Privacy policy
Last updated: 8 September 2026
This website is operated by SuperWrappz Limited ("we", "us", "our"), a company registered in England and Wales, company number 11414726, business address Unit 18 All Saints Street, Hockley Port Business Centre, Birmingham, B18 7RL. For any question about this policy or your personal data, contact us at support@superwrappz.co.uk.
We are the "controller" of your personal data, which means we decide how and why it is used.
What we collect, why, and our lawful basis
- Taking and fulfilling your order (contact and delivery details, order and payment reference, order value) — necessary to perform our contract with you (UK GDPR Article 6(1)(b)).
- Answering a support message you send us (your message, order reference) — our legitimate interest in replying to a customer who has contacted us (Article 6(1)(f)).
- Sending marketing email or SMS, only if you opt in (name, email, mobile, what you open or click) — your consent (Article 6(1)(a)), or the PECR "soft opt-in" where you have bought from us before.
- Measuring site use and advertising to you, where cookies allow it (IP address, device and browser, pages viewed, cookie/pixel identifiers) — your consent (Article 6(1)(a) and PECR regulation 6).
Payment itself is processed by Shopify Payments; we do not see or store your full card details. We do not knowingly collect data from children.
Who we share it with
We use the following processors, who act on our instructions:
- Shopify — our store platform, checkout, and order records.
- Klaviyo — our email and SMS marketing platform.
- Google (Google Analytics, Google Tag Manager, Google Ads) — website analytics and advertising.
- Meta (Facebook Pixel) — advertising.
- TikTok (TikTok Pixel) — advertising.
-
Proof Factor — on-site social-proof notifications (recent-purchase pop-ups); it sets a
proof-factor-user-…cookie in your browser. - Royal Mail, ParcelForce, DPD, Evri and UPS — to deliver your order.
Each acts as our data processor, or, where it also decides its own purposes (for example a marketplace), as an independent controller in its own right.
International transfers
Some of these providers (including Shopify, Klaviyo, Google, Meta and TikTok) may process data outside the UK/EEA, under that provider's own safeguards, such as the UK/EU or International Data Transfer Standard Contractual Clauses.
How long we keep it
- Order and payment records: 7 years from the end of the tax year of the order (HMRC record-keeping rules).
- Support messages: 24 months from your last message to us.
- Marketing email/SMS data: until you unsubscribe, or 24 months of no engagement, whichever comes first.
- Analytics cookie data (Google Analytics): 14 months, Google's default retention period.
Cookies
We set essential cookies to run the store (for example, to remember your cart and checkout session). We also use Google Analytics, Google Ads, Meta Pixel and TikTok Pixel, which set analytics and advertising cookies, but only with your consent.
When you first visit our store a cookie banner lets you accept or reject analytics and advertising cookies with one click each, and manage preferences by category. Analytics and advertising cookies are not set unless you accept. We checked this on 6 September 2026 by measuring which requests the site makes before any choice is made: none went to Google, Meta or TikTok, and none of their cookies were set. On any page where no banner is shown, these cookies are not set either.
You can change your mind at any time: clearing your browser's stored data for our site brings the banner back on your next visit, or email support@superwrappz.co.uk and we will record your choice.
Your rights
Under UK GDPR you can ask us to: see the data we hold about you (a "subject access request"), correct it, erase it, restrict or object to how we use it, or receive it in a portable form. Where we rely on your consent (marketing, cookies) you can withdraw it at any time.
To make a subject access request, ask us to erase your data, or exercise any other right, email support@superwrappz.co.uk. We may ask for enough information to confirm who you are, but no more than is necessary. Using these rights is free, and we aim to respond within one month.
Complaints
If you are unhappy with how we handle your data, email support@superwrappz.co.uk with "Data complaint" in the subject. We will acknowledge your complaint within 30 days of receiving it and tell you what we are doing about it (Data (Use and Access) Act 2025, section 103).
You do not have to come to us first: you also have the right to complain to the UK Information Commissioner's Office at any time — ico.org.uk, helpline 0303 123 1113.
This notice was updated on 8 September 2026.

