Privacy Policy
Privacy Policy
Last updated: 19/08/2026
Good Wee Co (“Good Wee Co”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit or make a purchase from our website, communicate with us, or otherwise interact with our services.
This policy is intended to comply with:
The UK General Data Protection Regulation (“UK GDPR”)
The Data Protection Act 2018
The Privacy and Electronic Communications Regulations (“PECR”)
Guidance issued by the UK Information Commissioner’s Office (“ICO”)
Please read this policy carefully to understand how your personal data is handled.
1. Who We Are
Good Wee Co is a trading name operated by a sole trader based in the United Kingdom. Good Wee Co is a trading name of Edward Davies, a sole trader.
Trading name: Good Wee Co
Business address: 50 Keswick Road, Leatherhead, KT23 4BH, United Kingdom
Contact email: fresh@goodweeco.com
ICO registration number: [ICO registration number, if applicable]
For the purposes of UK data protection law, the sole trader operating Good Wee Co is the data controller responsible for your personal data.
2. The Personal Data We Collect
We may collect and process the following categories of personal data:
Information You Provide Directly
When you interact with Good Wee Co, you may provide:
Your name
Billing and delivery addresses
Email address
Telephone number
Account login details
Order details and purchase history
Customer service enquiries and correspondence
Marketing preferences
Reviews, survey responses, or feedback
Payment Information
Payments are processed securely through third-party payment providers. We do not store full payment card details on our systems.
Our payment providers may collect:
Cardholder name
Card number
Expiry date
Security code
Billing information
Please refer to the relevant payment provider’s privacy policy for more information.
Information Collected Automatically
When you browse our website, we may automatically collect:
IP address
Browser type and version
Device information
Operating system
Website usage data
Referral URLs
Time zone settings
Cookie identifiers
Pages viewed and browsing behaviour
Marketing and Communications Data
We may collect information about:
Your marketing preferences
Whether you open marketing emails
Links clicked in marketing communications
Consent records
3. How We Use Your Personal Data
We only use your personal data where we have a lawful basis to do so under UK GDPR.
We may use your data to:
Process and Fulfil Orders
Including:
Taking payment
Delivering products
Managing returns and refunds
Sending order confirmations and delivery updates
Lawful basis: Contractual necessity
Manage Customer Accounts
Including:
Creating and maintaining your account
Providing customer support
Handling enquiries and complaints
Lawful basis: Contractual necessity and legitimate interests
Improve Our Website and Services
Including:
Analysing website traffic
Understanding customer behaviour
Improving user experience
Preventing fraud and misuse
Lawful basis: Legitimate interests and consent where required
Send Marketing Communications
Including:
Email newsletters
Promotions and offers
Product updates
We will only send marketing communications where:
You have consented; or
We are permitted to do so under PECR soft opt-in rules.
You can unsubscribe at any time by:
Clicking the unsubscribe link in emails; or
Contacting us directly.
Lawful basis: Consent or legitimate interests where applicable
Comply With Legal Obligations
Including:
Accounting and tax obligations
Fraud prevention
Responding to legal claims or regulatory requests
Lawful basis: Legal obligation
4. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to improve functionality, analyse usage, and support marketing activities.
Cookies may include:
Essential website cookies
Analytics cookies
Functional cookies
Advertising and retargeting cookies
Essential Cookies
These cookies are necessary for the operation of the website and cannot usually be switched off.
Analytics Cookies
These help us understand how visitors use our website so we can improve performance and usability.
Marketing Cookies
These may be used by advertising platforms to deliver relevant adverts and measure campaign effectiveness.
Where required by PECR, we will request your consent before placing non-essential cookies on your device.
You can manage cookie preferences through:
Our cookie banner or preference centre
Your browser settings
For more information, please see our Cookie Policy: [link to cookie policy]
5. Sharing Your Personal Data
We may share personal data with trusted third parties where necessary to operate our business and fulfil our services.
These may include:
Payment Providers
Such as:
Stripe
PayPal
Shopify Payments
Klarna
Ecommerce and Website Providers
Such as:
Shopify
WooCommerce
Squarespace
Delivery and Fulfilment Partners
Such as:
Royal Mail
DPD
Evri
DHL
Marketing and Analytics Providers
Such as:
Google Analytics
Meta (Facebook/Instagram)
Klaviyo
Mailchimp
Professional Advisers
Including:
Accountants
Legal advisers
Insurers
Regulatory Authorities
Where required by law or where necessary to protect our legal rights.
We require third-party processors to handle personal data securely and in accordance with applicable UK data protection law.
6. International Transfers
Some of our third-party service providers may process personal data outside the United Kingdom.
Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place, which may include:
UK International Data Transfer Agreements
UK adequacy regulations
Appropriate contractual safeguards approved under UK data protection law
7. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy.
Typical retention periods may include:
Order and transaction records: up to 6 years for tax and accounting purposes
Customer service correspondence: up to 3 years
Marketing consent records: until consent is withdrawn plus a reasonable compliance period
Website analytics data: typically 14–26 months depending on provider settings
We may retain information for longer where required by law or where necessary to establish, exercise, or defend legal claims.
8. Your Rights Under UK GDPR
You have a number of rights in relation to your personal data.
Right of Access
You can request a copy of the personal data we hold about you.
Right to Rectification
You can ask us to correct inaccurate or incomplete information.
Right to Erasure
You can request deletion of your personal data in certain circumstances.
Right to Restrict Processing
You can ask us to limit how your data is used in certain circumstances.
Right to Data Portability
You may be able to request the transfer of your personal data to another organisation.
Right to Object
You can object to certain processing based on legitimate interests and to the use of your personal data for direct marketing.
Rights Related to Automated Decision-Making
You have rights in relation to certain decisions made solely by automated means where applicable.
To exercise any of your rights, please contact us at:
Email: fresh@goodweeco.com
We may request proof of identity before responding to your request.
We aim to respond within one month in accordance with UK GDPR requirements.
9. Marketing Communications
If you opt in to receive marketing communications, or where we are otherwise legally permitted to contact you, we may communicate with you by:
Email
SMS
Social media advertising
You can withdraw your consent or unsubscribe from marketing communications at any time.
We will not sell your personal data to third parties for their own marketing purposes.
10. Security of Your Data
We take appropriate technical and organisational measures to protect personal data against:
Unauthorised access
Loss
Misuse
Alteration
Disclosure
Security measures may include:
SSL encryption
Secure payment processing
Restricted access to personal information
Password protection
Monitoring and security tools
However, no internet transmission or storage system can be guaranteed to be completely secure.
11. Third-Party Links
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices of external websites. We encourage you to read their privacy policies before providing personal data.
12. Children’s Privacy
Our website and products are not intended for children under the age of 13.
We do not knowingly collect personal data from children.
If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to remove it where appropriate.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
Changes in legal requirements
Operational changes
New technologies or services
Updated versions will be published on this page with a revised “Last updated” date.
14. Contact Us
If you have any questions about this Privacy Policy or how your personal data is handled, please contact us:
Good Wee Co
50 Keswick Road
Leatherhead
KT23 4BH
United Kingdom
Email: fresh@goodweeco.com
15. Complaints
If you are unhappy with how we handle your personal data, you have the right to complain to the UK Information Commissioner’s Office (“ICO”).
You can find information about making a complaint on the ICO website.
Telephone: 0303 123 1113
Address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom
We would appreciate the opportunity to address your concerns before you contact the ICO.