Privacy Policy

Last updated: 1 November 2026

At IWAIS, we respect your privacy and take the protection of your personal information seriously. This Privacy Policy explains how we collect, use, store and protect information when you visit iwais.co.uk, place an order with us, or otherwise interact with IWAIS.

It also explains the rights available to you in relation to your personal information and how you can contact us about them.

1. Information we may receive

The information we collect depends on how you interact with IWAIS.

When you purchase from us
When you place an order, we receive information such as your name, billing and delivery address, email address, telephone number (optional) and details of the products you have purchased. Payment information is handled by our payment service provider. We do not ordinarily receive or store your full payment card details.

When you contact us
If you contact us by email, through our website or by another means, we may retain the information you provide, including your name, contact details and the contents of your correspondence. We use this information to respond to you and keep an appropriate record of customer enquiries.

When you subscribe or otherwise provide information
If you sign up to receive communications from us, we may collect your name, email address and, where you choose to provide it, your telephone number (optional). You can unsubscribe from marketing communications at any time.

Information collected when you use our website
When you visit iwais.co.uk, certain information may be collected automatically. This can include your IP address, browser type, device information, pages visited, approximate location and information about how you interact with the website. We use cookies and similar technologies for purposes such as operating the website, remembering preferences, understanding how the website is used and, where applicable and permitted, supporting advertising and marketing activities.

Information provided by other organisations
We may receive limited information from organisations involved in providing our services. For example, our payment provider may confirm that a transaction has been successfully processed, while a delivery provider may provide shipment or delivery information.

2. How we use personal information

We use information we hold about you where necessary to operate IWAIS and provide our products and services. Depending on the circumstances, this may include:

• processing and delivering orders;
• taking and confirming payment;
• arranging returns, refunds and exchanges;
• responding to questions and customer-service enquiries;
• communicating with you about an order or other service you have requested;
• maintaining and administering your account, where applicable;
• sending marketing communications where you have given the necessary consent;
• understanding how visitors use our website and improving its content, functionality and performance;
• detecting and preventing fraud, misuse or other unlawful activity;
• maintaining appropriate business, accounting and transaction records; and
• complying with legal and regulatory obligations.

Our legal grounds for processing

Where UK GDPR applies, we rely on the legal basis that is appropriate to the particular processing activity.

For example:

Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.

You are generally free to decide whether to provide personal information. However, certain information is necessary for us to provide particular services. For example, without the information needed to process and deliver an order, we may not be able to complete your purchase.

3. Who we may share information with

We do not sell your personal information.

We may disclose information to service providers where this is necessary for us to operate IWAIS and provide our services. Depending on how you interact with us, these organisations may include:

• Payment providers, which process payments and help protect transactions;
• Delivery and fulfilment providers, which help us prepare, transport and deliver orders;
• Website, hosting, IT and technology providers, which support the operation and security of our website;
• Analytics and marketing providers, where their services are used and the relevant privacy requirements have been met;
• Professional advisers, such as accountants, lawyers or insurers, where appropriate; and
• Government bodies, regulators, law-enforcement agencies or other third parties where disclosure is required by law or is necessary to protect our legal rights.

We require service providers handling personal information on our behalf to use appropriate safeguards and to process information only for authorised purposes.

We do not permit third parties to use your personal information for their own independent marketing purposes unless you have separately agreed to that use.

4. Cookies

Our website uses cookies and similar technologies.

Some cookies are necessary for the website to operate. They may, for example, enable shopping-basket functionality, remember settings or support secure parts of the website.

Other cookies may help us understand website traffic and usage so that we can improve the experience we provide. Where required by law, we will ask for your consent before placing non-essential cookies.

Where advertising or marketing technologies are used, these will be subject to the choices and controls made available to you.

You can change your cookie preferences through our cookie controls or by adjusting your browser settings. Blocking certain cookies may affect some website functionality.

5. International processing

Some of the organisations that provide services to IWAIS may process personal information in countries outside the United Kingdom or European Economic Area.

Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is permitted under applicable data-protection law. Depending on the circumstances, this may include relying on an adequacy decision or using appropriate contractual safeguards, such as the UK’s International Data Transfer Agreement or applicable Standard Contractual Clauses.

6. Keeping information secure

We take reasonable and appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, destruction, alteration or disclosure.

These measures may include encryption in transit, access controls, appropriate authentication and limiting access to personal information to people and organisations that need it for legitimate purposes.

No method of transmitting or storing information online can be guaranteed to be completely secure. We therefore cannot promise absolute security, although we take appropriate measures to protect the information entrusted to us.

7. How long we keep information

We keep personal information only for as long as we reasonably need it for the purposes for which it was collected, including where necessary to meet legal, accounting, tax or reporting requirements, resolve disputes or enforce agreements.

The appropriate retention period depends on the type of information and why we hold it.

For example:

• Order and transaction information may need to be retained for the period required by applicable tax, accounting and legal requirements.
• Marketing information will generally be retained while you remain subscribed, unless there is another legitimate reason for retaining a record of your preferences.
• Customer correspondence may be retained for an appropriate period so that we can deal with ongoing enquiries, complaints or disputes.
• Technical and website information may be retained for periods appropriate to the purposes for which it was collected.

When information is no longer required, we will delete it or otherwise dispose of it securely, subject to any applicable legal or regulatory requirements.

8. Your data protection rights

Depending on your circumstances and where you live, you may have rights concerning the personal information we hold about you.

These can include the right to:

• Ask for access to your personal information;
• Request correction of inaccurate or incomplete information;
• Ask us to delete information in certain circumstances;
• Request that we restrict certain processing;
• Object to processing carried out on the basis of legitimate interests;
• Receive certain information in a portable format;
• Withdraw consent where we rely on consent as our legal basis; and
• Object to direct marketing.

These rights are not absolute and exceptions may apply. For example, we may need to retain certain information to comply with a legal obligation.

If you are a resident of a jurisdiction providing additional privacy rights, including applicable rights under California privacy law, those rights will apply where the relevant legal requirements are met.

To exercise a privacy right or ask us a question about how your information is handled, contact us using the details below.

We will deal with requests within the period required by applicable law. Under UK and EU GDPR, this will generally be within one month, although the law allows additional time in certain circumstances.

9. Children’s information

IWAIS's website and products are intended for adults.

We do not knowingly collect personal information from children under 18. If you believe that a child has provided us with personal information, please contact us and we will take appropriate steps to investigate and, where appropriate, remove the information.

10. Changes to this Privacy Policy

We may update this Privacy Policy when our practices, services or legal obligations change. When we make changes, we will publish the updated version on iwais.co.uk and update the effective date shown at the beginning of the policy.

We encourage you to review this page periodically so that you remain aware of how we handle personal information.

Contact Us

If you have a question about this Privacy Policy, want to exercise a data-protection right, or have a concern about how we handle your personal information, please contact:

Email: hello@iwais.co.uk

IWAIS will consider and respond to privacy requests in accordance with applicable data-protection law.