Privacy policy

1.         INTRODUCTION

This privacy policy sets out the types of personal data that FOUDYS may collect about you when you interact with us and explains how we process your personal data.

This privacy policy applies if you are a visitor to our website or social media pages (a Website User) and/or if you purchase any products from FOUDYS app (App).  

We are responsible for deciding how we hold and use personal data we collect or receive about you. We are committed to protecting and respecting your privacy. We will ensure your personal data is stored and used in accordance with this privacy policy.

We may collect, use, store and transfer different kinds of personal data about you, for example when you contact us or when you subscribe to our newsletter, (if you are a Website User) when you visit and use our website, (if you are a Customer) when you purchase products from us.

We want you to know that we don’t sell any of the personal data you share with us or that we collect.

Please read this privacy policy carefully. This privacy policy may change from time to time. We will regularly review this privacy policy and any updates we make will be posted on our website. We encourage you to frequently check this page on our website for any changes to stay informed about how we are collecting and processing personal data about you.

This privacy policy was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of our collection and use of personal data. However, we would be happy to provide any additional information or explanation upon request. If you have any questions or concerns about any of your personal data or information contained within our privacy policy, please contact us using the details below.

1. How to contact us

Womens Football Merch is the “data controller” in respect of your personal data for the purposes of data protection legislation. FOUDYS registered office is at Empress Business Centre, 380 Chester Road, Manchester M16 9EA.

References in this privacy policy to “we”, “us” “our” and “FOUDYS” are to Women's Football Merch. 

The person responsible for data protection matters at FOUDYS.com is Helen Hardy and she can be contacted by email at hello@foudys.com.

What data do we collect?

Personal data is any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

Whenever we collect, store, use, disclose or delete your personal data, this is referred to as processing your personal data. As a Website User we will process different kinds of personal data about you. We have grouped these together in different categories below:

• Identitydata – data which identifies you including your name, title, username, gender, date of birth, age, profile photo on the App and any images of yourself which you send to us or upload to the App.
• Contactdata – your contact details such as your delivery address, billing address, telephone number(s) and email address.
• Purchasedata – information concerning the products you have purchased from us, including how frequently you purchase from us, whether you have used any discount or gift card codes or other offers, which products you have purchased and how much you have spent with us.
• Securitydata - for your security, we keep an encrypted record of your login password.
• Customer Servicedata – information relating to your interactions with our customer service team by email, phone or post or by submitting an enquiry form on our website or by reporting an issue on the App. For example, information you provide when you make a general enquiry, ask us for product advice or in the unfortunate case that you need to complain to us.
• Financialdata – data we collect if you purchase a product from us, such as your bank account and payment card details.
• Reviewdata – information you provide to us when you review our products on our website or when you provide feedback to our customer services team.
• Marketingdata – data which we capture when you sign up to receive our newsletter and other marketing communications, including your preferences regarding us contacting you in this way.
• Usagedata – information about how you use our website, including how you navigate our website, which pages you view, the advertisements you click on, any search terms you enter and if you encounter any problems. We also collect details of how you arrive at our website (eg through Google).
• Technicaldata – electronic information which is automatically logged/stored by processing equipment including details of the device(s) you use to access our services, internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website.
• Social Mediadata – data you provide to us directly about your social media accounts or which we have access to when you connect with us or like or follow our social media accounts, including your social media handle, photograph, date of birth, location, occupation, interests and other information and content you make available via your social media accounts.

We may also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage data to calculate the percentage of users accessing a specific feature of our website. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

We do not collect any special category or criminal data about you (such as information about your health, criminal record, race, political opinions, religious beliefs or your sexuality).  

4.         WHEN DO WE COLLECT YOUR DATA?

Direct interactions: Most of the personal data we hold about you is collected directly from you when you interact with us or correspond with us directly via our website or App, by email or on social media. This includes personal data you provide when you:

• visit our website;
• create an account on our website or App;
• place an order for any of our products;
• subscribe to receive our marketing communications;
• engage with us on social media, such as by following us, liking our posts, commenting on our posts or sending direct messages;
• contact us by any means including filling out an enquiry form on our website or by sending us an email;
• give us feedback;
• comment on or review our products on our website;
• comment on or like our posts in the gallery or newsfeed in the App.

Automated technology: When you visit our website, our systems will automatically collect information about your equipment, browsing actions and patterns. We collect this personal data (namely Technical and Usage data) by using cookies, tracking pixels, server logs and other similar technologies. Please see the section headed “Cookies” below.

Other third parties: We may also receive personal data about you from various third parties as set out below:

• our third party ecommerce website provider (currently Shopify) whose services enable us to process electronic orders and payments for products;
• our third party warehouse provider (currently Synergy Retail Support) who provide stock management and delivery services;
• analytics providers, such as Google Analytics and Omnisend who provide us with Technicaland Usage data;
• advertising networks, such as Google Adwords and Facebook who provide us with Technicaland Usage data; and
• operators of social media platforms, including Facebook, Instagram, Twitter, LinkedIn, YouTube and TikTok, which may be based outside of the UK and EEA.

