Privacy Policy

Effective Date: October 10, 2026

At RoomyWalk ("we", "us", "our"), we are committed to protecting your privacy and ensuring that your personal data is handled securely and transparently.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit or make a purchase from roomywalk.com (the "Site"). This policy is prepared in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

RoomyWalk is the data controller responsible for your personal data collected through this Site.

Brand Name: RoomyWalk
Data Protection & Customer Care Contact: cs@roomywalk.com
Lead Supervisory Authority: UK Information Commissioner’s Office (ICO)

2. Personal Data We Collect

We collect personal data from you directly when you interact with our Site, as well as automatically through tracking technologies.

A. Information You Provide directly

Identity & Contact Data: Full name, billing address, shipping address, email address, and phone number.
Transaction & Order Data: Details about products you have purchased, order history, sizing preferences, payment receipts, and delivery details.
Communication Data: Information you provide when contacting customer care, leaving feedback, or filling out forms on our Site.
Marketing Preferences: Your preferences in receiving email marketing, newsletters, or SMS updates from us.

B. Information Collected Automatically

Technical Data: IP address, browser type and version, operating system, device type, time zone setting, and language preferences.
Usage & Behavioral Data: Pages viewed, products searched, time spent on pages, referral URL, click paths, and interactions with our emails or ads.

Note: We do not collect any Special Category Data (e.g., health data, ethnic origin, religious beliefs) or criminal conviction data.

3. How We Use Your Data & Legal Bases for Processing

Under the UK GDPR, we must have a legal basis to process your personal data. We process your data under the following legal bases:

Purpose / Activity	Type of Data	Legal Basis for Processing
Fulfilling & Managing Orders (Processing payment, packing, shipping, handling returns/refunds)	Identity, Contact, Transaction	Performance of a Contract with you.
Customer Support & Inquiry Management (Responding to sizing questions, tracking status)	Identity, Contact, Communication	Performance of a Contract / Legitimate Interests (providing good service).
Account Creation & Maintenance	Identity, Contact	Performance of a Contract.
Sending Marketing Communications (Newsletters, promotional offers)	Contact, Marketing Preferences	Consent (opt-in) or Legitimate Interests (soft opt-in for existing customers).
Personalized Advertising & Retargeting (Meta Ads, Google Shopping)	Technical, Usage, Cookies	Consent (via Cookie Banner).
Site Analytics & Optimization (Improving website UX, fixing bugs)	Technical, Usage	Legitimate Interests / Consent (for analytical cookies).
Fraud Prevention & Legal Compliance	Identity, Technical, Transaction	Legal Obligation / Legitimate Interests (protecting business integrity).

4. How We Share Your Personal Data

We never sell your personal data. We only share your data with trusted third-party service providers who help us operate our store and deliver your orders, strictly under data protection agreements:

E-Commerce & Platform Hosting Providers: Shopify (or equivalent e-commerce platform) to power our online storefront.
Payment Processors: Stripe, PayPal, Apple Pay, Google Pay (to securely handle payments; we do not store full payment card details).
Logistics & Delivery Carriers: Shipping and courier partners (e.g., Royal Mail, DPD, EVRi, DHL) to deliver your parcels.
Marketing & Advertising Partners: Meta (Facebook/Instagram), Google Ads, Pinterest, and email service providers (e.g., Klaviyo) for marketing and audience measurement.
IT & Analytics Services: Google Analytics and web diagnostic tools for site performance monitoring.
Legal Authorities: Regulatory authorities, law enforcement, or courts if required by UK law.

5. Cookies and Tracking Technologies

Our Site uses cookies and similar technologies (web beacons, pixels) to recognize your device, enable store functionality, analyze web traffic, and personalize ad campaigns.

Essential Cookies: Necessary for the website to function (e.g., shopping cart persistence, secure checkout). Cannot be switched off.
Analytical / Performance Cookies: Help us understand how visitors interact with our Site (e.g., Google Analytics).
Marketing / Advertising Cookies: Used to deliver relevant advertisements across social media and search engines (e.g., Meta Pixel).

Managing Your Preferences: You can update or withdraw your consent for non-essential cookies at any time via our Cookie Preferences link in the website footer or through your browser settings.

6. International Data Transfers

As an online business, your personal data may be transferred to, and stored at, destinations outside the United Kingdom (e.g., cloud servers or service providers located in the EU or US).

When we transfer your data internationally, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

Transfers to countries deemed to provide an adequate level of protection for personal data by the UK Government.
The use of UK Standard Contractual Clauses (SCCs) or the International Data Transfer Addendum (IDTA) with international service providers.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, tax, or reporting requirements.

Order & Transaction Data: Kept for up to 6 years following the end of the tax year in which the transaction occurred to comply with UK tax and accounting obligations.
Marketing Data: Kept until you unsubscribe or withdraw your consent.
Customer Support Records: Retained for 2 years following resolution to handle any follow-up inquiries.

8. Your Data Rights Under UK GDPR

Under UK data protection laws, you have the following rights regarding your personal information:

Right of Access: Request a copy of the personal data we hold about you (Data Subject Access Request).
Right to Rectification: Request correction of inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where there is no good reason for us continuing to process it.
Right to Restrict Processing: Request the suspension of processing of your personal data in certain scenarios.
Right to Data Portability: Request the transfer of your data to you or a third party in a structured, machine-readable format.
Right to Object: Object to processing where we rely on a legitimate interest or where we process data for direct marketing purposes.
Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your data.

How to Exercise Your Rights: To exercise any of these rights, please contact us at cs@roomywalk.com. We respond to all legitimate requests within one month.

9. Security of Your Information

We have put in place appropriate technical and organizational security measures (including SSL encryption, restricted administrative access, and secure tokenization) to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed.

10. Third-Party Links

Our Site may include links to third-party websites, plug-ins, or applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

11. Complaints to the Regulator

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with an updated "Effective Date."