Effective date: 01/01/2025

1. Who we are

1.1 This Privacy Policy explains how we collect, use and protect your personal data when you use our websites and services.

1.2 We are:

• Britek T/A Big Wight Embroidery & Print
• We may also trade as BigWight.com and Big Wight T‑Shirt Co.
• Business address:
  Britek
  Big Wight Embroidery & Print
  Daish Way
  Newport
  Isle of Wight
  PO30 5XB
  United Kingdom
• VAT number: 615459728
• Contact email: sales@bigwight.com

1.3 For the purposes of applicable data protection law (including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018), we are the data controller of the personal data we collect from you.

1.4 By using our websites or providing us with your personal data, you acknowledge that you have read this Privacy Policy.

2. Our websites and what this policy covers

2.1 This Privacy Policy applies to:

• www.bigwight.com
• www.bigwight.co.uk

2.2 It covers personal data we collect when you:

• browse our websites,
• create an account,
• place an order,
• sign up to our mailing list or marketing communications,
• contact us by email, phone, post or contact form, or
• interact with us through social media.

2.3 It does not cover the privacy practices of any third‑party websites or services that may be linked from our websites. You should check the privacy policies of those third parties.

3. The personal data we collect

3.1 The personal data we collect may include:

Identity and contact details

• Name
• Billing address
• Delivery address
• Email address
• Telephone number

Account information

• Username / login details (we never see your plain‑text password)
• Order history
• Preferences and saved details associated with your account

Order and payment information

• Products you have ordered
• Order values, discounts and VAT information
• Limited payment information (e.g. transaction references, last 4 digits of card where applicable). Full card details are processed by our payment providers and are not stored by us.

Communication data

• Messages you send via contact forms, email or post
• Enquiries about products, quotes or orders
• Records of correspondence and any complaints

Marketing preferences

• Your choices about receiving marketing emails or newsletters

Technical and usage data

• IP address
• Browser type and version
• Device and operating system
• Pages visited, time and date of visits, referring website
• Information about how you interact with our websites (for example, which links you click)

We collect this technical information mainly through cookies and similar technologies (see section 7 below).

4. How we collect your personal data

We collect personal data in several ways, including:

4.1 Directly from you, for example when you:

• create an account,
• place an order,
• request a quote,
• contact us,
• subscribe to our mailing list, or
• enter a promotion or survey.

4.2 Automatically, when you visit our websites, using cookies and similar technologies (see section 7).

4.3 From third parties, for example:

• payment providers who confirm that a payment has been made,
• delivery and courier services who provide tracking and delivery updates,
• analytics and advertising providers who help us understand how our sites are used.

5. How and why we use your personal data

We use your personal data for the following purposes and on the following legal bases:

5.1 To process and fulfil your orders

• To receive and process your order
• To take payment and provide invoices
• To arrange delivery and handle returns or exchanges

Legal basis: performance of a contract with you; compliance with legal obligations (e.g. tax and accounting).

5.2 To provide and manage your account

• To set up and maintain your online account
• To allow you to view order history and saved details

Legal basis: performance of a contract with you; our legitimate interest in providing account features.

5.3 To respond to enquiries and provide customer support

• To answer questions, provide quotes and handle complaints

Legal basis: performance of a contract or taking steps at your request before entering into a contract; our legitimate interest in providing good customer service.

5.4 To send you service communications

• Order confirmations and updates
• Delivery notifications
• Changes to our terms or policies

Legal basis: performance of a contract; compliance with legal obligations.

5.5 Marketing communications (with your consent or where permitted by law)

• To send you news, offers and information about our products and services
• To tailor marketing based on your previous purchases or interests, where lawful

Legal basis: your consent (for example, when you opt in to our mailing list) and/or our legitimate interests in promoting our business, in accordance with the Privacy and Electronic Communications Regulations ("PECR"). You can opt out at any time – see section 9.4.

5.6 To improve our websites, products and services

• To understand how visitors use our sites
• To diagnose technical issues and maintain security
• To develop new products and improve our range

Legal basis: our legitimate interest in running, improving and securing our business and websites.

5.7 To comply with legal and regulatory obligations

• To keep appropriate business and tax records
• To respond to lawful requests from authorities

Legal basis: compliance with legal obligations.