5.         HOW AND WHY WE USE YOUR PERSONAL DATA

We only process your personal data where we have a legal basis to do so. The legal basis will vary depending on the reason we are collecting your personal data. Sometimes we might rely on more than one legal basis when we process your personal data depending on why are using your data. Please contact us at any time if you need more information about how we are using your personal data and which legal basis we are relying on. We have summarised below the legal basis we rely on to use your personal data and examples of how this works in practice:

• Where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract

We will need to process your data when you purchase products from us in order to process and deliver your order including taking payment from you. We are likely to process your Identity, Contact, Purchase, Customer Service and Financial data on this basis.

• Where we have your consent to do so, subject to your right to withdraw consent (further details provided in the section headed “What are your rights over your data" below)

            We may send you marketing communications by email if you have subscribed to receiving these communications from us.  We use Omnisend to monitor and improve the effectiveness of our marketing communications to make them more suitable for our customers. Omnisend track whether our emails are opened and which features/links recipients click on. Further information on Omnisend can be found at: https://www.omnisend.com.

            Please see the section headed “Marketing preferences” for information on how to stop direct marketing communications from us or to change your marketing preferences.

We will also obtain your consent to collect certain Usage and Technical data when we ask you to consent to cookies. Please see the section headed “Cookies” below for more information.

            Where we process information on the basis of consent, if at any time you want us to stop processing this information, you can withdraw your consent.

• Where it is necessary to comply with a legal or regulatory obligation that we are subject to

We are subject to legal and regulatory obligations that require us to process your personal data, for example, anti-money laundering obligations and consumer contracts legislation. We are likely to process your Identity, Contact, Purchase, Security, Financial, and Technical data in connection with this purpose.

• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests

Our legitimate interests in processing your personal data for our own business purposes include the following:

• To manage our relationship with you and notify you of changes to our terms and conditions or this privacy policy (which may include processing Identity, Contact, Purchase, Security, Customer Service, Review, App, Marketing, Usage, Technicaland Social Media data);
• To promote our products and our business, including via our website and App, via email, and via social media (which may include processing Identity, Contact, Purchase, Customer Service, Review, App, Marketing, Usage, Technicaland Social Media data);
• To personalise our marketing to you to provide you with a better and more engaging experience (which may include processing Identity, Contact, Purchase, Customer Service, Review, App, Marketing, Usage, Technicaland Social Media data);
• To correspond with you concerning your account for our website or App or your purchases, and to respond to your queries, refund requests and complaints (which may include processing Identity, Contact, Purchase, Customer Service, App, Marketing, Usageand Social Media data);
• To conduct our business and operate as a retailer of clothing, to further our business and community interests and operate profitably (which may include processing Identity, Contact, Purchase, Customer Service, Review, App, Marketing, Usage, Technicaland Social Media data);
• To develop and grow our business, improve our products and offerings, our website and App, and our customer service (which may include processing Identity, Contact, Purchase, Customer Service, Review, App, Marketing, Usage, Technicaland Social Media data);
• To process orders for products including managing payments and collecting and recovering money owed to us (which may include processing Identity, Contact, Purchase,Financial, Customer Service, Review,Marketing, Usage and Social Media data);
• To send you survey and feedback requests to help us improve our products and services (which may include processing Identity, Contact, Purchase, Customer Service, Review, App, Marketing, Usageand Social Media data). You may opt out of receiving these requests from us at any time by updating your marketing preferences. Please see the section headed “Marketing preferences” for more information;
• To administer and protect our business, our website, our online store and our App (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) (which may include processing Identity, Contact, Purchase, Customer Service, Review, App, Usageand Technical data);
• To create and maintain accurate business records (which may include processing Identity, Contact, Purchase, Customer Service, Review, App, Marketing, Usage, Technicaland Social Media data);
• To protect our business and financial interests and for the purpose of establishing, exercising or defending legal claims (which may include processing Identity, Contact, Purchase, Security, Customer Service, Financial, Review, App, Marketing, Usage, Technicaland Social Media data);
• To ensure our website, online store and App are being used in compliance with relevant terms and conditions (which may include processing Identity, Contact, Purchase, Security, Customer Service, Financial, Review, App, Marketing, Usage, Technicaland Social Media data); and
• For fraud prevention, anti-money laundering, and for the prevention or detection of crime (which may include processing Identity, Contact, Security, Financial, Usageand Technical data).

6.         CHANGE OF PURPOSE

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we wish to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

We may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

7.         IF YOU FAIL TO PROVIDE PERSONAL DATA

Where we need to collect personal data from you in order to comply with our legal obligations or to perform a contract we have with you and you fail to provide that data when requested, we may not be able to perform the relevant contract (for example, to deliver your products or process your payment). In this case, we may have to cancel the relevant contract.

