Privacy Policy

Last updated: September 29, 2026

This Privacy Policy describes how WHITE & HAYWARD LETTINGS LIMITED ("we", "us", or "our") collects, uses, stores, and protects your personal information when you visit, use our services, or make a purchase from wqacf.shop (the "Website").

This Privacy Policy is intended to provide information to customers and visitors, including those located in Germany and Austria, about how we process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation ("GDPR").

1. Data Controller

The controller responsible for the processing of personal data through this Website is:

Company Name: WHITE & HAYWARD LETTINGS LIMITED
Company Registration Number: 5157980
Registered Address: 25 Hill Road, Theydon Bois, Epping, Essex, United Kingdom, CM16 7LX
Email: support@wqacf.shop
Telephone: +44 1945 582658
Website: wqacf.shop

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us using the details above.

2. Personal Information We Collect

Depending on how you interact with our Website and services, we may collect the following categories of personal information:

Information You Provide Directly

When you place an order, contact us, or otherwise use our services, you may provide information such as:

• Name

• Billing address

• Shipping address

• Email address

• Telephone number

• Order and purchase information

• Customer service communications

• Information you provide when contacting us

• Payment-related information necessary to process or administer your order

Where Cash on Delivery is available, we may also process information necessary to arrange and administer the COD transaction and delivery.

Information Collected Automatically

When you visit our Website, certain information may be collected automatically, including:

• IP address

• Browser type

• Device information

• Operating system

• Website activity

• Pages viewed

• Referring URLs

• Date and time of access

• Cookie and similar technology information

The precise information collected depends on your device, browser settings, consent choices, and the technologies used on our Website.

3. How We Use Personal Information

We may use personal information for purposes including:

• Processing and managing orders

• Arranging shipping and delivery

• Administering Cash on Delivery orders

• Providing customer support

• Handling returns, refunds, cancellations, and complaints

• Communicating with you about your order

• Maintaining and improving our Website and services

• Preventing fraud, misuse, and security incidents

• Complying with legal and regulatory obligations

• Maintaining appropriate business and transaction records

• Providing marketing communications where permitted by law and, where required, with your consent

• Measuring and improving the performance of our Website, subject to applicable consent requirements

We do not use personal information for purposes that are incompatible with the purposes for which it was collected unless permitted or required by applicable law.

4. Legal Bases for Processing

Where the GDPR applies, we process personal data only where we have an appropriate legal basis.

Depending on the circumstances, our legal bases may include:

Performance of a Contract

We process personal data where necessary to:

• Process your order

• Arrange delivery

• Manage Cash on Delivery transactions

• Provide customer service relating to your purchase

• Handle returns, refunds, and cancellations

Legal Obligations

We may process personal data where necessary to comply with applicable legal obligations, including accounting, tax, consumer protection, and other regulatory requirements.

Legitimate Interests

We may process personal data where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

Such interests may include:

• Protecting our Website and services

• Preventing fraud and misuse

• Improving our services

• Managing business operations

• Establishing, exercising, or defending legal claims

Consent

Where required by applicable law, we rely on your consent for certain processing activities, including certain cookies, analytics technologies, and electronic marketing communications.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Cookies and Similar Technologies

Our Website may use cookies, pixels, local storage, and similar technologies to operate the Website and provide its functionality.

Depending on your consent choices and applicable law, these technologies may also be used for:

• Remembering preferences

• Maintaining Website functionality

• Understanding Website usage

• Measuring performance

• Analytics

• Advertising and marketing

Where legally required, non-essential cookies and similar technologies will be used only after obtaining the appropriate consent.

You may manage your cookie preferences through the consent tools provided on our Website where available. You may also configure your browser to block or delete cookies, although doing so may affect certain Website functionality.

6. Shopify

Our online store is hosted using Shopify. Shopify provides the e-commerce platform that enables us to offer products and services through our Website.

In connection with providing the platform and related services, Shopify may process personal information relating to customers and Website visitors.

Shopify's processing of personal information is governed by its own applicable privacy terms and policies.

7. How We Share Personal Information

We may share personal information with service providers and other recipients where reasonably necessary to operate our business and provide our services.

