and is not designed to knowingly collect personal data from children who are not able to enter into a purchase contract. If you believe a child has provided personal data inappropriately, contact us.
13. Security
We use reasonable technical and organisational measures designed to protect personal data. No internet service can guarantee absolute security, so please use strong passwords and contact us promptly if you suspect unauthorised activity.
14. Changes to this notice
We may update this notice when our practices, service providers or legal obligations change. The current version will be posted on this page with an updated date.