Privacy Policy

Last Updated: August 18, 2026

This Privacy Policy describes how WHITE & EDDY LTD ("we", "us", or "our") collects, uses, discloses, stores, and protects your personal information when you visit, use our services, make a purchase from xvvugh.shop, or otherwise communicate with us.

We respect your privacy and are committed to protecting your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR") where applicable.

1. Data Controller

The data controller responsible for the processing of your personal data is:

WHITE & EDDY LTD
1 School Lane
Wisbech, Cambridgeshire
PE13 1AW
England, United Kingdom

Company Registration Number: 11325273
Website: xvvugh.shop
Email: support@xvvugh.shop
Telephone: +44 1945 582658

If you have any questions about this Privacy Policy or how we process your personal data, you may contact us using the details above.

2. Personal Data We Collect

Depending on how you interact with our website, we may collect the following categories of personal data:

Information You Provide to Us

When you place an order, contact us, create an account, subscribe to communications, or otherwise interact with our store, we may collect:

• Full name

• Billing address

• Shipping address

• Email address

• Telephone number

• Order and purchase information

• Customer account information

• Communications with our customer service team

• Return, refund, or complaint information

Because we offer Cash on Delivery (COD), we may also process information required to verify, fulfil, and manage COD orders.

If a refund for a COD order requires a bank transfer or another agreed refund method, we may request the information reasonably necessary to process that refund.

Information Collected Automatically

When you visit our website, certain information may be collected automatically, including:

• IP address

• Device information

• Browser type

• Operating system

• Pages viewed

• Date and time of visits

• Referring website or source

• Website interaction information

• Cookie and similar technology identifiers

3. How We Use Your Personal Data

We may use personal data for purposes including:

• Processing and fulfilling your orders

• Arranging delivery of purchased products

• Managing Cash on Delivery orders

• Providing order confirmations and delivery updates

• Handling returns, refunds, exchanges, and complaints

• Providing customer support

• Managing customer accounts

• Preventing fraud, misuse, and security incidents

• Maintaining and improving our website and services

• Complying with accounting, tax, legal, and regulatory obligations

• Establishing, exercising, or defending legal claims

• Sending marketing communications where permitted by law

• Measuring website performance and customer interaction where legally permitted

• Personalising services where you have provided the necessary consent

4. Legal Bases for Processing

Where the GDPR applies, we process your personal data only when we have an appropriate legal basis.

Depending on the circumstances, this may include:

Performance of a Contract

We process personal data where necessary to:

• Accept and process your order

• Deliver your products

• Manage Cash on Delivery

• Communicate about your purchase

• Handle returns, refunds, and customer service requests

Legal Obligations

We may process and retain certain information where required to comply with legal obligations, including accounting, taxation, consumer protection, fraud prevention, and regulatory requirements.

Legitimate Interests

Where permitted by law, we may process personal data where necessary for our legitimate business interests, including:

• Protecting our website and business against fraud

• Maintaining website security

• Improving our services

• Managing customer relationships

• Establishing or defending legal claims

We will only rely on legitimate interests where those interests are not overridden by your fundamental rights and freedoms.

Consent

Where required, we rely on your consent for activities such as:

• Non-essential cookies

• Certain analytics technologies

• Certain advertising technologies

• Direct electronic marketing

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Shopify

Our online store is hosted using Shopify, which provides the e-commerce platform that enables us to sell our products and services.

Shopify may process personal data on our behalf or for its own permitted purposes in connection with providing its platform, infrastructure, security, analytics, and related services.

Personal data relating to customers in the European Economic Area may initially be processed through Shopify's European operations, while Shopify and its authorised service providers may also process information in other countries subject to applicable data protection safeguards.

6. Sharing Personal Data

We may disclose personal data to third parties where reasonably necessary to operate our business and provide our services.

These parties may include:

• Shopify and e-commerce infrastructure providers

• Delivery and logistics providers

• Warehousing and fulfilment partners

• Customer service providers

• IT, hosting, and security providers

• Analytics providers

• Advertising and marketing providers where legally permitted

• Professional advisers such as accountants, auditors, and legal advisers

• Banks or payment service providers where necessary for refunds or other transactions

• Government authorities, regulators, courts, or law enforcement where required by law

We do not permit service providers acting on our behalf to use personal data for purposes unrelated to the services they provide to us, except where independently permitted or required by law.

7. Cash on Delivery

We offer Cash on Delivery (COD) where available.

For COD orders, we may process your:

• Name

• Delivery address

• Telephone number

• Email address

• Order details

• Delivery status

• COD payment status

This information may be shared with delivery or logistics providers to the extent necessary to deliver your order and collect payment.

