Privacy Policy

Last updated: 14 September 2026

1. Introduction

ECOMRACE LIMITED (“ECOMRACE”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, disclose and protect your personal information when you:

• Visit or use our website;
• Create a customer account;
• Purchase products from our online store;
• Contact our customer support team;
• Subscribe to our emails or marketing communications;
• Participate in promotions, surveys or competitions; or
• Otherwise interact with ECOMRACE LIMITED.

This policy also explains your privacy rights and how you can exercise them.

2. Who We Are

The controller responsible for your personal information is:

ECOMRACE LIMITED
Company Number: 14389993
Registered Office: 60 Tottenham Court Road, Suite 5070a, London, W1T 2EW, United Kingdom
Telephone: +44 127 429 8435
Business and Support Email: Wecare@ecomrace.org

For questions about this Privacy Policy or the way we process your personal information, please contact us using the details above.

3. Personal Information We Collect

The personal information we collect depends on how you interact with our website and services.

3.1 Identity and contact information

This may include:

• Full name;
• Billing address;
• Delivery address;
• Email address;
• Telephone number;
• Account username or identifier; and
• Other contact details you provide to us.

3.2 Order and transaction information

This may include:

• Products purchased or added to your basket;
• Order number and order history;
• Purchase date and value;
• Billing and delivery information;
• Payment status;
• Refund, return and cancellation information;
• Discount or promotional codes used; and
• Communications concerning your order.

3.3 Payment information

Payments may be processed by third-party payment service providers. Depending on the payment method used, these providers may collect payment-card details, bank information or digital-wallet information.

We generally do not receive or store complete payment-card numbers or card security codes. We may receive limited payment information, such as:

• Payment method;
• Last four digits of a payment card;
• Payment confirmation;
• Transaction reference;
• Billing name and address; and
• Fraud-screening results.

The relevant payment provider processes payment information under its own privacy policy and security procedures.

3.4 Account information

If you create an account, we may collect:

• Your login details;
• Account preferences;
• Saved addresses;
• Wishlist or saved products;
• Order history; and
• Account activity.

Passwords should be stored in a protected form. You are responsible for keeping your account credentials confidential.

3.5 Communications and customer-service information

When you contact us, we may collect:

• The content of your enquiry;
• Email correspondence;
• Telephone or chat records;
• Complaints and feedback;
• Return or refund requests; and
• Any photographs, documents or other information you provide in connection with an order or enquiry.

Please do not send sensitive personal information unless it is necessary for us to deal with your request.

3.6 Technical and usage information

When you use our website, we or our authorised service providers may automatically collect:

• Internet Protocol address;
• Browser type and version;
• Device type and operating system;
• Time zone and approximate location;
• Website pages viewed;
• Links or buttons selected;
• Date, time and duration of visits;
• Referral source;
• Cookie identifiers; and
• Website performance, diagnostic and security information.

3.7 Marketing and preference information

This may include:

• Your marketing preferences;
• Communication preferences;
• Products or categories of interest;
• Responses to surveys and promotions; and
• Engagement with marketing emails or advertisements.

4. How We Collect Personal Information

We may collect personal information:

Directly from you

We collect information when you:

• Place an order;
• Create or update an account;
• Complete a website form;
• Subscribe to marketing;
• Contact customer support;
• Request a return or refund;
• Submit a review; or
• Participate in a promotion or survey.

Automatically

We may collect technical and usage information through cookies, pixels, server logs and similar technologies when you use our website.

From third parties

We may receive information from:

• Payment processors;
• Delivery and fulfilment providers;
• Fraud-prevention and identity-verification services;
• E-commerce and website-platform providers;
• Analytics and advertising providers;
• Social-media platforms, where you interact with us through those platforms; and
• Publicly available sources where permitted by law.

5. How and Why We Use Your Information

We may use personal information for the following purposes:

5.1 To process and fulfil orders

We use your information to:

• Confirm and process purchases;
• Take or verify payment;
• Arrange packing, shipping and delivery;
• Provide order updates;
• Handle cancellations, returns and refunds; and
• Communicate with you about your order.

Our lawful basis is generally the performance of a contract with you.

5.2 To manage customer accounts

We use account information to register and maintain your account, save your preferences and provide access to your order history.

Our lawful basis is generally the performance of a contract or our legitimate interest in providing account functionality.

5.3 To provide customer support

We use your information to answer enquiries, resolve problems, investigate complaints and provide after-sales support.

Our lawful basis may be the performance of a contract, compliance with a legal obligation or our legitimate interests in supporting customers and protecting our business.

5.4 To prevent fraud and protect our website

We may use information to:

• Verify transactions;
• Detect or prevent fraud;
• Protect customer accounts;
• Enforce our terms;
• Investigate suspicious activity;
• Maintain website security; and
• Establish, exercise or defend legal claims.

Our lawful basis is generally our legitimate interests and, where applicable, compliance with legal obligations.

5.5 To comply with legal and regulatory obligations

We may process and retain information for accounting, tax, consumer-protection, record-keeping, regulatory and law-enforcement purposes.

Our lawful basis is compliance with a legal obligation.

5.6 To improve our website and services

We may analyse website activity, customer feedback and purchasing trends to:

• Improve website performance;
• Understand how customers use our services;
• Develop products and features;
• Diagnose technical problems; and
• Improve customer experience.

Our lawful basis may be our legitimate interests or your consent where consent is legally required.

5.7 To send marketing communications

Where permitted by law, we may send information about products, promotions, offers and company updates.

We may rely on:

• Your consent;
• The electronic-marketing rules applicable to existing customers; or
• Our legitimate interests where legally permitted.

