Privacy Policy | Urban54

1. Who We Are

Urban54 is a trading name of BK Safety & Workwear Limited. We are the data controller responsible for your personal data. If you have any questions about this privacy policy or our data practices, please contact us at [email protected] or call 01onal 446000.

2. Data We Collect

We may collect and process the following personal data:

Identity data: name, username, title.
Contact data: billing address, delivery address, email address, telephone number.
Financial data: payment card details (processed securely by our payment provider; we do not store full card numbers).
Transaction data: details of products you have purchased from us, order history, and payment records.
Technical data: IP address, browser type and version, time zone, operating system, and platform.
Usage data: information about how you use our website, products, and services.
Marketing data: your preferences for receiving marketing from us and communication preferences.

3. How We Use Your Data

We use your personal data for the following purposes:

To register you as a new customer and manage your account.
To process and deliver your orders, including managing payments, fees, and charges.
To communicate with you about your orders, including delivery updates.
To manage our relationship with you, including notifying you about changes to our terms or privacy policy.
To administer and protect our business and this website.
To deliver relevant content and advertisements to you and measure their effectiveness.
To make suggestions and recommendations about products that may interest you.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing your personal data are:

Contract: processing is necessary for the performance of a contract with you (e.g., fulfilling your order).
Legitimate interests: processing is necessary for our legitimate interests (e.g., improving our services, fraud prevention).
Consent: where you have given clear consent for us to process your data for a specific purpose (e.g., marketing emails).
Legal obligation: processing is necessary to comply with a legal obligation.

5. Cookies

Our website uses cookies to distinguish you from other users and to provide a better browsing experience. For detailed information about the cookies we use and the purposes for which we use them, please see our Cookie Policy.

6. Payment Processing

All payment transactions are processed through our secure payment gateway. We do not store your full credit or debit card details on our servers. Payment information is encrypted using SSL technology and processed in accordance with PCI DSS (Payment Card Industry Data Security Standard) requirements.

7. Third Parties

We may share your personal data with the following categories of third parties:

Delivery partners: courier and logistics companies to fulfil your orders (e.g., FedEx).
Payment processors: to securely handle payment transactions.
Analytics providers: to help us understand website usage and improve our services.
Marketing platforms: if you have opted in to receive marketing communications.
Legal and regulatory authorities: where we are required to do so by law.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

8. Data Retention

We will retain your personal data only for as long as reasonably necessary to fulfil the purposes we collected it for, including satisfying any legal, regulatory, tax, accounting, or reporting requirements. Typically:

Order and transaction data: 7 years (for tax and accounting purposes).
Account data: for as long as your account is active, plus 2 years after closure.
Marketing preferences: until you withdraw consent.
Website analytics data: 26 months.

9. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right of access: request a copy of the personal data we hold about you.
Right to rectification: request correction of inaccurate or incomplete data.
Right to erasure: request deletion of your personal data in certain circumstances.
Right to restrict processing: request that we limit the processing of your data.
Right to data portability: request transfer of your data to another party.
Right to object: object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.