Privacy Policy

Data protection & privacy · deltafitnessapparel

Last updated: 29 September 2026

1. Introduction and Scope

This Privacy Policy describes how deltafitnessapparel Ltd ("we," "our," or "us") collects, uses, shares, and protects your personal information when you visit our website, make purchases, or interact with our services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website, you acknowledge that you have read and understood this policy.

2. Information We Collect

Personal Information: Name, email, phone number, billing and shipping address, and payment details.

Business Information: Business name, VAT number, and compliance-related data.

Technical Information: IP address, browser, device information, pages visited, and timestamps.

Communication Data: Records of emails, calls, and support interactions.

3. How We Use Your Information

Order Processing: To fulfil orders and manage shipping and returns.
Account Management: To maintain your account and preferences.
Customer Support: To respond to enquiries and improve service.
Legal Compliance: To meet regulatory, VAT, and tax obligations.
Business Operations: Analytics and internal improvements.

4. Lawful Basis for Processing

We process your personal data under the following lawful bases:

Contract Performance: To fulfil your order and provide customer service.
Legal Obligation: To comply with UK tax, accounting, and consumer-protection requirements.
Legitimate Interests: To improve our products, detect fraud, and maintain secure systems.
Consent: For marketing communications and non-essential cookies, where you have given explicit consent.

5. Information Sharing and Disclosure

Service Providers: Trusted partners assisting with website hosting, payment processing, and order management.
Shipping Partners: Royal Mail, Evri, DPD, Yodel, and other carriers for order fulfilment.
Payment Processors: Secure third-party payment processors including PayPal, Klarna, and card payment providers.
Legal Requirements: Disclosure when required by law or to protect our rights.
Business Transfers: Data may transfer during mergers, acquisitions, or asset sales.

6. Data Security and Protection

We implement encryption, SSL security, access controls, and regular security audits to protect your data. Whilst we strive for maximum protection, no system is completely secure, and we cannot guarantee absolute security.

7. Cookies and Tracking Technologies

We use cookies to enhance user experience, analyse traffic, and improve functionality. Our use of cookies complies with the Privacy and Electronic Communications Regulations 2003 (PECR). You can manage your cookie preferences through your browser settings or our cookie-consent tool. Essential cookies (required for the website to function) do not require consent; all other cookies require your explicit consent before being set.

For full details, please see our Cookie Policy.

8. Your Privacy Rights

Under the UK GDPR and Data Protection Act 2018, you have the following rights:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your data in certain circumstances.
Right to Restrict Processing: Request that we limit how we use your data.
Right to Data Portability: Receive your data in a structured, commonly-used format.
Right to Object: Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details in section 13. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Data Retention

We retain personal data only as long as necessary for the purposes set out in this policy and to comply with legal, accounting, and regulatory obligations. Order and customer data are typically retained for six years to comply with HMRC requirements and the Limitation Act 1980.

10. Third-Party Services and Links

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of external websites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are intended for users aged 18 and over. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected such data, we will delete it promptly.

12. International Data Transfers

Your personal data is primarily processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy decisions, Standard Contractual Clauses with the UK addendum, or other mechanisms approved under UK data-protection law.

13. Updates to This Privacy Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page shows when the policy was last revised. Continued use of our services after updates constitutes acceptance of the revised policy.