Privacy policy

Last updated: 9 February 2026

This Privacy Policy describes how Woodera Ltd (“Woodera”, “we”, “us”, or “our”) collects, uses, stores and discloses personal data when you access or use woodera.co.uk (the “Site”), create an account, purchase products, submit enquiries, or otherwise communicate with us (collectively, the “Services”).

This Privacy Policy is intended to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable privacy and electronic communications legislation.

 

1. Data Controller

For the purposes of applicable data protection laws, Woodera Ltd is the data controller of your personal data.

Registered address: 4 Whittle Court, Knowlhill, Milton Keynes, England, MK5 8FT

Email: info@woodera.co.uk

 

2. Personal Data We Collect

The personal data we collect depends on how you interact with the Services.

 

2.1 Personal data provided directly by you

We may collect and process the following categories of personal data when you voluntarily provide them:

  • Identification and contact details (such as name, email address, telephone number, postal address)
  • Enquiry and consultation information submitted via forms or correspondence
  • Account information (including login credentials) where you create an account
  • Order and transaction data (including billing address, delivery address, order details and payment confirmation)
  • Communications with us by email, telephone or other means

Where you do not provide required personal data, we may be unable to provide certain Services.

 

2.2 Personal data collected automatically (Usage Data)

We may automatically collect certain information about your interaction with the Services (“Usage Data”).

This may include IP address, device and browser information, operating system, referring URLs, pages viewed, interactions with the Site, and approximate location data derived from IP address.

Usage Data is collected using cookies, pixels and similar technologies (“Cookies”). Further details are set out in Section 7 (Cookies).

 

2.3 Personal data obtained from third parties

We may receive personal data from third parties acting on our behalf, including:

  • Shopify, which provides our e-commerce platform, checkout functionality and customer accounts
  • Payment processors engaged by Shopify
  • Analytics and advertising providers (such as Google Analytics and Meta)
  • Customer relationship management (CRM) systems used to manage enquiries and customer interactions

Such personal data is processed in accordance with this Privacy Policy.

 

3. Purposes and Legal Bases for Processing

We process personal data only where permitted by law. The purposes and legal bases for processing include:

 

3.1 Provision of Services

To respond to enquiries, process orders and payments, create and manage customer accounts, deliver products or services, and provide customer support.

Legal basis: performance of a contract or steps taken at your request prior to entering into a contract (Article 6(1)(b) UK GDPR).

 

3.2 Telephone communications

Where you provide your telephone number, we may contact you by telephone in connection with an enquiry, expressed interest, purchase, or related follow-up.

Telephone calls are made solely for these purposes, are not recorded, and are limited to a reasonable period following your interaction with us. We do not carry out cold calling. You may request that we cease telephone contact at any time.

Legal basis: legitimate interests (Article 6(1)(f) UK GDPR), namely responding to enquiries and providing relevant information, balanced against your rights and expectations.

 

3.3 Email communications and marketing

We may send you transactional communications relating to your account, enquiries or purchases. We may also send newsletters or marketing communications where permitted by law. You may opt out of marketing communications at any time using the unsubscribe mechanism provided.

Legal basis:

  • Transactional communications: contract or legitimate interests
  • Marketing communications: legitimate interests or consent, as applicable

 

3.4 Analytics, advertising and website improvement

To analyse website usage, measure advertising effectiveness, and improve our Services, including through the use of analytics and advertising technologies.

Legal basis: consent (where required) and legitimate interests (Article 6(1)(f) UK GDPR).

 

3.5 Security and fraud prevention

To protect the Site, our customers and our business from fraud, unauthorised access or misuse.

Legal basis: legitimate interests.

 

4. Disclosure of Personal Data

We may disclose personal data to:

  • Service providers acting on our behalf (including Shopify, payment processors, hosting providers, analytics providers, CRM providers)
  • Advertising and analytics partners, subject to your cookie preferences
  • Legal, regulatory or law enforcement authorities where required by law
  • Professional advisers in connection with legal or compliance matters

We do not sell personal data.

 

5. International Data Transfers

Some of our service providers process personal data outside the United Kingdom. Where personal data is transferred internationally, appropriate safeguards are implemented, including the UK Addendum to the EU Standard Contractual Clauses or adequacy decisions, in accordance with UK GDPR requirements.

 

6. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including:

  • Enquiry data: generally up to 24 months from last interaction
  • Customer and transaction records: up to 6 years to comply with legal and tax obligations
  • Marketing data: until you unsubscribe or become inactive
  • Analytics data: retained in accordance with platform retention settings

 

7. Cookies

Like many websites, we use cookies, pixels and similar technologies (“Cookies”) on our Site.

Cookies are used to operate and improve the Site, remember user preferences, analyse website usage, and support marketing and advertising activities.

Certain Cookies are strictly necessary for the operation of the Site and do not require consent. Other Cookies, including analytics and marketing Cookies, are used only with your consent.

Our Site is powered by Shopify. Further information about Shopify-related cookies is available at:
https://www.shopify.com/legal/cookies

You can manage or withdraw your Cookie preferences at any time using the Cookie banner on the Site or through your browser settings. Disabling Cookies may affect the functionality of the Site.

 

8. Your Rights

Under UK GDPR, you may have the right to:

  • Request access to your personal data
  • Request correction of inaccurate personal data
  • Request erasure of personal data
  • Request restriction of processing
  • Object to processing
  • Withdraw consent (where applicable)
  • Request data portability

You may exercise these rights by contacting us at info@woodera.co.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk.

 

9. Children’s Data

The Services are not intended for use by children, and we do not knowingly collect personal data from children.

 

10. Security

We implement appropriate technical and organisational measures to safeguard personal data. However, no method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

 

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.

 

12. Contact

If you have questions about this Privacy Policy or our data processing practices, please contact:

Email: info@woodera.co.uk
Address: 4 Whittle Court, Knowlhill, Milton Keynes, England, MK5 8FT