6. Sharing your personal data

We do not sell your personal data.

We may share your data with:

6.1 Service providers and suppliers

• website hosting and IT support providers,
• payment processors (for example, card processors or online payment services),
• delivery and courier companies,
• email and newsletter service providers,
• customer relationship or order management systems,
• professional advisers (such as accountants or auditors).

They only have access to the data they need to perform their services and are required to keep it secure and confidential.

6.2 Payment providers

If you choose to pay using certain payment methods (for example, credit/debit card or online payment services), your payment will be processed directly by those providers and subject to their own privacy policies. We receive confirmation of payment and limited payment details but not your full card information.

6.3 Legal and regulatory bodies

We may disclose your data where required to do so by law, or in order to protect our rights, property, safety or the rights, property and safety of others (for example, to prevent fraud).

6.4 Business transfers

If we sell, transfer or merge parts of our business, your personal data may be transferred to the new owner so that they can continue to provide the services to you, subject to the same protections.

7. Cookies and similar technologies

7.1 Our websites use cookies and similar technologies to:

• make the websites work properly,
• remember your preferences (such as items in your basket),
• analyse how our websites are used,
• support security and fraud prevention, and
• (where enabled) help us deliver relevant marketing.

7.2 Some cookies are strictly necessary for the operation of the site (for example, to keep you logged in or to process your order). Others may be performance, functional or targeting cookies.

7.3 Where required by law, we will ask for your consent before placing non‑essential cookies on your device. You can usually manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect how our websites function.

7.4 For more detailed information about the specific cookies we use, please refer to our cookie information (if provided) or contact us using the details in section 11.

8. International transfers

8.1 Some of our service providers may be located outside the United Kingdom, or may store data on servers outside the UK.

8.2 Where we transfer your personal data outside the UK, we will ensure that appropriate safeguards are in place, such as:

• an adequacy decision by the UK government; or
• standard contractual clauses or other legally recognised transfer mechanisms.

8.3 You can contact us if you would like more information about the safeguards used for international transfers.

9. How long we keep your data

9.1 We keep your personal data only for as long as reasonably necessary for the purposes set out in this Privacy Policy, including:

• for as long as you have an active account with us,
• for as long as we need to supply products or services and handle any enquiries or complaints, and
• for as long as required by law (for example, tax and accounting record‑keeping).

9.2 After these periods, we will either delete or anonymise your data so that it can no longer be linked to you.

10. Your rights

Under the UK GDPR and Data Protection Act 2018, you have certain rights in relation to your personal data, including:

10.1 Right of access

To request a copy of the personal data we hold about you.

10.2 Right to rectification

To ask us to correct any inaccurate or incomplete data.

10.3 Right to erasure

To request that we delete your personal data in certain circumstances (for example, where it is no longer needed for the purpose it was collected).

10.4 Right to restrict processing

To ask us to restrict how we use your data in certain circumstances.

10.5 Right to data portability

To receive certain personal data in a structured, commonly used and machine‑readable format and/or have it transmitted to another controller, where technically feasible.

10.6 Right to object

To object to our processing of your data where we are relying on legitimate interests; and to object at any time to the use of your personal data for direct marketing.

10.7 Rights in relation to automated decision‑making and profiling

We do not carry out automated decision‑making that produces legal or similarly significant effects solely using automated means.

10.8 How to exercise your rights

To exercise any of these rights, please contact us using the details in section 11. We may need to verify your identity before fulfilling your request.

11. How to contact us about data protection

If you have any questions about this Privacy Policy, our use of your personal data, or if you wish to exercise your rights, you can contact us at:

• Email: sales@bigwight.com
• Post:
  Britek
  Big Wight Embroidery & Print
  Daish Way
  Newport
  Isle of Wight
  PO30 5XB
  United Kingdom

12. Complaints

12.1 We hope we can resolve any concerns you may have about our use of your personal data. You can contact us using the details above.

12.2 You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK data protection regulator. Details of how to do this are available at:

• Website: www.ico.org.uk
• Telephone: 0303 123 1113 (UK)

13. Changes to this Privacy Policy

13.1 We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

13.2 We recommend that you review this page periodically to stay informed about how we use your personal data.