Privacy Policy
This policy explains what personal data Net-workwear collects, why we collect it, how long we keep it and what rights you have. It is written to meet the UK GDPR and the Data Protection Act 2018.
Last updated: 10 August 2026
1. Who is the data controller
Net-workwear, Harrogate, North Yorkshire, United Kingdom, is the controller of personal data collected through this website. Contact us about privacy at info@net-workwear.co.uk or 01423 866609.
2. What we collect
- Contact and order details — name, business name, email, phone, delivery and billing address, order contents, sizes and quantities.
- Artwork you upload — logo files and design mock-ups created in our design studio, plus any notes you add.
- Trade account data — email address and authentication data used to sign in, and your order history.
- Quotes, price match and enquiry forms — anything you send us, including invoices or quotes you upload for a price match.
- Payment data — processed by Stripe. We receive confirmation and the last four digits of the card only; we never see or store full card numbers.
- Technical data — IP address, device and browser type, and pages viewed, collected through essential and (with consent) analytics cookies.
- Assistant conversations — messages you send to our on-site AI assistant.
3. Why we use it and our lawful basis
- To quote, produce and deliver your order — performance of a contract, or steps taken at your request before entering one.
- To run trade accounts and customer support — performance of a contract and our legitimate interest in servicing customers.
- To keep accounting and VAT records — legal obligation.
- To improve the site and prevent fraud or abuse — legitimate interests.
- Analytics and marketing emails — your consent, which you can withdraw at any time. Existing customers may receive service-related emails about similar products under the soft opt-in, with an unsubscribe link in every message.
4. Who we share it with
We share only what is necessary with: our production and garment suppliers; delivery carriers including Royal Mail; Stripe for payments; Supabase for database, authentication and secure file storage; our email delivery provider; Google (AI assistant responses and, with consent, analytics); and our accountant. All act under contract and are not permitted to use your data for their own purposes. We never sell personal data.
5. International transfers
Some providers process data outside the UK. Where they do, transfers are protected by UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.
6. How long we keep it
- Order, invoice and VAT records — 6 years after the end of the relevant tax year.
- Artwork and digitised embroidery files — for as long as you remain a customer, so repeat orders match, then deleted on request.
- Quote and price match enquiries that do not become orders — 24 months.
- Trade account data — until you ask us to close the account.
- Marketing consent records — until you unsubscribe, plus 2 years as proof of consent.
7. Security
Data is transmitted over HTTPS and stored in access-controlled systems. Uploaded artwork is held in a private storage bucket with row-level security, so files are only reachable by us and by the account that uploaded them. Access is limited to staff who need it.
8. Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise any of these, email info@net-workwear.co.uk. We respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113.
9. Children
This is a business-to-business site and is not directed at children. We do not knowingly collect data from anyone under 16.
10. Cookies
For details of the cookies we set and how to change your choices, see our cookie policy.
