Free delivery on orders over £35 | Standard delivery £4.95
The Wool Junction

Privacy Policy

Last updated: May 2026

1. Who We Are

This privacy policy explains how Online Lifestyle Ltd (trading as "The Wool Junction"), Company Number 17124163, registered at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, collects, uses, and protects your personal data when you use our website thewooljunction.co.uk.

Online Lifestyle Ltd is the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

We may collect and process the following personal data:

  • Identity data: first name, last name
  • Contact data: email address, telephone number, delivery address
  • Transaction data: details of products purchased, order history, payment references (we do not store card numbers)
  • Technical data: IP address, browser type, device information, pages visited
  • Communication data: emails, chat messages, and customer service correspondence
  • Marketing data: newsletter subscription preferences

3. How We Collect Your Data

We collect data through:

  • Direct interactions (placing orders, creating an account, subscribing to newsletters, contacting us)
  • Automated technologies (cookies, server logs, analytics tools)
  • Third parties (payment processors, delivery partners)

4. How We Use Your Data

We use your personal data for the following purposes:

  • To process and fulfil your orders (contractual necessity)
  • To communicate with you about your orders (contractual necessity)
  • To manage your account (contractual necessity)
  • To send marketing communications where you have opted in (consent)
  • To improve our website and services (legitimate interest)
  • To prevent fraud and ensure security (legitimate interest)
  • To comply with legal obligations (legal obligation)

5. Data Sharing

We may share your personal data with:

  • Payment processors: Stripe processes your payments securely. Their privacy policy is available at stripe.com/privacy.
  • Delivery partners: We share your name, address, and contact number with our shipping carriers (Evri, Parcelforce, DHL, UPS) to deliver your orders.
  • Analytics providers: We use anonymised analytics to understand website usage.

We do not sell your personal data to third parties. We do not share your data with third parties for their own marketing purposes.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Order data is retained for 6 years for tax and legal compliance. Marketing data is retained until you unsubscribe. Account data is retained until you request deletion.

7. Your Rights

Under the UK GDPR, you have the following rights:

  • Right of access: Request a copy of your personal data
  • Right to rectification: Request correction of inaccurate data
  • Right to erasure: Request deletion of your data (subject to legal obligations)
  • Right to restrict processing: Request limitation of how we use your data
  • Right to data portability: Request transfer of your data in a machine-readable format
  • Right to object: Object to processing based on legitimate interests or direct marketing
  • Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within one month.

8. Cookies

Our website uses cookies to ensure proper functionality and improve your experience. For full details, please see our Cookie Policy.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Payment processing is handled by Stripe, which is PCI DSS Level 1 certified.

10. International Transfers

Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions) to protect your data.

11. Children

Our website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.

13. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

14. Contact Us

  • Email: [email protected]
  • Online Lifestyle Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
  • Company Number: 17124163