If a COD purchase is refunded through a bank transfer or another agreed method, we may process the refund information you provide solely for purposes connected with processing and documenting the refund and meeting applicable legal obligations.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some cookies are strictly necessary for the website to function, for example to:

• Maintain shopping cart functionality

• Process checkout

• Maintain website security

• Remember essential website settings

Other cookies may be used for:

• Analytics

• Advertising

• Personalisation

• Measuring website performance

Where required by applicable Austrian or EU law, non-essential cookies will only be activated after you have provided valid consent.

You may accept, reject, or manage non-essential cookies through the cookie consent tools made available on our website.

You may withdraw or change your consent at any time through the available cookie settings.

9. Marketing Communications

Where permitted by law, we may send you marketing communications about our products, promotions, and offers.

Where your consent is required, we will only send such communications after obtaining the appropriate consent.

You may unsubscribe from marketing communications at any time by:

• Using the unsubscribe option included in our marketing communications; or

• Contacting us at support@xvvugh.shop

Unsubscribing from marketing communications does not prevent us from sending necessary transactional messages relating to your orders, deliveries, returns, refunds, or customer service requests.

10. International Data Transfers

We are established in the United Kingdom, while our services may be offered to customers in Austria and other countries.

Personal data may therefore be processed outside the European Economic Area ("EEA").

Where personal data is transferred internationally, we take appropriate measures as required by applicable data protection law.

Depending on the destination and circumstances, these measures may include:

• A European Commission adequacy decision

• Standard Contractual Clauses approved by the European Commission

• Other legally recognised data transfer safeguards

The European Commission currently recognises the United Kingdom as providing an adequate level of protection for transfers covered by the relevant adequacy decision.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

Retention periods may depend on:

• The duration of our relationship with you

• Order fulfilment requirements

• Return and refund periods

• Warranty obligations

• Accounting and tax requirements

• Fraud prevention requirements

• Applicable limitation periods

• Legal and regulatory obligations

When personal data is no longer required, we will delete, anonymise, or securely dispose of it where appropriate and legally permitted.

12. Your GDPR Rights

Where the GDPR applies, you may have the right to:

Right of Access

Request information about whether we process your personal data and obtain a copy of relevant personal data.

Right to Rectification

Request correction of inaccurate or incomplete personal information.

Right to Erasure

Request deletion of your personal data in circumstances permitted by applicable law.

Right to Restriction

Request restriction of the processing of your personal data in certain circumstances.

Right to Data Portability

Receive certain personal data you provided to us in a structured, commonly used, and machine-readable format and, where applicable, request its transfer to another organisation.

Right to Object

Object to certain processing carried out on the basis of legitimate interests.

You may also object at any time to the processing of your personal data for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with an appropriate data protection supervisory authority if you believe that your personal data has been processed in violation of applicable data protection law.

Customers located in Austria may contact the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).

13. Exercising Your Privacy Rights

To exercise your privacy rights, please contact:

support@xvvugh.shop

Please clearly describe your request and provide sufficient information for us to identify the relevant account or transaction.

We may request reasonable information to verify your identity before processing certain requests.

We will respond to valid requests within the time limits required by applicable data protection law.

14. Automated Decision-Making

We do not intend to make decisions based solely on automated processing that produce legal effects or similarly significant effects on customers unless such processing is permitted by applicable law and appropriate safeguards are provided.

Automated systems may nevertheless be used for purposes such as detecting potentially fraudulent or suspicious transactions.

15. Data Security

We use reasonable technical and organisational measures designed to protect personal data against:

• Unauthorised access

• Accidental loss

• Misuse

• Alteration

• Unauthorised disclosure

• Destruction

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

You are responsible for keeping any account credentials confidential and for contacting us if you believe your account or personal information has been compromised.

16. Third-Party Websites and Services

Our website may contain links to websites, applications, or services operated by third parties.

We are not responsible for the privacy practices of independent third parties.

We encourage you to review the privacy policies of third-party websites and services before providing them with personal information.

17. Children's Privacy

Our website and services are intended for general consumers and are not specifically directed toward children.

We do not knowingly collect personal data from children in circumstances where such collection would be prohibited by applicable law.

If you believe that a child has provided us with personal data improperly, please contact us at support@xvvugh.shop.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to our business practices

• Changes to our services

• Changes to technology

• Legal or regulatory developments

When we make changes, we will publish the updated Privacy Policy on xvvugh.shop and update the "Last Updated" date where appropriate.

19. Contact Us

If you have questions, concerns, complaints, or requests relating to this Privacy Policy or your personal data, please contact us:

WHITE & EDDY LTD
1 School Lane
Wisbech, Cambridgeshire
PE13 1AW
England, United Kingdom

Company Registration Number: 11325273
Website: xvvugh.shop
Email: support@xvvugh.shop
Telephone: +44 1945 582658

Shipping: Free standard shipping
Payment Method: Cash on Delivery (COD), where available