Privacy policy

// LEGAL · PRIVACY_POLICY DOC v1.0
[ YOUR DATA · HANDLED PROPERLY ]

PRIVACY
POLICY.

How we collect, use, share, and protect the personal data you give us when you shop with Snagz, sign up for the newsletter, or browse the site. Straight talk, no legalese where we can help it.

CONTROLLER
SNAGZ · UK
FRAMEWORK
UK GDPR · DPA 2018
PLATFORM
SHOPIFY · ENCRYPTED
YOUR RIGHTS
ACCESS · ERASE · OBJECT
01

Who We Are

Snagz is a UK-based fishing apparel brand. We're the data controller responsible for any personal information you share with us through this website (snagz.co.uk) and our related social channels and email communications.

For data protection queries, contact us at privacy@snagz.co.uk.

02

What Data We Collect

We collect different types of personal information depending on how you use the site:

When you place an order

  • Name, billing and shipping address
  • Email address and phone number
  • Payment details (processed by Shopify Payments — we never see or store your full card number)
  • Order history and product preferences

When you sign up for the newsletter

  • Name and email address
  • Marketing preferences and consent records

When you browse the site

  • IP address, device type, browser, and operating system
  • Pages visited, time spent, and how you arrived
  • Cookie data (see section 09)
03

How We Use Your Data

We use the information we collect to:

  • Process and ship your orders, including handling returns and refunds
  • Send order confirmations, shipping notifications, and customer service emails
  • Send marketing emails about new drops, restocks, and exclusive offers (only if you've opted in)
  • Improve the site, our products, and your shopping experience
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations, including tax and accounting requirements
04

Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

  • Contract — to process your order and deliver the gear you've paid for
  • Consent — for marketing emails, optional cookies, and similar opt-ins (you can withdraw at any time)
  • Legal obligation — to keep tax records, comply with consumer law, and respond to lawful authority requests
  • Legitimate interests — to run and improve the business, prevent fraud, and provide customer service, balanced against your rights and expectations
05

Who We Share Your Data With

We don't sell your personal data. We share it only with carefully chosen third parties that help us run the business:

  • Shopify — our e-commerce platform, which hosts the store, processes payments, and stores customer data
  • Payment processors (Shopify Payments, PayPal, Klarna, Apple Pay, Google Pay) — to authorise and capture payments
  • Shipping carriers (Royal Mail, DPD, Evri, international couriers) — to deliver your order
  • Email marketing platform — to send newsletter and transactional emails
  • Analytics providers (Shopify Analytics, Google Analytics) — to understand site usage
  • Professional advisors — accountants, lawyers, and similar where necessary
  • Law enforcement or regulators — where required by law
06

International Transfers

Some of our service providers (notably Shopify, which is headquartered in Canada, and certain analytics tools) may process data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as UK or EU adequacy decisions or standard contractual clauses.

07

How Long We Keep Data

We don't hold onto your data longer than we need to:

  • Order records — 7 years from the order date, to meet HMRC and consumer law requirements
  • Customer accounts — until you ask us to delete them or after 3 years of inactivity
  • Marketing data — until you unsubscribe or withdraw consent
  • Analytics data — typically 14–26 months depending on the tool
  • Customer service messages — 2 years from last contact
08

Your Rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data ("right to be forgotten"), subject to legal retention requirements
  • Restrict how we process your data in certain circumstances
  • Object to processing based on legitimate interests or for direct marketing
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time for processing based on consent
  • Lodge a complaint with the UK's Information Commissioner's Office (ICO) — see section 13

To exercise any of these rights, email privacy@snagz.co.uk. We'll respond within one month.

09

Cookies & Tracking

We use cookies and similar technologies to make the site work, remember your cart, understand site usage, and (with your consent) show relevant ads. Cookies fall into four categories:

  • Essential — required for the site to function (cart, checkout, security). These cannot be turned off.
  • Functional — remember your preferences (language, region, recently viewed items)
  • Analytics — help us understand how people use the site so we can improve it
  • Marketing — used by us and partners to show relevant ads on other sites and measure their effectiveness

You can manage cookie preferences through the cookie banner when you first visit, or by changing your browser settings. Some features of the site won't work properly if essential cookies are blocked.

10

Marketing Emails

We only send marketing emails if you've actively signed up — through the newsletter form, by ticking the marketing opt-in at checkout, or by completing the spin-to-win lottery on the site. Every marketing email contains a one-click unsubscribe link at the foot.

Transactional emails (order confirmations, shipping updates, returns correspondence) are a necessary part of fulfilling your order and don't require separate consent.

11

How We Keep Your Data Safe

The site runs on Shopify, which is PCI DSS Level 1 certified — the highest level of payment-card security. Connections are encrypted with TLS (the padlock in your browser bar), payment data is tokenised, and we never see or store your full card number.

For your part: choose a strong, unique password for your customer account, and don't share it. We'll never ask for your password by email.

12

Children

This site isn't directed at children under 16. We don't knowingly collect data from anyone under 16. If you believe a child has provided personal information to us, contact privacy@snagz.co.uk and we'll delete it.

13

Complaints to the ICO

If you're not happy with how we've handled your data, you can complain to the UK's Information Commissioner's Office. Try us first — we'd like the chance to put things right. ICO contact: ico.org.uk · helpline 0303 123 1113.

14

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The "Effective" date below shows when it was last updated. For significant changes, we'll email customers who have an active account or marketing subscription.

EFFECTIVE
27 MAY 2026
DOCUMENT
PRIVACY_v1.0
CONTACT
PRIVACY@SNAGZ
REPLY
WITHIN 30 DAYS