Last updated: 28/07/2026
Who we are
Our website address is: https://theitshed.co.uk.
If you have any questions about this policy or how we handle your data, you can contact us at [insert contact email].
Buying from us via WhatsApp
Our website does not process orders or payments directly. Instead, product links on the site open a pre-filled WhatsApp message, which lets you contact us directly to make a purchase.
When you use these links and message us on WhatsApp, please be aware of the following:
- WhatsApp is a separate service. Any messages, images, phone numbers, or other information you send us through WhatsApp are processed by WhatsApp (owned by Meta), not by our website. WhatsApp’s own Privacy Policy applies to that conversation, and your data may be stored on servers outside the UK, including in the United States.
- What we collect via WhatsApp. To process your order, we typically need your name, phone number, delivery address, and details of the item(s) you want to buy. We only use this information to fulfil your order, arrange delivery or collection, and answer any related questions.
- How long we keep it. We keep WhatsApp order conversations and related details for as long as needed to complete your order and to meet our accounting, tax, and consumer-protection obligations, after which we delete them or remove personal details where possible.
- We do not share your WhatsApp details with third parties except where necessary to fulfil your order (for example, a courier), or where we’re required to by law.
Accounts and registration
We do not currently offer visitor registration or user accounts on this website. No sign-up or profile information is collected through the site itself.
Comments
When visitors leave comments on the site, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string, to help with spam detection.
An anonymised string created from your email address (a “hash”) may be shared with the Gravatar service to check whether you use it. Gravatar’s privacy policy is available at https://automattic.com/privacy/. If your comment is approved, your profile picture will be visible to the public alongside your comment.
Media
If you upload images to the website, avoid uploading images that include embedded location data (EXIF GPS). Visitors to the website can view and extract location data from images published on the site.
Cookies
If you leave a comment on our site, you may opt in to having your name, email address, and website saved in a cookie. This is purely for your convenience, so you don’t need to re-enter these details when you next leave a comment. These cookies last for one year.
As we don’t currently offer visitor accounts, cookies related to login and registration only apply to site administrators managing the website, not to customers or visitors.
Embedded content from other websites
Pages on this site may include embedded content (for example, videos, images, or articles from other websites). Embedded content behaves exactly as if you had visited the other website directly.
These other websites may collect data about you, use cookies, embed additional third-party tracking, and monitor how you interact with that embedded content — including tracking your interaction if you’re logged into an account on their site.
Who we share your data with
- WhatsApp / Meta — as explained above, any details you send us through WhatsApp are handled under WhatsApp’s own privacy policy.
- Delivery or courier partners, where relevant, to fulfil an order.
- Spam detection services, to help identify and filter spam comments.
- We do not sell your personal data to third parties.
How long we retain your data
- Comments and their metadata are retained indefinitely, so we can recognise and automatically approve genuine follow-up comments instead of holding them for moderation.
- As we don’t currently offer registration, we don’t hold any stored user-profile data on the site itself.
- Order details shared via WhatsApp are retained only as long as needed to fulfil your order and meet our legal obligations (see above).
What rights you have over your data
Under UK data protection law, you have the right to:
- Ask us what personal data we hold about you, and request a copy of it.
- Ask us to correct any inaccurate or incomplete data.
- Ask us to erase your personal data, except where we’re legally required to keep it (for example, for tax or accounting purposes).
- Object to, or ask us to restrict, certain uses of your data.
- Request that your data be provided to you in a portable format, where applicable.
To exercise any of these rights, contact us at [insert contact email]. If you’re unhappy with how we’ve handled your data, you also have the right to complain to the UK Information Commissioner’s Office (ICO) at https://ico.org.uk.
Where your data is sent
- Visitor comments may be checked through an automated spam-detection service.
- Messages and details sent via WhatsApp are processed by WhatsApp/Meta and may be transferred to and stored on servers outside the UK, including in the United States, under WhatsApp’s own privacy policy and safeguards.