You can unsubscribe at any time by selecting the unsubscribe link in a marketing email or contacting us at Wecare@ecomrace.org.

Unsubscribing from marketing will not prevent us from sending essential service communications concerning your account or orders.

6. Lawful Bases for Processing

Depending on the circumstances, we process personal information under one or more of the following lawful bases:

• Contract: Processing is necessary to enter into or perform a contract with you.
• Legal obligation: Processing is necessary to comply with applicable law.
• Legitimate interests: Processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights.
• Consent: You have given clear consent for a particular purpose.
• Legal claims: Processing is necessary to establish, exercise or defend legal rights where applicable.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing lawfully carried out before consent was withdrawn.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

• Operate essential website functions;
• Remember basket contents and account settings;
• Maintain security;
• Analyse website traffic and performance;
• Personalise content; and
• Support advertising and marketing.

Strictly necessary cookies may be placed without consent where they are required to provide a service you request. We will request consent before placing non-essential cookies where required by law.

You can manage your preferences through our cookie-consent tool and browser settings. Disabling certain cookies may affect how the website operates.

Further details should be provided in our separate Cookie Policy.

8. Sharing Your Personal Information

We may share personal information with trusted third parties where necessary, including:

• Website and e-commerce platform providers;
• Payment processors and financial institutions;
• Warehousing, fulfilment, courier and delivery providers;
• IT, hosting, cloud-storage and cybersecurity providers;
• Customer-service and communications providers;
• Analytics, advertising and marketing providers;
• Accountants, auditors, insurers, legal advisers and professional consultants;
• Fraud-prevention and identity-verification providers;
• Government departments, regulators, courts and law-enforcement authorities; and
• Potential purchasers, investors or advisers involved in a business sale, restructuring or acquisition.

We require service providers acting on our behalf to process information only for authorised purposes and to apply appropriate confidentiality and security measures.

We do not sell personal information for money.

9. International Transfers

Some service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps required by data-protection law. These may include:

• Transferring information to a country recognised as providing an adequate level of protection;
• Using approved contractual safeguards, such as the UK International Data Transfer Agreement or an approved UK Addendum; or
• Relying on another legally recognised transfer mechanism.

You may contact us for further information about the safeguards relevant to your personal information.

10. Data Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to satisfy legal, tax, accounting, fraud-prevention and reporting requirements.

Retention periods may vary depending on:

• The type and sensitivity of the information;
• The reason it was collected;
• Legal or regulatory requirements;
• The existence of a complaint or dispute;
• Fraud and security risks; and
• Whether the information is required to establish or defend legal claims.

When information is no longer required, we will delete, anonymise or securely dispose of it, subject to technical and legal limitations.

11. Data Security

We use appropriate organisational and technical measures designed to protect personal information against:

• Unauthorised access;
• Accidental loss;
• Misuse;
• Alteration;
• Disclosure; and
• Destruction.

These measures may include access controls, secure hosting, encryption where appropriate, staff confidentiality requirements, security monitoring and restricted access to personal information.

No internet-based service is completely secure. Although we take reasonable precautions, we cannot guarantee absolute security.

If we become aware of a personal-data breach, we will investigate it and notify affected individuals and the relevant authority where required by law.

12. Your Data-Protection Rights

Subject to legal conditions and exemptions, you may have the right to:

• Be informed about how your information is used;
• Request access to the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your information in certain circumstances;
• Request restriction of processing in certain circumstances;
• Object to processing, including processing based on legitimate interests;
• Object to direct marketing at any time;
• Request data portability for certain information;
• Withdraw consent where processing is based on consent; and
• Challenge certain automated decisions that produce legal or similarly significant effects.

To exercise a right, contact Wecare@ecomrace.org.

We may ask you to provide information necessary to verify your identity. This is intended to ensure that personal information is not disclosed to an unauthorised person.

You will not normally be charged for exercising your rights. However, the law may allow us to charge a reasonable fee or refuse a request where it is manifestly unfounded or excessive.

13. Automated Decision-Making

We may use automated systems to assist with fraud detection, payment security or transaction-risk assessment.

Where a decision is made solely by automated means and produces legal or similarly significant effects, we will provide any protections required by applicable law, including the ability to request human review where applicable.

14. Children’s Privacy

Our online store is not intended for children who are not legally able to enter into a purchase contract independently.

We do not knowingly collect personal information from children in circumstances where parental or guardian consent is required. If you believe a child has provided personal information to us improperly, contact us so that we can investigate and take appropriate action.

15. Third-Party Websites

Our website may contain links to websites, platforms or services operated by third parties.

We do not control these third parties and are not responsible for their privacy practices. You should review the privacy policy of each third-party website or service before providing personal information.

16. Complaints

If you have concerns about how we use your personal information, please contact us first so that we can investigate and attempt to resolve the matter.

You also have the right to complain to the UK Information Commissioner’s Office:

Information Commissioner’s Office
Website: https://www.ico.org.uk/
Telephone: 0303 123 1113

You may also contact another competent data-protection authority where applicable.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our operations, website, services or legal obligations.

The revised policy will be published on our website with an updated “Last updated” date. Where appropriate, we may provide additional notice of significant changes.

18. Contact Us

If you have questions, concerns or requests relating to this Privacy Policy or your personal information, contact:

ECOMRACE LIMITED
Company Number: 14389993
Registered Office: 60 Tottenham Court Road, Suite 5070a, London, W1T 2EW, United Kingdom
Telephone: +44 127 429 8435
Email: Wecare@ecomrace.org