Privacy Policy

UrbanGooods is the data controller responsible for your personal information collected through our website and services.

We collect and process the following categories of personal data when you interact with our website and services:

• Identity Data: Name, username, title, date of birth
• Contact Data: Email address, billing address, delivery address, telephone number
• Order History: Purchase details, product preferences, order tracking information
• Financial Data: Payment card details (processed securely via third-party payment gateways)
• Technical Data: IP address, browser type, device information, cookies
• Marketing Preferences: Your communication preferences and consent records

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following legal grounds:

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason compatible with the original purpose.

We share your personal data with trusted third-party service providers who help us operate our business. These partners are carefully selected and contractually obligated to protect your data.

We share delivery information with courier partners including Royal Mail, DPD, and Evri to fulfill your orders and provide tracking updates.

Payment data is processed securely through Shopify Payments, PayPal, Klarna, and Stripe. We do not store complete payment card details on our servers.

We use analytics services to understand how customers use our website and improve your shopping experience. This may include Google Analytics and similar tools.

Some of our service providers are based outside the United Kingdom. When we transfer your personal data internationally, we ensure appropriate safeguards are in place to protect your information.

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes SSL encryption, secure servers, regular security audits, and staff training on data protection.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Financial transaction records are retained for up to 6 years in accordance with UK tax laws (HMRC requirements). Marketing data is retained until you withdraw consent or request deletion.

Under UK data protection law, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data in certain circumstances
• Right to Restriction: Request that we limit how we use your data
• Right to Object: Object to direct marketing and certain types of processing
• Right to Data Portability: Receive your data in a structured, commonly used format

To exercise any of these rights, please contact us at the email address provided in Section 1. We will respond to your request within one month.

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and personalise content. You can control cookie preferences through your browser settings. For detailed information, please see our separate Cookie Policy.

If you have concerns about how we handle your personal data, please contact us first. If you remain unsatisfied, you have the right to lodge a complaint with the UK's supervisory authority:

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.