Privacy notice

This notice explains how Shop Green Today Ltd, trading as Pokeboo UK, collects and uses personal information when you visit pokeboo.uk, buy from us, contact us, subscribe, submit a review, use chat, interact with our advertising or social channels, or otherwise deal with us.

1. Who we are

Shop Green Today Ltd is the controller responsible for the personal information described in this notice.

 

We have not appointed a statutory data protection officer. Privacy enquiries and complaints are handled through the contact above.

2. Information we collect

·        Identity and contact information, such as name, billing and delivery address, email address, telephone number and account identifiers.

·        Order and transaction information, such as products, size, value, discounts, payment status, delivery and return history. We do not receive full payment-card numbers.

·        Account, preference and marketing information, including login/account details, consent choices, subscriptions, saved preferences and back-in-stock requests.

·        Communications and content, including emails, contact forms, chat messages, complaints, reviews, photographs or videos you choose to submit and social-media interactions.

·        Technical and usage information, including IP address, cookie or device identifiers, browser/device details, approximate location, referring pages, viewed products, searches, basket and checkout events, purchases, advertising interactions and session information.

·        Fraud, security and compliance information, including risk signals, authentication results and records needed to meet legal obligations or resolve disputes.

We receive information directly from you, automatically from your device, and from service providers, payment providers, delivery carriers, advertising platforms, social networks and marketplaces where applicable.

3. Why we use information and our lawful bases

 

Where we rely on legitimate interests, those interests include operating and protecting the business, providing effective support, improving services, preventing fraud and understanding performance. We consider the effect on individuals and do not use this basis where their rights override our interests.

4. Marketing and advertising

We use Shopify Email for subscriber and customer email marketing. You can unsubscribe using the link in any marketing email or by contacting us. Service messages about an order are not marketing and may continue where needed.

With the required consent, we and advertising partners may use cookies, pixels, server-side events and similar technologies to measure advertising, attribute purchases, limit repetition, personalise adverts and create or reach audiences. Current platforms may include Google, Microsoft, Pinterest, Meta, TikTok and Reddit. Depending on settings, events may include pages viewed, products viewed, basket and checkout activity, purchases, order values and identifiers used for customer matching, such as email address, telephone number or customer ID. Identifiers may be hashed or otherwise protected where supported, but the receiving platform can still use them to attempt a match.

You can withdraw cookie consent through Cookie preferences. Withdrawing consent does not affect processing already carried out lawfully. You can also adjust advertising preferences with the relevant platform.

5. Shopify and Network Intelligence

Our store is hosted by Shopify. Shopify provides storefront, checkout, customer accounts, Shop, Shop Pay, analytics, email, inbox/chat, automation, fraud-prevention and related services. Shopify Network Intelligence is currently enabled. This allows eligible customer and store information to be used with Shopify’s network data to improve Shopify services, fraud protection, measurement, recommendations, advertising and personalisation as described in Shopify’s notices and terms. Shopify may act as our processor for some activities and as a separate controller for others. You can use the store’s privacy controls and Shopify’s own privacy facilities where applicable.

6. Who receives information

·        Shopify group companies and Shopify service providers.

·        Payment and wallet providers, including Shopify Payments and its banking/payment partners, Shop Pay, PayPal, Google Pay and any other option displayed at checkout.

·        Royal Mail and other delivery, returns, customs or fulfilment providers.

·        Advertising, analytics and social platforms, currently including Google/YouTube, Microsoft Advertising and Clarity, Pinterest, Meta, TikTok and Reddit, subject to consent and configuration.

·        Operational apps and providers described in the service-provider register, including Judge.me, Swym Back in Stock Alerts, Shopify Inbox/Messaging, Proof Bear, Conversion Bear and store optimisation tools where they process relevant information.

·        Professional advisers, insurers, banks, accountants, auditors, IT/security providers, regulators, courts, law enforcement or prospective purchasers of the business where lawful and necessary.

·        Marketplaces connected through Marketplace Connect, but only when a marketplace is actively used for listing or fulfilling an order.

7. Social media and embedded content

Pokeboo maintains profiles or links on services such as TikTok, Instagram, Facebook, Pinterest, YouTube and Reddit. If you interact with us there, the platform also processes information under its own privacy notice and may act as a separate controller. Public posts, comments and tags may be visible to others. Embedded YouTube content and social sharing features may receive technical and usage information when loaded, depending on consent and platform behaviour.

8. International transfers

Some providers process information outside the UK, including in the United States and other countries. Where required, we use an adequacy regulation, the UK International Data Transfer Agreement or UK Addendum to approved standard contractual clauses, or another lawful safeguard. Providers may also rely on their own approved transfer mechanisms. Contact us for information about the safeguard relevant to a particular transfer.

9. Retention

We keep information only for as long as reasonably needed for the purpose collected, including legal, tax, accounting, product-safety, fraud and dispute requirements. Our intended working periods are:

 

Third-party platforms apply their own retention periods. We will periodically review these periods and amend them if legal or operational needs change.

10. Your rights

Depending on the circumstances, you may have rights to be informed; access your information; correct inaccurate information; erase information; restrict processing; object to processing, including direct marketing; receive certain information in a portable format; withdraw consent; and ask for safeguards around significant automated decisions. These rights are not absolute. We may need information to verify your identity and will normally respond within one month, subject to lawful extensions.

11. Data-protection complaints

Email hello@pokeboo.uk with the subject ‘Data protection complaint’, or use the electronic contact form on pokeboo.uk. Explain what happened and the outcome you want. We will acknowledge a data-protection complaint within 30 days and investigate and respond without undue delay. We may ask for information needed to verify identity or understand the issue.

You may also complain to the Information Commissioner’s Office (ICO), the UK regulator. Visit ico.org.uk/make-a-complaint or telephone 0303 123 1113. We would appreciate the opportunity to address your concern first, but you do not have to contact us before approaching the ICO.

12. Children, security and changes

Our store is directed at a general adult shopping audience and is not designed to collect personal information from children independently. If you believe a child has provided information inappropriately, contact us. Where children are likely to access our service, we will take their needs into account. We use proportionate organisational and technical safeguards, although no system is completely secure. We may update this notice when laws, services or data uses change; the current version and date will be published here and material changes highlighted where appropriate.