Privacy Policy


Last Updated: April 2025


1. Introduction & Scope
We respect your privacy and are committed to protecting your personal data. This Privacy Policy
describes how The All in One Shop (“we”, “us”, “our”) collects, uses, and safeguards
information from visitors and customers (“you”) when you use our website or services. It applies
globally to all users of our site, with compliance to applicable UK data protection law and GDPR
standards for worldwide service.


2. Information We Collect
• Personal Information: When you place an order or create an account, we collect
information such as your name, billing and shipping address, email address, phone
number, and payment details. This is necessary to process transactions and deliver
products. We do not store full credit or debit card numbers; card payments are handled
securely by our payment processor (see Payment Security below).
• Browsing Information: We collect technical data when you use our site, like IP address,
browser type, device identifiers, and browsing actions. We may use cookies or similar
technologies to remember your preferences and analyze site traffic. (See Cookies below.)
• Communication Data: If you contact us (via email, contact form, or phone), we keep
records of that correspondence, including your email address and any information you
provide, to assist you and maintain service quality.


3. How We Use Your Information
We use personal information only for legitimate business purposes, including:
• Order Processing: To process and fulfill your orders, arrange delivery, and provide order
updates. This includes sharing necessary details (name, address) with our shipping
partners to deliver your goods.
• Payments: To securely process your payments via our third-party payment gateway. We
do not personally store your credit card details; all card transactions are encrypted and
handled by a PCI-DSS compliant payment processor for your security.
• Customer Service: To communicate with you regarding your orders, respond to inquiries,
handle returns or refunds, and provide support or important notices (e.g. changes to
services or policies).
• Marketing (Opt-in): With your consent, we may send newsletters or promotions about
new products or offers. You can opt out at any time. We will not spam you or share your
contact details with outside marketers without your explicit consent.
• Site Improvement & Analytics: To analyze usage of our website and improve our
services. We may use aggregated, non-identifiable data to understand customer
preferences and optimize inventory and user experience. If we use analytics or
advertising cookies, we will obtain consent where required by law.


4. Cookies and Tracking
Our website uses cookies and similar tracking technologies to enhance user experience and
gather analytical data. Cookies are small text files stored on your device when you visit our site.
They help us:


• Remember items in your shopping cart and your login sessions.
• Understand how you navigate our site (which pages you visit, in what order, etc.) so we
can make improvements.
• Deliver relevant content or advertisements (if applicable).
By using our site, you consent to the use of cookies. You can control cookies through your
browser settings and other tools; however, disabling cookies may affect site functionality (such
as the ability to add items to cart or checkout). We also respect “Do Not Track” signals as
required. For detailed information on the cookies we use, you may refer to our [Cookie Policy] if
available or contact us.


5. Disclosure of Personal Information
We treat your personal data with care and confidentiality. We do not sell or trade your personal
information to third parties. We may share data in these limited scenarios:
• Service Providers: We share necessary information with trusted third parties who perform
services on our behalf to operate our business. For example, courier/logistics companies
(for delivery), payment processors (for secure card transactions), and IT or cloud hosting
providers. These parties are contractually obligated to handle your data securely and only
for the purposes we specify.
• Legal Compliance: If required by law or legal process, we may disclose information to
authorities or regulators. For instance, we may release information to comply with a court
order, tax obligation, or lawful request by public authorities, including to meet national
security or law enforcement requirements.
• Protection of Rights: We may share information when necessary to enforce our Terms of
Service, to protect the rights, property, or safety of The All in One Shop, our customers,
or others. This includes exchanging information with other companies and organizations
for fraud prevention and credit risk reduction.


6. International Data Transfers
As we provide services worldwide, the information you provide may be transferred to or stored
on servers outside your country (including countries outside the UK or EU). We ensure such
transfers are done in accordance with applicable data protection laws. If we transfer personal
data from the UK/EEA to a third country not deemed to have adequate privacy laws, we will
implement appropriate safeguards (such as Standard Contractual Clauses or other lawful transfer
mechanisms) to protect your information. Our goal is to ensure the same level of data protection
no matter where your data is processed.


7. Data Security
We implement robust security measures to protect your personal data from unauthorized access,
alteration, disclosure, or destruction. These include encryption (for example, our site uses
HTTPS/SSL for secure data transmission), firewalls, and regular security monitoring. Our
payment transactions are processed via a secure gateway compliant with the Payment Card
Industry Data Security Standard (PCI-DSS), ensuring your card details are handled with
industry-standard protection. Internally, access to personal data is restricted to authorized
personnel who need it to perform their job duties, and they are bound by confidentiality
obligations.


8. Data Retention
We retain personal information only as long as necessary to fulfill the purposes outlined in this
Policy or to comply with legal obligations. For example:
• Order and transaction data is retained for a period required by UK financial and tax
regulations (typically 6 years) and for warranty/service purposes.
• If you create an account, we retain your account information while it remains active. You
may contact us to delete your account, in which case we will remove or anonymize
personal data associated with it, except for data we are required to keep for legal reasons.
• We periodically review the data we hold and securely delete or anonymize information
that is no longer needed.


9. Your Rights (GDPR/Data Protection)
If you are in the UK, EU, or a jurisdiction with similar data protection laws, you have certain
rights over your personal data. These include:
• Access: You have the right to request a copy of the personal data we hold about you.
• Rectification: You can ask us to correct or update inaccurate or incomplete information.
• Deletion: You have the right to request deletion of your data (“right to be forgotten”) in
certain circumstances – for example, if the data is no longer necessary for the purposes it
was collected.
• Withdrawal of Consent: Where we rely on your consent (e.g., for marketing), you can
withdraw that consent at any time.
• Objection & Restriction: You may object to our processing of your data, or ask us to
restrict processing, under certain conditions (for instance, direct marketing purposes, or if
you contest the accuracy of the data).
• Data Portability: In some cases, you can request that we provide your data in a
commonly used, machine-readable format so you can transfer it to another service
provider.
To exercise any of these rights, please contact us at support@theallinoneshop.com. We will
respond to legitimate requests as soon as possible, and at least within the timeframe required by
law (usually within one month). We may need to verify your identity before fulfilling certain
requests to ensure we protect your data from unauthorized access.
If you have concerns about our data practices, we encourage you to contact us so we can address
them. You also have the right to lodge a complaint with the UK Information Commissioner’s
Office (ICO) or your local data protection authority if you believe we have not adequately
respected your rights or data protection law.


10. Children’s Privacy
Our website and services are not intended for use by children under 16. We do not knowingly
collect personal information from anyone under the age of 16. If you are a parent or guardian and
believe your child has provided us with personal data without consent, please contact us and we
will remove the information and terminate the child’s account if applicable.


11. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business practices,
legal requirements, or for other operational reasons. If we make material changes, we will notify
users by posting the updated policy on our site and updating the “Last Updated” date above. We
encourage you to review this Policy periodically. Continued use of our services after any
changes signifies your acceptance of the revised Privacy Policy.


12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your
data, please contact our Data Protection Officer (or privacy team) at:


Email: support@theallinoneshop.com


Address: Tech Ferry LTD (The All in One Shop), 16 Stirling Court Yard, Stirling Way,
Borehamwood, WD6 2FX, United Kingdom.


We will be happy to assist you and will do our best to resolve any issue to your satisfaction.