Legal

Privacy Policy

How One Click Buy collects and uses personal data under UK GDPR and the Data Protection Act 2018. Written for a UK WooCommerce shop — orders, accounts, cookies and optional newsletter signups.

UK GDPR + DPA 2018Also see our Cookie Policy.

Who we are

One Click Buy operates the website oneclickbuy.co.uk. For data protection purposes the controller is [Your registered business name] of [Your registered business address].

Where required we are registered with the Information Commissioner’s Office (ICO): [Your ICO registration number].

Contact for privacy questions: support@oneclickbuy.co.uk (available 24/7).

What we collect

Depending on how you use the site, we may process:

  • Order and checkout data — name, email, billing/shipping address, phone (if provided), order contents and payment status (payment card details are handled by the payment provider; we do not store full card numbers).
  • Account data — if you register: name, email, password (stored hashed by WordPress), and order history.
  • Newsletter signups — email (and name if you provide it), only when you actively subscribe with consent.
  • Customer support messages — the content of emails you send us.
  • Technical and cookie data — IP address, device/browser type, and cookie identifiers as described in our Cookie Policy.

Why we use your data (lawful bases)

  • Contract — to take and fulfil your order, arrange delivery, handle returns and provide account access.
  • Legal obligation — tax, accounting and consumer-law records.
  • Legitimate interests — securing the site, preventing fraud, improving site performance, and answering enquiries. We balance these against your rights.
  • Consent — newsletter emails and any non-essential cookies/analytics. You can withdraw consent at any time.

WooCommerce orders & accounts

Orders are processed with WooCommerce on WordPress. We use your checkout details to confirm the order, send acknowledgements, fulfil delivery, and provide after-sales support. Account holders can review orders under My account.

Newsletter

If you join our newsletter we only send emails you opted into. Every marketing email includes an unsubscribe link. Signing up is optional and separate from placing an order.

Who we share data with

We share data only where needed to run the store:

  • Payment processors — [Payment processors you use, e.g. Stripe / PayPal] to take payment securely.
  • Delivery partners — name, address and contact details so your order can be delivered.
  • Hosting / email / site tools — infrastructure providers that process data on our instructions.
  • Analytics / marketing tools (only if used, and usually only with consent) — [Analytics or marketing tools you use, e.g. Google Analytics — or None].

We do not sell your personal data.

How long we keep data

Order and invoice records are kept for as long as tax and accounting rules require. Account data stays while your account is open and for a reasonable period afterwards. Newsletter data is kept until you unsubscribe. Support emails are kept only as long as needed to resolve your request and for legitimate follow-up.

Your rights (UK GDPR)

You can ask us to:

  • access your personal data;
  • correct inaccurate data;
  • erase data in certain cases;
  • restrict or object to certain processing;
  • receive data you provided in a portable format;
  • withdraw consent where we rely on consent.

Email support@oneclickbuy.co.uk with “Privacy request” in the subject. You can also complain to the ICO at ico.org.uk.

International transfers

If a provider stores data outside the UK, we use appropriate safeguards required by UK data protection law (such as an adequacy regulation or UK international data transfer agreement), where applicable.

Children

This store is aimed at adults. We do not knowingly collect personal data from children.

Changes

We may update this policy when our practices or the law change. The updated version will be published on this page.

Fill in the yellow placeholders before publish (business name, address, ICO number, processors, analytics). Full list is in pages/INSTALL.md.