PRIVACY
Privacy Policy
This policy explains what personal information GBG Wholesale Hub collects, why we collect it, who we share it with, and the rights you have over it under UK data protection law.
WHAT WE COLLECT
The information we hold
We only collect what we need to sell to you and support you:
- Order details - your name, email, delivery address, phone number and what you bought.
- Account details, if you create an account - your name, email and saved addresses.
- Messages you send us through the contact form, the waitlist form or WhatsApp.
- Marketing preferences - whether you've asked to hear about restocks and offers.
- Technical and usage data collected by our website platform, such as your device type, approximate location and which pages you viewed.
- We never see or store your full card details. Payments are handled entirely by Shopify's payment providers.
WHY WE USE IT
How your information is used, and our lawful basis
We use your information to fulfil your order, to provide support, to meet our legal obligations, and - only where you've agreed - to send you marketing.
- To process and deliver your order, and to handle returns and refunds. Lawful basis: performance of our contract with you.
- To answer your questions and provide customer support. Lawful basis: performance of our contract, or our legitimate interest in helping you.
- To send restock alerts, offers and community updates. Lawful basis: your consent, which you can withdraw at any time.
- To keep records required for tax and accounting. Lawful basis: our legal obligation.
- To protect against fraud and keep the site secure. Lawful basis: our legitimate interest in running the business safely.
- We do not sell your personal information to anyone, and we never will.
HOW LONG
How long we keep it
Order and transaction records are kept for six years, because tax law requires it. Account details are kept for as long as your account is open, plus a short period afterwards. Marketing contact details are kept until you unsubscribe. Support messages are kept for up to two years so we have context if you come back to us.
YOUR RIGHTS
What you can ask us to do
Under UK GDPR you have the right to:
- Ask for a copy of the personal information we hold about you.
- Ask us to correct anything that's wrong or incomplete.
- Ask us to delete your information, where we're not legally required to keep it.
- Ask us to restrict or stop processing it, including objecting to marketing at any time.
- Ask for your information in a portable format.
- Withdraw consent at any time, without affecting anything done before you withdrew it.
- Complain to the Information Commissioner's Office (ico.org.uk) if you think we've handled your data badly. We'd appreciate the chance to put it right first.