Privacy Policy

Last updated: April 2025

The Workers Club Limited (trading as "The Workers Club", "we", "us", "our") is committed to protecting your personal data and respecting your privacy. This policy explains who we are, what data we collect, why we collect it, how we use it, and what rights you have.

This policy applies to data collected through our website at www.theworkersclub.co.uk and any related services.

1. Who We Are

The Workers Club Limited is the data controller responsible for your personal data.

• Company number: 09042222
• Registered address: 58 Chiltern Street, London W1U 7QZ, United Kingdom
• Email: info@theworkersclub.co.uk

We are registered with the Information Commissioner's Office (ICO) as a data controller. If you have any questions about this policy or how we handle your data, please contact us at the email above.

2. What Data We Collect

Depending on how you interact with us, we may collect the following types of personal data:

Identity and contact data

Name, email address, postal address, phone number, and account login details.

Transaction data

Details of purchases made through our site, including order history, billing and delivery addresses, and payment method type. We do not store full card details – these are handled by our payment processors.

Technical data

IP address, browser type and version, device type, pages visited, time and date of visits, referring URLs, and other diagnostic data collected via cookies and analytics tools.

Marketing and communications data

Your preferences for receiving marketing from us, and records of your consent where relevant.

Data you provide directly

Any information you submit via contact forms, survey responses, competition entries, or customer service enquiries.

3. How We Collect Your Data

• Directly from you – when you place an order, create an account, sign up to our emails, or contact us.
• Automatically – via cookies and tracking technologies as you browse our site.
• From third parties – such as payment processors, delivery partners, and analytics providers.

4. How We Use Your Data and Our Lawful Basis

We only process your personal data when we have a lawful basis to do so under UK GDPR.

Purpose	Lawful Basis
Processing and fulfilling your orders, including payment, delivery, and returns	Performance of a contract
Managing your customer account	Performance of a contract
Responding to customer service enquiries and complaints	Performance of a contract / Legitimate interests
Sending you transactional emails (order confirmations, shipping updates)	Performance of a contract
Sending you marketing emails and promotions	Consent (you may withdraw at any time)
Analysing how our website is used to improve performance and user experience	Legitimate interests
Fraud prevention and detection	Legitimate interests / Legal obligation
Complying with tax, accounting, and legal obligations	Legal obligation
Personalising your experience on our site	Legitimate interests / Consent

Legitimate interests: Where we rely on legitimate interests as our lawful basis, we have assessed that our interests are not overridden by your rights and freedoms. You have the right to object to this processing – see Section 8.

5. Who We Share Your Data With

We do not sell your personal data. We may share your data with trusted third parties in the following circumstances:

• Delivery and fulfilment partners – to ship your orders.
• Payment processors – including PayPal and Shopify Payments, to handle transactions securely.
• Email marketing platforms – we use Klaviyo to manage and send marketing communications.
• Analytics providers – including Google Analytics and Meta (Facebook), to understand website performance and advertising effectiveness.
• E-commerce platform – our website is hosted and operated via Shopify, which processes data on our behalf.
• Legal and regulatory authorities – where required by law, court order, or to protect our rights.
• Business transfers – in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

All third parties we work with are required to handle your data securely and in compliance with applicable data protection law.

6. International Data Transfers

Some of our third-party service providers are based outside the UK. Where your data is transferred outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy decisions or Standard Contractual Clauses approved by the ICO.

7. How Long We Keep Your Data

Data Type	Retention Period
Order and transaction records	7 years (to comply with HMRC requirements)
Customer account data	For the duration of your account, plus 2 years after closure
Marketing consent and preferences	Until you unsubscribe, plus 1 year
Website analytics data	26 months
Customer service correspondence	3 years

After the relevant retention period, your data will be securely deleted or anonymised.

8. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access – you can request a copy of the personal data we hold about you.
• Right to rectification – you can ask us to correct inaccurate or incomplete data.
• Right to erasure – you can ask us to delete your data in certain circumstances (the "right to be forgotten").
• Right to restriction of processing – you can ask us to pause processing of your data in certain circumstances.
• Right to data portability – you can request a copy of your data in a structured, commonly used format to transfer to another service.
• Right to object – you can object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent – where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
• Rights related to automated decision-making – we do not carry out solely automated decision-making that produces legal or significant effects on you.

To exercise any of these rights, please contact us at info@theworkersclub.co.uk. We will respond within one month. We may need to verify your identity before processing a request.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113

9. Cookies

Our website uses cookies – small text files stored on your device – to enable essential functionality, analyse traffic, and support marketing. You can manage your cookie preferences via our cookie banner or through your browser settings.

Cookie	Provider	Purpose	Type	Duration
_session_id	Shopify	Stores session information (referrer, landing page, etc.)	Strictly necessary	Session
cart	Shopify	Stores the contents of your shopping cart	Strictly necessary	2 weeks
_secure_session_id	Shopify	Stores session information during checkout	Strictly necessary	Session
storefront_digest	Shopify	Used to determine if a visitor has access to a password-protected store	Strictly necessary	Indefinite
_shopify_visit	Shopify	Records the number of visits to the store	Analytics	30 minutes
_shopify_uniq	Shopify	Counts unique visitors to the store	Analytics	Next day (midnight)
_ga, _ga_*	Google Analytics	Tracks visitor behaviour and site usage to help us improve the website	Analytics	Up to 26 months
_fbp, _fbc	Meta (Facebook)	Used by Meta Pixel to deliver and measure the effectiveness of advertising on Facebook and Instagram	Marketing	90 days
__kla_id	Klaviyo	Identifies returning visitors and supports email personalisation and tracking	Marketing	2 years
PAYPAL_*	PayPal	Supports the PayPal payment process	Strictly necessary	Session

To find out more about cookies and how to manage them, visit allaboutcookies.org or ico.org.uk/your-data-matters/online/cookies.

10. Marketing Communications

We will only send you marketing emails if you have given your consent to receive them. You can unsubscribe at any time by clicking the unsubscribe link in any email we send, or by contacting us at info@theworkersclub.co.uk.

Unsubscribing from marketing will not affect the delivery of transactional emails related to your orders.

11. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Payment data is handled by our payment processors using industry-standard SSL encryption. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please get in touch:

• Email: info@theworkersclub.co.uk
• Post: The Workers Club Limited, 58 Chiltern Street, London W1U 7QZ, United Kingdom

You also have the right to complain to the ICO at ico.org.uk or by calling 0303 123 1113.