Privacy Policy

Last updated: 8 June 2026

This privacy policy explains how Stourvale Consultancy Limited (trading as DON'T LOSE YOU, "we", "us", "our") collects, uses and protects your personal data when you use our website https://www.dontloseyou.co.uk or buy our products. We are the data controller responsible for your personal data.

Who we are

Stourvale Consultancy Limited (Company No. 10768372), registered office: 29 Solent Road, Bournemouth, BH6 4BP, England.

What data we collect

  • Account & order data: name, email, billing/delivery address, phone number, order history.
  • Payment data: processed securely by Shopify Payments and Shop Pay — we do not store full card details on our servers.
  • Usage data: IP address, browser type, device type, pages visited, referral source, via Google Analytics 4, Microsoft Clarity and the Meta Pixel.
  • Communication data: messages you send via our contact form, email, or social media.

How we use your data

  • To fulfil your orders (process payment, ship products, handle returns) — legal basis: contract.
  • To manage your subscription, including recurring billing and shipping — legal basis: contract.
  • To respond to your enquiries — legal basis: legitimate interest.
  • To send you transactional emails (order confirmations, shipping notifications) — legal basis: contract.
  • To send marketing emails (only if you've opted in) — legal basis: consent. You can unsubscribe at any time using the link in any marketing email.
  • To analyse website performance and improve our services — legal basis: legitimate interest. You can opt out via the cookie banner.
  • To comply with legal obligations (tax records, fraud prevention) — legal basis: legal obligation.

Who we share your data with

We share limited data only with service providers who help us run the business:

  • Shopify Inc. — e-commerce platform, payments, hosting.
  • Royal Mail — order delivery (name, address only).
  • Klaviyo — email marketing (if you've opted in).
  • Google (Analytics, Ads), Meta (Pixel, Ads), Microsoft (Clarity) — anonymised analytics and advertising.

We never sell your personal data to third parties.

International transfers

Some of our service providers (e.g. Google, Meta) are based outside the UK. When data is transferred outside the UK/EEA, we ensure adequate safeguards are in place (Standard Contractual Clauses or adequacy decisions).

How long we keep your data

  • Order and accounting records: 7 years (HMRC requirement).
  • Marketing data: until you unsubscribe or 3 years of inactivity, whichever is sooner.
  • Website analytics: 14 months (GA4 default).

Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request erasure ("right to be forgotten")
  • Object to processing
  • Request data portability
  • Withdraw consent at any time
  • Lodge a complaint with the Information Commissioner's Office (ico.org.uk)

To exercise any of these rights, contact us via our contact form.

Cookies

We use cookies to make the website work, remember your preferences, and analyse usage. You can manage cookies via your browser settings. Some cookies are essential for the website to function; others are optional and only set with your consent.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the latest version.

Contact

For any data protection question or to exercise your rights, please use our contact form.