Privacy Policy

1. Who We Are

Scandi Socks ("we", "us", "our") operates the e-commerce store at https://www.scandisocks.co.uk. We are the data controller responsible for your personal data under the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

For any privacy-related enquiries or to exercise your statutory data rights, contact us directly at scandisocksuk@gmail.com.

2. What Data We Collect

When you visit or make a purchase from our store, we collect the following types of information:

• Order & Delivery Information: Full name, billing address, shipping address, email address, phone number, and items purchased.
• Payment Details: Encrypted transaction identifiers tokenised by our payment gateways (Stripe, PayPal, or WooCommerce Payments). We never store or view raw debit or credit card numbers on our servers.
• Customer Support Records: Communications sent through our website contact form or directly via email regarding sizing queries, order tracking, and returns.
• Device & Usage Data: IP address, browser type, operating system, and anonymous interaction metrics collected through essential cookies to maintain site security and basket functionality.

3. Why We Process Your Data

We process your data under the following lawful bases:

• Contractual Necessity: To process payments, assemble your multi-packs, generate Royal Mail shipping labels, and deliver your parcels.
• Legitimate Interests: To detect and prevent fraudulent transactions, troubleshoot website performance, and respond to support messages.
• Legal Obligation: To maintain accurate financial and tax accounting records as mandated by UK law (HMRC).
• Consent: To send email updates or special promotions if you opt in (you can unsubscribe at any time via the link in our emails).

4. Who We Share Data With

We share relevant data strictly with trusted service providers who help us run our operations:

• Postal Couriers: Royal Mail receives your name, delivery address, and phone number (if SMS tracking is selected) to deliver your parcels.
• Payment Gateways: PCI-DSS compliant providers (Stripe / PayPal) to execute secure transactions.
• Hosting & Technical Infrastructure: Cloud hosting providers that store website assets and encrypt database backups.

5. Data Retention

We retain order and transaction records for up to 6 years in accordance with statutory UK tax and accounting compliance obligations. General contact form enquiries are removed after your support query has been successfully resolved.

6. Your UK GDPR Statutory Rights

Under UK data protection law, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Rectification: Request correction of inaccurate or incomplete records.
• Erasure: Request the deletion of your personal data where there is no legal requirement for us to maintain it.
• Restrict or Object: Restrict or object to certain aspects of processing, including direct marketing.
• Data Portability: Obtain your digital records in a structured, machine-readable format.

To exercise any of these rights, email us at scandisocksuk@gmail.com. We reply to all requests within 30 days.

7. Cookies

We use essential cookies required for the WooCommerce shopping basket, session storage, and security tokens. You can control or block cookies through your browser settings, though doing so may affect checkout and cart stability.