Data Protection

Our commitment

WobbleWorks complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We treat your personal information with care and only use it for the reasons described in our Privacy Policy.

Legal basis for processing

• Contract: processing orders and delivering products you've bought.
• Legitimate interest: replying to your messages, moderating reviews, basic analytics.
• Legal obligation: keeping records for tax and consumer-rights purposes.

How we store data

Order and customer data is stored on Shopify's secure infrastructure. Reviews and contact submissions are stored on our managed backend with encryption in transit (HTTPS) and at rest. Access is restricted to the shop owner.

How long we keep it

• Order records: 7 years (HMRC requirement).
• Contact form messages: 24 months, then deleted.
• Reviews: kept while published; deleted on request.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it ("right to be forgotten"). We'll respond within 30 days. If you're unhappy with our response, you can complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.

Children

Our products are designed for children, but our website and account features are intended for use by adults (parents and guardians). We don't knowingly collect personal data from children under 13.

Contact us

For any data-protection request, reach out via the contact form.