Privacy Policy

1. Introduction

This Privacy Policy explains how Dumbbells and More ("we", "us", "our") collects, uses, and protects your personal information when you visit our website, place an order, sign up to our emails, or contact our support team. We're committed to handling your data responsibly and in line with UK GDPR and the Data Protection Act 2018.

3. Information We Collect

Provided directly by you:

  • Name, email address, and phone number
  • Billing and delivery address
  • Order and purchase history
  • Messages you send to our support team
  • Payment details (handled securely by our payment providers, we never see or store full card numbers)

Collected automatically:

  • IP address and approximate location
  • Device and browser information
  • Pages viewed and how you navigate the site
  • Cookies and similar tracking technologies

Received from others:

  • Payment processors confirming successful transactions
  • Courier partners providing delivery status updates
  • Analytics and advertising platforms

4. What We Use It For

  • Processing and delivering your orders
  • Keeping you updated on order status and tracking
  • Responding to support queries
  • Detecting and preventing fraud
  • Sending marketing emails (only if you've opted in, you can unsubscribe any time)
  • Understanding how people use our site so we can improve it

5. Our Legal Basis for Processing

  • Contract: to fulfil the order you've placed with us
  • Legitimate interest: fraud prevention, site security, improving our service
  • Legal obligation: record-keeping for tax and accounting
  • Consent: marketing communications and non-essential cookies

6. Who We Share Data With

We only share what's necessary with trusted partners who help us run the business:

  • Payment providers (e.g. PayPal, Shop Pay, and our card processor)
  • Courier and delivery companies
  • Our e-commerce platform (Shopify) and its integrated apps
  • Analytics and advertising tools (e.g. Google Analytics, Meta/Google Ads)

We never sell your personal data to third parties.

7. How Long We Keep Your Data

  • Order and financial records: 6 years, in line with UK tax law
  • Support correspondence: up to 12 months
  • Marketing data: kept until you unsubscribe or ask us to delete it

8. Your Rights

Under UK GDPR you can ask us to:

  • Give you a copy of the data we hold on you
  • Correct anything that's inaccurate
  • Delete your data, where we're not legally required to keep it
  • Restrict or object to certain types of processing
  • Provide your data in a portable format

To exercise any of these rights, email support@dumbbellsandmore.co.uk.

9. Payment Security

All payments are processed through secure, PCI DSS-compliant providers. Our site uses SSL encryption throughout, and we don't store your full card details on our own systems.

10. Cookies

We use cookies to keep the site running smoothly (cart, checkout), understand how visitors use the site, and, where you've consented, personalise ads and offers. You can manage or disable cookies through your browser settings at any time.

11. Advertising & Analytics Platforms

We use tools such as Google Analytics and Google/Meta advertising to understand site performance and show relevant ads. These may collect anonymised usage data. You can opt out of personalised Google advertising at: https://www.google.com/settings/ads

12. Children

Our site and products are intended for adults. We don't knowingly collect personal data from anyone under 16.

13. Changes to This Policy

We may update this policy occasionally to reflect changes in our practices or the law. The current version will always be posted here with a revised date.