Privacy policy
We collect what is needed to take an order, run an optional account, and show tracking to the person who placed it.
This page describes current storefront practice as of 15 September 2026. It is not legal advice. Company number, VAT number, and registered office will be published here when they are confirmed.
Who is responsible
SHADESUK is the name of this UK eyewear storefront. Company number, VAT number, and registered office are not published here yet. Do not treat any other number or address as ours.
Until a privacy email is published, use the Contact page. Do not send copies of identity documents to unofficial addresses.
What we collect
If you check out, we need an email, name, and UK delivery address, plus the products and quantities in the order.
If you create an account, we also keep sign-in details and any addresses you save.
Guest order tracking asks for an order reference and email so we can show that order to you and not to someone else.
Why we use it
To fulfil a contract: take the order, dispatch it, and show tracking.
To meet legal duties that apply to sales records.
To keep the storefront secure, including limits on repeated tracking lookups.
Who we share it with
Payment details, when payment is live, go to the payment provider — not into a SHADESUK card vault.
Carriers and fulfilment partners receive what they need to move a parcel.
Hosting and authentication providers process data to run the site.
We do not sell personal data.
How long we keep it
Order records are kept for as long as needed to fulfil, handle rights, and meet accounting or tax rules.
Account data stays until you close the account, subject to those same duties.
Guest bag and checkout cookies expire; see the cookie policy.
Your rights
Under UK GDPR you can ask for access, correction, deletion, restriction, objection, or portability, and you can complain to the ICO.
Some rights yield where we must keep a record. We will not pretend a right has been refused because a form is missing.
Transfers
The site is hosted on cloud infrastructure. If personal data leaves the UK, it should only do so with a lawful transfer mechanism. Specific processors will be named when they are contracted and confirmed.