Privacy policy

Last updated: 2 September 2025

Plain-English Summary

Privacy policies usually sound like they were written by robot lawyers. Not here. Here’s the quick, human version:

We don’t sell your data. Ever. We use it to get your order to you, keep in touch about things you actually care about, and make sure our ads don’t end up showing hose connectors to accountants in Peru.

Who helps us? Shopify runs our store, Royal Mail delivers, Klaviyo powers our emails, and we use Google, Meta (Facebook/Instagram), TikTok, and Microsoft Ads to reach gardeners like you.

Cookies = digital biscuits. Some are essential (like remembering your cart). Others help us improve the site or show you ads that make sense. You get to pick which ones you accept.

Your rights. You can ask what data we have, fix it, delete it, or tell us to stop marketing to you. Just email hello@qwickhose.co.uk.

Kids. Our site is for adults (18+). If you’re under 18, rope in mum or dad.

Complaints. Not happy? Tell us first. If we can’t sort it, the ICO is the UK’s referee.

 

That’s the short version. The serious, lawyer-pleasing detail is below.

 

Full Privacy Policy

Who We Are

This website (www.qwickhose.co.uk) is operated by Qwickhose Limited, a company registered in England and Wales (company no. 5087893).
Registered office: The Barn (Unit 3), Manor Farm Office Village, Flexford Road, North Baddesley, SO52 9DF.

For any privacy queries, contact us at hello@qwickhose.co.uk.


We are the data controller of your personal information. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

EEA targeting: We primarily serve UK customers and do not actively target EEA residents. If this changes, we’ll update this policy and our compliance arrangements.

 

What Data We Collect

Depending on how you use our site, we may collect:

  • Contact details (name, address, email, phone).
  • Order information and transaction history.
  • Account login details (if you create one).
  • Payment details (processed securely by Shopify Payments – we don’t see or store full card data).
  • Customer service communications.
  • Device and usage data (IP, browser type, site activity).
  • Marketing preferences.
  • Cookies and similar tracking technologies (see section on Cookies).

 

Where we get your data:

  • Directly from you – when you order, sign up, or contact us.
  • Automatically from your device – through cookies and similar technologies.
  • From partners – e.g. analytics and advertising platforms that give us aggregated insights, and review providers when you leave a review.
  • Events and trade shows – if you give us your details in person (for example at an exhibition), we’ll use them to follow up on your enquiry. You can opt out at any time.

We do not knowingly collect data from anyone under 18 years old. Our site and services are not directed to children under 18. If you believe a child has provided us with personal data, contact us and we’ll delete it.

 

How We Use Your Data (and Lawful Bases)

Purpose

Lawful Basis

Processing and delivering your orders

Contract

Providing account access and updates

Contract / Legitimate Interest

Customer service and support

Legitimate Interest

Email marketing (via Klaviyo)

Consent / Soft opt-in (PECR)

Analytics and site improvements (Shopify Analytics, GA4)

Consent (via cookie banner)

Personalised advertising (Google, Meta, TikTok, Microsoft Ads)

Consent (via cookie banner)

Reviews (Stamped.io, Trustpilot direct)

Legitimate Interest / Consent

Legal, tax and accounting compliance

Legal Obligation

Fraud prevention and security

Legitimate Interest / Legal Obligation

 

Marketing communications: We send marketing emails with your consent. You can withdraw consent at any time using the unsubscribe link or by emailing hello@qwickhose.co.uk.

If you’re an existing customer: we may email you about similar products under the soft opt-in rule in PECR. You can opt out of these messages at any time. We comply with the Privacy and Electronic Communications Regulations 2003 (PECR) when sending marketing.

Profiling for marketing: We may segment or tailor marketing based on your activity and preferences. You can object at any time by emailing hello@qwickhose.co.uk or by turning off marketing cookies in our banner.

Legitimate interests: Where we rely on Legitimate Interests (for example, customer service or security), we’ve carried out a balancing test to ensure your interests and rights are protected. You can object to processing based on legitimate interests at any time—email hello@qwickhose.co.uk.

 

How Long We Keep Your Data

  • Orders & invoices: 6 years (legal/tax obligations).
  • Customer service messages: 24 months after last interaction.
  • Marketing profiles (Klaviyo): until you unsubscribe, or after 24 months of inactivity.
  • Analytics data is retained according to each provider’s default settings and may be held in aggregated or de-identified form beyond that for trend reporting.
  • We delete or anonymise data once it’s no longer needed.
  • Marketing suppression list (records of opt-out): kept indefinitely to honour your choice not to receive marketing.
  • Fraud/risk logs: up to 24 months (longer if needed to investigate incidents).
  • Legal claims: we may retain relevant records for up to 6 years after the end of our relationship to establish, exercise or defend legal claims.
  • Account data: while your account is active, then 24 months after your last activity or request to close it.

