Privacy Policy

GLK SHINE is a car care and detailing products retailer based in the United Kingdom. For the purposes of the UK GDPR, we are the data controller of the personal data we collect about you.

Trading name: GLK SHINE

Registered address: [Insert registered business address]

Company number: [Insert company number, if applicable]

Contact: Please use the details on our Contact page.

• Identity and contact data: name, email, phone, billing and delivery address.
• Account data: username, password (hashed), preferences, wishlist and order history.
• Transaction data: products purchased, order value, delivery details. Card details are handled directly by our PCI-DSS compliant payment provider and are not stored by us.
• Technical data: IP address, browser type, device information, operating system.
• Usage data: pages viewed, referring URLs, session behaviour and interactions with our site and emails.
• Marketing and communications data: your preferences for receiving marketing from us and your communication preferences.

• To perform our contract with you: process orders, take payment, arrange delivery, handle returns and provide customer support.
• Legitimate interests: to operate and secure our website, prevent fraud, improve our products and services, and respond to enquiries.
• Consent: to send marketing emails, newsletters and to set non-essential cookies. You may withdraw consent at any time.
• Legal obligation: to comply with tax, accounting, consumer protection and other UK laws.

We only share personal data with trusted third parties who help us run our business, including:

• Payment processors (e.g. Stripe) to take payment securely.
• Delivery partners and couriers to fulfil orders.
• Cloud hosting, database and email delivery providers.
• Analytics providers to understand how our site is used.
• Professional advisers, regulators and law enforcement where required by law.

We do not sell your personal data.

Some of our service providers are located outside the UK. Where personal data is transferred outside the UK, we ensure it is protected by appropriate safeguards, such as UK adequacy regulations or the International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses.

We keep personal data only for as long as necessary for the purposes for which we collected it, including satisfying legal, accounting or reporting requirements. Order records are typically retained for 7 years to meet HMRC requirements. Marketing data is retained until you unsubscribe.

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), access controls, and secure infrastructure. No system is 100% secure, but we work continually to safeguard your data.

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data (‘right to be forgotten’).
• Restrict or object to certain processing.
• Request data portability.
• Withdraw consent at any time (for consent-based processing).
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us via our Contact page.

We only send marketing emails when you have opted in. You can unsubscribe at any time via the link at the bottom of any marketing email, or by contacting us. Transactional emails (order confirmations, delivery updates, password resets) will still be sent as they are necessary to perform our contract with you.

We use cookies and similar technologies. Please see our Cookie Policy for full details and to manage your preferences.

Our website is not intended for children under 16. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new ‘Last updated’ date.

If you have any questions about this policy or how we handle your data, please contact us through our Contact page.