8.         SECURITY

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Your personal data is only available to authorised personnel of FOUDYS who need access to the information in order to fulfil their duties. All FOUDYS personnel who have access to your personal data will only process your personal data on our instructions and they shall be subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Unfortunately, however, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

9.         HOW LONG WILL WE KEEP YOUR DATA?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In relation to marketing consents, we may ask for your updated consent from time to time if we have not heard from you in a while to check that you still want to receive our emails. If you decide to opt-out we will keep a record of this alongside your email address or other contact details to ensure that we do not send you marketing communications going forward.

In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) in order to develop our business methods and strategy or for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

We shall not have any liability whatsoever to you for the deletion of personal data in accordance with our data retention policy.

10.       WHO DO WE SHARE YOUR DATA WITH?

We may share your personal data with the following third parties in order to perform a contract with you, comply with a legal or regulatory obligation, in our legitimate interests of conducting our business or where you have consented:

• Third parties who support our website and our App and provide other business systems, such as Shopify and PADOQ;
• Any third party warehouse providers
• Operational companies such as delivery couriers;
• Third party payment providers and ‘buy now, pay later’ finance providers such as Stripe, Klarna, Clearpay and PayPal;
• Our accounting software provider, Xero.
• Data analytics companies such as Google Analytics;
• Marketing and advertising providers such as Omnisend;
• Social media platforms and online search engines, such as Facebook, Instagram, Twitter, LinkedIn, YouTube and TikTok, to show you products that might interest you while you’re browsing the internet and using social media platforms.
• Third parties to whom we may choose to sell, transfer or merge parts of our business or assets. Alternatively, we may seek to acquire other businesses or merge with them.
• Other companies and organisations for the purposes of fraud protection and credit risk reduction, HM Revenue & Customs, the police, regulators and other authorities and public bodies.
• Professional advisers, including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accountancy services.

We require all our data processors to respect the security of your personal data and to treat it in accordance with the law. We do not allow our data processors to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

In some instances where we share data with third parties, such as HMRC, those third parties will also be controllers of your personal data. We shall not be responsible or liable for the way in which other data controllers hold or process your personal data. Please contact those third parties for further information regarding how they will use your data. We shall only share your personal data with third parties in accordance with this privacy policy.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data outside of the UK.

In the case of data processed by Shopify, our ecommerce provider, details of the data transfers which they make outside the UK can be found at: https://help.shopify.com/pdf/cross-border-whitepaper.pdf

12.       WHAT ARE YOUR RIGHTS OVER YOUR DATA?

You have certain rights in respect of the personal data that we process about you (where we are the data controller because we determine the purpose and means for which that personal data shall be processed):

• the right to request access to your personal data that we hold and to receive certain information relating to that data;
• the right to ask us to rectify inaccurate data or to complete incomplete data;
• the right to receive or ask for your personal data to be transferred to a third party in a structured, commonly used and machine-readable format (note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you);
• the right to request the erasure of personal data if it is no longer necessary in relation to the purposes for which it was collected or processed or if you have successfully objected to processing (note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request);
• the right to object to how we process your personal data in certain circumstances, including the right to ask us not to process your personal data for marketing purposes;
• the right to restrict processing of your personal data, for example if you want us to establish the accuracy of the data or you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it; and
• where we are processing personal data relating to you on the basis that we have your consent to do so, you may withdraw your consent at any time (this will not affect the lawfulness of any processing carried out before you withdraw your consent). If you withdraw your consent, we may not be able to provide certain products or services to you.

If you wish to exercise any of the other rights set out above, please contact us by email at hello@foudys.com

We may ask you to verify your identity if you make a request to us to exercise any of the rights set out above. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We will try to respond to all legitimate requests. Occasionally, it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

13.       MARKETING PREFERENCES

There are several ways you can stop direct marketing communications from us:

• You can click the ‘unsubscribe’ link in any email communication that we send you.
• You can contact us at hello@foudys.com.

Please note that you may continue to receive communications for a short period after changing your preferences while our systems are fully updated

14. Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and to improve our website, products and services. You can find out more about the way cookies work on www.cookiecentral.com and www.allaboutcookies.org.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies (and the above websites tell you how to do this). If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly.

15.       LINKS TO OTHER WEBSITES

Our website and App may contain links to other websites of interest. We do not control the content of these third party websites. We encourage you to read the privacy policies for these third party websites before submitting personal information to them. Where these third parties are collecting data on our behalf, your personal data will be transferred to us and used in accordance with this privacy policy. Alternatively, if the third party has not been authorised to collect information on our behalf, your personal data will be controlled by that third party subject to their privacy policy.

16.       HOW TO COMPLAIN

Please let us know if you are unhappy with how we have used your personal data. You can contact us by email at hello@foudys.com.

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please do contact us in the first instance and we shall endeavour to resolve your complaint.

17.       CHANGES TO YOUR DATA

It is important that the personal data we hold about you is accurate and current. Please let us know if your contact details change during your relationship with us. You have the right to question any information we hold about you that you think is wrong or incomplete. Please contact us if you want to do this.

This privacy policy was last updated in April 2024.