Privacy Policy

This policy explains how Whip Supply Hub ("we", "us") handles personal data when you use this website or buy from us. We are the data controller for that data.

Placeholder to confirm before launch: company registration number, registered office, VAT number and ICO registration number.

What we collect

Data	Why	Lawful basis
Name, email, phone, delivery and billing address	To take payment, deliver your order and handle queries	Performance of a contract
Order history and preferences	To provide support, process returns and keep accounts	Contract / legal obligation
Payment confirmation (never full card details)	To confirm your order is paid	Contract
Age confirmation	To meet our obligation not to supply under-18s	Legal obligation / legitimate interests
Marketing email address	To send offers and restock alerts you asked for	Consent
Site analytics and device data	To understand and improve the site	Consent (via cookie banner)

What we never see

We never receive or store your full card details. Payments are handled by our PCI-DSS compliant payment provider on their own infrastructure. We receive only a confirmation that payment succeeded, along with the last four digits and card type for reconciliation.

Who we share data with

We share only what is necessary, only with processors acting on our instructions:

• Payment providers — to take and refund payments.
• Couriers — your name, address and phone number, to deliver your order.
• Email and support tools — to send order updates and answer enquiries.
• Analytics providers — only if you consent to analytics cookies.
• Professional advisers and authorities — where we are legally required to disclose.

We do not sell your personal data, and we never will.

International transfers

Some of our processors operate outside the UK. Where data is transferred internationally, we rely on UK adequacy regulations or on the International Data Transfer Agreement / Addendum to Standard Contractual Clauses, together with appropriate technical safeguards.

How long we keep it

• Order and transaction records — 6 years after the end of the tax year, to meet HMRC requirements.
• Account data — until you close your account, then deleted within 30 days.
• Marketing consent — until you unsubscribe, then suppressed so we do not contact you again.
• Support correspondence — 2 years from the last contact.
• Analytics — up to 14 months.

Your rights

Under UK GDPR you have the right to:

• Be told what data we hold about you, and get a copy of it;
• Have inaccurate data corrected;
• Have your data erased where we have no continuing lawful reason to keep it;
• Restrict or object to how we process it, including direct marketing;
• Receive your data in a portable format;
• Withdraw consent at any time, without affecting processing already carried out.

To exercise any of these, email support@whipsupplyhub.com. We respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113.

Security

This site is served over HTTPS. Access to personal data is restricted to staff who need it, protected by individual accounts and multi-factor authentication. We review our processors' security practices before appointing them.

Children

Our products are sold to over-18s only and this site is not directed at children. We do not knowingly collect data from anyone under 18. If you believe we hold data about a child, contact us and we will delete it.

Changes to this policy

We update this policy when our practices change. The date at the top of this page shows the last revision. Material changes affecting your rights will be notified by email where we hold your address.