These may include:

• E-commerce platform providers

• Hosting and technology providers

• Shipping and logistics providers

• Delivery companies and couriers

• Cash on Delivery service providers, where applicable

• Customer service providers

• Analytics providers, subject to applicable consent requirements

• Advertising and marketing service providers, where legally permitted

• Professional advisers, such as accountants, lawyers, and auditors

• Government authorities or regulators where disclosure is required by law

We require service providers to handle personal information appropriately and in accordance with applicable data protection requirements where required.

We may also disclose personal information where necessary to protect our legal rights, investigate fraud or security issues, comply with legal proceedings, or satisfy applicable legal obligations.

8. International Data Transfers

Because we operate an online store and may use service providers located in different countries, your personal data may be processed outside Germany, Austria, or the European Economic Area ("EEA").

Where personal data is transferred internationally and the GDPR requires appropriate safeguards, we take steps designed to ensure that the transfer is made in accordance with applicable data protection law.

Depending on the circumstances, these safeguards may include an adequacy decision, Standard Contractual Clauses, or another legally recognized transfer mechanism.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

• Completing and administering orders

• Providing customer service

• Handling returns and refunds

• Maintaining transaction and accounting records

• Resolving disputes

• Preventing fraud

• Establishing or defending legal claims

• Meeting legal, tax, accounting, and regulatory obligations

The specific retention period may vary depending on the type of information and the applicable legal requirements.

When personal information is no longer required, we will delete, anonymize, or otherwise appropriately dispose of it, subject to applicable law.

10. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the Internet or electronic storage system can be guaranteed to be completely secure.

11. Your Rights Under the GDPR

If the GDPR applies to the processing of your personal data, you may have rights including:

• Right of access – You may request information about the personal data we process about you.

• Right to rectification – You may request correction of inaccurate or incomplete personal data.

• Right to erasure – You may request deletion of your personal data in certain circumstances.

• Right to restriction of processing – You may request that we restrict the processing of your personal data in certain circumstances.

• Right to data portability – You may request certain personal data in a structured, commonly used, machine-readable format where applicable.

• Right to object – You may object to certain processing based on legitimate interests and to processing for direct marketing purposes.

• Right to withdraw consent – Where processing is based on consent, you may withdraw that consent at any time.

• Right to lodge a complaint – You may lodge a complaint with a competent data protection supervisory authority.

These rights may be subject to conditions, limitations, and exceptions under applicable law.

To exercise your rights, please contact us at:

support@wqacf.shop

We may need to verify your identity before processing certain requests.

12. Direct Marketing

Where permitted by law, we may send you marketing communications about products, services, or promotions.

Where consent is legally required, we will send such communications only after obtaining the appropriate consent.

You may unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in the relevant communication or by contacting us at support@wqacf.shop.

Objecting to direct marketing will not prevent us from sending essential transactional communications relating to your orders or customer service requests.

13. Children's Privacy

Our Website and services are not intended for children who are not legally capable of entering into the relevant transactions.

We do not knowingly seek to collect personal information from children contrary to applicable law.

If you believe that a child has provided personal information to us inappropriately, please contact us at support@wqacf.shop so that we can review the matter and take appropriate action.

14. Third-Party Websites and Services

Our Website may contain links to third-party websites, applications, or services.

We are not responsible for the privacy practices of independent third parties. We encourage you to review the privacy notices of third-party websites and services before providing personal information to them.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, services, or legal and regulatory requirements.

When we make changes, we may update the "Last updated" date at the top of this Privacy Policy.

We encourage you to review this Privacy Policy periodically.

16. Complaints

If you have concerns about how we process your personal data, please contact us first at support@wqacf.shop so that we can review your concerns.

Where applicable, you also have the right to lodge a complaint with the data protection supervisory authority responsible for your place of residence, place of work, or the location of an alleged infringement.

17. Contact Us

For questions about this Privacy Policy, your personal information, or your data protection rights, please contact:

WHITE & HAYWARD LETTINGS LIMITED
25 Hill Road
Theydon Bois
Epping
Essex
United Kingdom
CM16 7LX

Company Registration Number: 5157980
Email: support@wqacf.shop
Telephone: +44 1945 582658
Website: wqacf.shop