Privacy & cookies

Workwear Global (referred to below as "we", "us" or "our") is the controller of personal data collected through workwearglobal.com. You can reach us at sales@workwearglobal.com or by post at:

Workwear Global
Moss Bridge House
Moss Bridge Road
Rochdale, OL16 5EA

For any privacy question — including access, correction or deletion requests — please email the address above with "Privacy" in the subject line.

Depending on how you use the site, we may collect the following categories of personal data:

• Account and contact data — name, business name, email, phone, delivery and billing addresses.
• Order data — products purchased, sizes, quantities, decoration choices, artwork you supply, delivery preferences and order status.
• Payment data — handled by our payment provider Stripe. We do not see or store full card numbers; we receive only the transaction reference and last four digits.
• Support and communications — messages you send us via the contact form, live chat, email or phone (which we may record for training and support).
• AI adviser conversations — messages you exchange with 'Will', our AI adviser, and the responses given, so we can improve accuracy and audit answers.
• Usage and device data — pages visited, referring source, device and browser type, IP address, and interactions collected via first-party analytics and, where you allow cookies, Google Analytics 4.
• Marketing preferences — the channels on which you have chosen to hear from us.

We process personal data under UK GDPR on the following lawful bases:

• Contract — to accept and fulfil your order, including decoration, delivery and after-sales support.
• Legal obligation — to keep tax, VAT and accounting records required by UK law.
• Legitimate interests — to run and improve our website, prevent fraud, respond to enquiries and, in a proportionate way, market related products to existing business customers.
• Consent — where you opt in to marketing emails, non-essential cookies or analytics.

• To process, decorate, package and deliver your order.
• To send transactional emails: order confirmations, artwork proofs, dispatch updates, refund receipts and account notices.
• To provide customer support and manage your account or business account.
• To respond to enquiries you submit via forms on the site (contact, bulk quote, corporate consultation).
• To provide the AI adviser (Will) — including logging conversations so we can audit answers and improve quality.
• To detect and prevent fraud and misuse of the site.
• To measure how the site performs and improve it — in aggregate, and only using analytics you have accepted.
• To send marketing communications where you have opted in, and to allow you to opt out at any time.

We do not sell your personal data. We share it only with the following categories of trusted service providers, each acting as a processor under a written agreement:

We may also disclose personal data where we are legally required to (for example, in response to a court order) or to establish, exercise or defend legal claims.

Some of our processors are based outside the UK, principally in the European Union and the United States. Where personal data is transferred outside the UK, we rely on the UK International Data Transfer Addendum, the EU Standard Contractual Clauses or an adequacy decision by the UK Government. Copies of the relevant safeguards are available on request.

• Order and invoice records — 7 years after the order, to satisfy UK tax and accounting rules.
• Account data — while your account is active, plus up to 3 years of inactivity, after which we anonymise or delete.
• Artwork files — while your account is active so you can reorder, and up to 3 years after your last order.
• Support correspondence — up to 3 years from the last contact, unless a longer period is needed to defend a legal claim.
• AI adviser conversations — up to 24 months, to audit answers and improve quality.
• Analytics data — retained by Google Analytics for up to 14 months by default; server-side event data up to 25 months.
• Marketing lists — until you unsubscribe or ask us to remove you.

We use cookies and comparable technologies to run the site and, with your permission, to measure how it is used. Non-essential cookies are only set once you accept them via our cookie banner.

You can withdraw consent to non-essential cookies at any time via the cookie preferences link in the footer, or by clearing them in your browser.

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data where it's no longer needed for the purposes above.
• Restriction — ask us to limit how we process your data in specific situations.
• Portability — receive your data in a structured, commonly used, machine-readable format.
• Objection — object to processing based on our legitimate interests, including direct marketing.
• Withdraw consent — where processing is based on consent, at any time.
• Complain to the ICO — you can complain to the Information Commissioner's Office at ico.org.uk if you believe we've handled your data wrongly.

To exercise any of these rights, email sales@workwearglobal.com. We will respond within one month.

We take reasonable technical and organisational measures to protect personal data. In plain English that means:

• The site runs on TLS/HTTPS end-to-end.
• Card details are handled directly by Stripe — we do not store full card numbers.
• Access to customer data is limited to staff who need it, protected by strong authentication.
• Automated backups are kept for a limited period so we can restore in the event of an incident.
• We use widely recognised infrastructure providers (see section 5).

No system is ever 100% secure. If we ever become aware of a personal data breach that meets the UK GDPR threshold, we will notify the ICO within 72 hours and affected individuals without undue delay.

Our site is not aimed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy from time to time. Where changes are material, we will highlight them at the top of this page or notify affected users by email. The "last updated" date at the top always reflects the current version.

Privacy questions, subject-access requests and complaints: sales@workwearglobal.com.

If you're not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk.