Privacy and Security Policy

Privacy and Security Policy

Section 1 - What We Do With Your Information

When you make a purchase from our store, we collect certain personal information, including your name, address, and email. This information is crucial for processing your transaction and ensuring seamless service delivery. Additionally, as you browse our store, our system automatically receives your computer's Internet Protocol (IP) address. This supports us in gaining insights into your browser and operating system, enabling us to optimise and improve your shopping experience.

With your permission, we may send you marketing emails to inform you about our latest products, offers, and updates. Our aim is to keep you updated with relevant promotions and developments.

Section 2 - Consent

How do we obtain your consent?
When you provide personal information to complete transactions, verify payments, place an order, arrange delivery, or process returns, you agree to the collection and use of your information specifically for these purposes. If we require your data for a secondary purpose, such as marketing, we will seek your explicit consent or offer you the choice to opt out. This ensures you control how your information is used and reinforces our dedication to transparency and privacy.

How can you withdraw your consent?
If you change your mind and no longer wish to provide consent for using your data, you can withdraw it at any time by contacting us via email at support@wavesports.co.uk. We will promptly honour your request, respecting your preferences regarding communication and data sharing.

Section 3 - Disclosure

Your personal information may be disclosed if required by law or if you violate our Terms of Service. This includes situations where legal obligations compel us to share information with the appropriate authorities or when it is necessary to enforce compliance with our policies. Maintaining transparency and safety is our priority.

Section 4 - Shopify

Our store is hosted on Shopify Inc., which provides a reliable e-commerce platform that enables us to deliver efficient services to our customers.

All customer data is stored securely using Shopify’s databases and general application, protected by robust firewalls and encryption. Shopify implements advanced security measures, such as two-factor authentication and passkeys, ensuring that sensitive information is shielded from unauthorised access. Shopify also continuously assesses security risks to safeguard your personal information.

Payments:
When using Shopify's payment gateway, your credit card information is encrypted via the Payment Card Industry Data Security Standard (PCI-DSS). This ensures all transactions are stored securely until completed, after which the data is promptly deleted.

Shopify’s payment systems comply with PCI-DSS standards, governing secure handling of payment data. These standards are established by major card providers including Visa, MasterCard, American Express, and Discover.

More details can be found in Shopify’s Terms of Service and Privacy Policy.

Section 5 - Third-Party Services

Third-party services may collect, use, and disclose your information only to the extent necessary to perform functions related to your transactions. However, each third-party provider (e.g., payment gateways) may have its own privacy policies governing data provided for purchase-related transactions. Please review their respective privacy policies to understand how they manage your information.

Section 6 - Security

Protecting your personal information is our priority. We adhere to industry best practices to safeguard your data from being lost, stolen, accessed, disclosed, altered, or destroyed. Your credit card information is encrypted using Secure Socket Layer (SSL) technology and stored with AES-256 encryption.

While no data transmission method via the Internet is entirely secure, we comply with PCI-DSS requirements and apply additional precautionary measures recognised by industry standards to ensure your information remains safe.

Cookies:
Here is the list of cookies used on our website to help personalise your experience and optimise functionality:

_session_id: Stores session details such as referrer and landing pages.
_shopify_visit: Tracks visits (valid for 30 minutes).
_shopify_uniq: Counts customer visits (expires at midnight).
cart: Stores cart information (valid for 2 weeks).
_secure_session_id: Stores session-specific data.
storefront_digest: Confirms visitor access authentication.

You may choose whether to opt into cookies to maintain control of your privacy preferences.

Section 7 - Age of Consent

By using our site, you confirm that you are of legal age in your region of residence. Additionally, you consent to your minor dependents using the site under your supervision. This policy is designed to uphold a safe and secure online environment.

Section 8 - Changes to Privacy Policy

Wave Sports reserves the right to update this policy at any time. Such changes will take effect immediately upon posting to the site. If significant updates are made, we will inform you so that you remain aware of what information we collect, how we utilise it, and under what circumstances disclosure may occur.

If our company merges with another entity, any personal data may be transferred to the new owners to ensure continued product and service delivery.

Questions and Contact Information

If you wish to access, correct, alter, or delete any personal information we have collected, file a complaint, or request further details, please contact our Privacy Director at support@wavesports.co.uk.

We are committed to transparency and privacy, ensuring prompt responses to your queries and adherence to your preferences.