Data Protection & Privacy

Privacy Policy.

This Privacy Policy details how Above Average Clothing collects, uses, and safeguards your personal data when you visit or buy from our storefront under UK GDPR.

Compliance

UK GDPR

Strict UK data standards

Payments

Zero Saved

Card details never stored

Platform

Shopify Secure

Encrypted data transfer

Control

Full Rights

Access, edit or delete anytime

Data Architecture

Collection, Usage & Legal Basis

01 // Information Collected

Data you provide directly during purchases or browsing interactions.

Name, email & contact phone number
Billing and physical delivery addresses
Secure gateway payment tokens (no raw cards)
IP address, browser type & page activity

02 // Primary Purposes

Your personal data is strictly used to operate and fulfill order services.

Process and dispatch your orders
Send order confirmation & tracking updates
Provide direct customer service support
Comply with UK tax and legal obligations

03 // Lawful Basis

Processing operates under UK GDPR legal grounds.

Contract: Necessary for order execution
Legal: Statutory accounting records
Legitimate Interest: Security & site optimization
Consent: Marketing communications

Policy Clauses

Sharing, Retention & Security

01. Third-Party Data Sharing

Your information is shared only where necessary to run the store. Trusted service providers include:

E-commerce Architecture: Shopify storefront infrastructure
Payment Gateways: Direct encrypted card processors
Fulfilment Partners: Print and production partners (e.g., Teemill, Gelato, Inkthreadable)
Couriers: Direct logistics carriers for parcel delivery

Third parties only receive data required to execute their specific services and must maintain strict data security.

02. International Data Transfers

Some integrated cloud platforms or fulfillment systems operate server facilities outside the UK. When cross-border processing occurs, data is safeguarded via UK Adequacy Decisions, Standard Contractual Clauses (SCCs), or equivalent secure frameworks.

03. Data Retention & Security

Order and financial records are stored for the period required by statutory UK tax laws. Support communications are retained as long as needed to resolve open issues. Marketing data is stored until consent is withdrawn.

We implement technical safeguards to shield personal details, though no online transfer can be guaranteed 100% immune to risk.

04. Children's Privacy & Policy Updates

This store is not intended for individuals under the age of 16, and we do not knowingly collect personal details from children.

We may revise this Privacy Policy periodically to reflect legal adjustments or operational updates. Modifications take effect immediately upon posting to this page.

UK GDPR Protection

Your Data Rights

Under UK data protection laws, you maintain complete control over how your personal details are processed, updated, or removed.

Access & Correction: Request a copy or correction of inaccurate personal records.
Erasure & Restriction: Request data deletion or restrict processing where legally permitted.
ICO Complaints: Lodge a formal complaint with the Information Commissioner's Office (ICO).