Privacy Policy
Last updated: 26 June 2026
1. Who we are
Plastics Free Ltd. ("Plastics Free", "we", "us", "our") operates the website at [www.plasticsfree.co.uk] and is the data controller responsible for your personal information.
If you have any questions about this privacy policy or how we handle your personal data, please contact us at:
Email: hello@plasticsfree.co.uk
Company number: 11607265
ICO registration number: 00012911387
2. What personal information we collect
Depending on how you interact with us, we may collect the following:
Information you give us directly
- Name and email address (when you sign up to our newsletter or create an account)
- Billing and delivery address
- Payment information (processed securely by our payment provider — we do not store card details)
- Phone number (if provided at checkout)
- Communications you send us (e.g. via email or social media)
Information we collect automatically
- Browsing and purchase history on our website
- Device type, browser, IP address, and location data
- How you found our website (referral source)
- Pages visited, time spent, and items added to your basket
- Cookie and tracking data (see Section 7)
Information about your impact and rewards
- Order history used to calculate your plastic waste collection impact
- Rewards tier progress and free shipping milestone status
3. How we collect your information
We collect your personal data when you:
- Place an order on our website
- Create an account with us
- Sign up to our newsletter
- Contact us directly
- Visit and browse our website (via cookies and analytics tools)
- Follow or interact with us on social media
4. Why we use your information and our legal basis
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:
| Purpose | Legal Basis |
|---|---|
| Processing your order and delivering your goods | Performance of a contract |
| Sending you order confirmations and updates | Performance of a contract |
| Managing returns and refunds | Performance of a contract |
| Sending you marketing emails (newsletter) | Consent |
| Showing you your plastic impact tracker and rewards | Performance of a contract / Legitimate interests |
| Improving our website and understanding how customers use it | Legitimate interests |
| Complying with legal obligations (e.g. tax records) | Legal obligation |
| Detecting and preventing fraud | Legitimate interests |
Where we rely on consent (for example, to send you marketing emails), you have the right to withdraw that consent at any time by clicking "Unsubscribe" in any email or contacting us directly.
5. Who we share your information with
We do not sell your personal data. We share it only with trusted third parties who help us run our business, under strict data processing agreements:
- Shopify Inc. — our e-commerce platform (order management, customer accounts, payments). Shopify is certified under recognised data protection frameworks. Shopify Privacy Policy
- Klaviyo Inc. — our email marketing platform, used to send newsletters and transactional emails. Klaviyo Privacy Policy
- Stripe / Shopify Payments — secure payment processing. We do not store your card details.
- Google LLC — website analytics (Google Analytics) and cloud infrastructure (Google Cloud). Google Privacy Policy
- CleanHub — our plastic waste collection partner, used to calculate and verify your environmental impact data.
- Delivery and courier partners — we share your name and delivery address with our shipping providers to fulfil your order.
- Accountants and legal advisors — where required to meet our legal and financial obligations.
We may also disclose your personal data if required to do so by law or in response to a lawful request by a public authority.
6. International data transfers
Some of our third-party service providers (including Shopify and Klaviyo) are based outside the UK and European Economic Area (EEA). Where this is the case, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner's Office (ICO), to protect your data.
7. Cookies
Our website uses cookies — small text files placed on your device — to make our site work properly and to help us understand how it's being used.
Types of cookies we use:
- Essential cookies — necessary for the website to function (e.g. your shopping basket, login session). These cannot be switched off.
- Analytics cookies — help us understand how visitors use our site (e.g. Google Analytics). These are only set with your consent.
- Marketing cookies — used to show you relevant content. These are only set with your consent.
You can manage your cookie preferences at any time via the cookie settings banner on our website, or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of the site.
8. How long we keep your data
We only keep your personal data for as long as necessary for the purposes it was collected.
| Data type | Retention period |
|---|---|
| Order records | 7 years (legal/tax requirement) |
| Customer account information | Until you close your account, plus 1 year |
| Newsletter subscriber data | Until you unsubscribe |
| Impact tracker and rewards history | Duration of your account |
| Website analytics data | 26 months (Google Analytics default) |
| Fraud prevention records | Up to 5 years |
9. Your rights under UK GDPR
You have the following rights in relation to your personal data:
- Right to access — request a copy of the personal data we hold about you
- Right to rectification — ask us to correct inaccurate or incomplete data
- Right to erasure — ask us to delete your personal data (the "right to be forgotten"), where no legal obligation requires us to retain it
- Right to restriction — ask us to limit how we use your data in certain circumstances
- Right to data portability — request your data in a structured, machine-readable format
- Right to object — object to our use of your data where we rely on legitimate interests
- Right to withdraw consent — where we process your data based on consent, you can withdraw it at any time
- Rights related to automated decision-making — we do not use automated decision-making or profiling that produces legal or similarly significant effects
To exercise any of these rights, please contact us at hello@plasticsfree.co.uk. We will respond within one month of receiving your request. We may need to verify your identity before processing your request.
10. How to make a complaint
If you are unhappy with how we have handled your personal data, please contact us in the first instance and we will do our best to resolve the issue.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
ICO website: www.ico.org.uk
ICO helpline: 0303 123 1113
11. Children's privacy
Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their personal data, please contact us and we will delete it promptly.
12. Links to other websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.
13. Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "Last updated" date at the top of this page. Where changes are significant, we will notify you by email or by a prominent notice on our website.
This privacy policy applies to personal data collected via www.plasticsfree.co.uk and our associated marketing communications. It was last reviewed in June 2026.