 

 

Who We Share Your Data With

We share personal data with trusted partners who help us run Qwickhose. Some act as our processors (they follow our instructions), while others act as independent controllers (for example, major advertising and review platforms) with their own privacy responsibilities.

 

Third Party

Purpose

Role

Privacy Policy

Shopify

E-commerce platform, hosting, analytics, fraud prevention

Processor

Shopify Privacy

Shopify Payments (inc. Apple Pay, Google Pay)

Secure payment processing

Processor

Shopify Payments Privacy

Royal Mail (Click & Drop)

Shipping and delivery

Processor

Royal Mail Privacy

Klaviyo

Email marketing and analytics

Processor

Klaviyo Privacy

Google Analytics 4 & Tag Manager

Site analytics

Independent controller

Google Privacy

Google Ads

Advertising and retargeting

Independent controller

Google Privacy

Microsoft Advertising

Advertising and retargeting

Independent controller

Microsoft Privacy

Meta (Facebook & Instagram)

Advertising and retargeting

Independent controller

Meta Privacy

TikTok Ads

Advertising and retargeting

Independent controller

TikTok Privacy

Judge.me

Reviews

Processor

Judge.me Privacy

Trustpilot

Reviews (posted directly by you, no data shared by us)

Independent controller

Trustpilot Privacy

Customer service platforms (future)

Helpdesk/ticketing (to be updated when selected)

Processor

N/A

 

Note: Shopify primarily acts as our processor. For certain activities needed to provide and improve the Shopify platform (for example aggregated analytics and anti-fraud), Shopify may act as an independent controller. See the Shopify Privacy Notice for details.

Legal requirements: We may disclose personal data where required to comply with law, regulation, a court order or lawful request from a public authority, or to establish, exercise or defend legal claims.

Marketplace orders: If you buy via platforms like TikTok Shop or Amazon, those platforms act as independent controllers and process your data under their own privacy policies.

Business changes: If we undergo a reorganisation, merger, or sale, we may transfer personal data to the relevant third party as part of the transaction. The new owner will use your data only for the same purposes set out in this policy.

 

International Transfers

Some partners (including Shopify, Klaviyo, Google, Meta, TikTok) process data outside the UK/EEA. Where this happens, we rely on:

  • Adequacy decisions (where recognised by the UK), or
  • Standard Contractual Clauses (SCCs) with UK addendum to safeguard your rights.

These safeguards ensure your rights travel with your data. Copies are available on request.

 

Cookies and Tracking

We use cookies and similar technologies for:

  • Strictly necessary: site operation, checkout, fraud prevention (Shopify core cookies).
  • Analytics: site usage and performance (Shopify Analytics, Google Analytics).
  • Marketing: advertising and retargeting (Meta Pixel, TikTok Pixel, Google Ads, Microsoft Ads, Klaviyo).
  • Functional: reviews, promotions, site preferences (Stamped.io, Klaviyo).

 

Non-essential cookies are only set after you consent via our cookie banner. You can Accept, Decline, or Manage preferences at any time. You can also block or delete cookies in your browser settings. If you decline cookies, some features may not work as intended.

You can revisit your choices anytime via “Manage preferences” in our cookie banner (link in the site footer).

 

Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

  • Be informed about how we use your data.
  • Access your data.
  • Correct inaccurate data.
  • Request erasure (“right to be forgotten”).
  • Restrict processing.
  • Data portability.
  • Object to processing (including direct marketing).
  • Withdraw consent (e.g. for email marketing or advertising cookies).

 

To exercise your rights, email us at hello@qwickhose.co.uk. We will respond within one month.

Access requests are usually free. We may charge a reasonable fee or refuse a request if it is manifestly unfounded or excessive. We may also take up to two additional months to respond if your request is complex; if so, we’ll let you know within one month.

Identity verification: We may ask you for information to confirm your identity before we act on your request. This helps us keep your data secure.



If you’re unhappy, you can also complain to the Information Commissioner’s Office (ICO):
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
www.ico.org.uk

 

Links to Other Websites

Our site may link to other websites or services. Their privacy practices are their own, so please read their privacy policies. We aren’t responsible for how they handle your data.

 

Security

We use appropriate technical and organisational measures to protect your data, including secure hosting, encryption in transit, access controls, multi-factor authentication for admin access, and regular reviews. No system is 100% secure, but we minimise risk and respond quickly to issues.

 

Automated Decision-Making

We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

 

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted here with a revised “last updated” date.