PRIVACY POLICY.

This policy explains how SneaksWash Ltd ("SneaksWash", "we", "us") collects and processes your personal data when you use our sneaker cleaning and restoration service. We are the data controller for the personal data we hold about you.

• ✛Company: SneaksWash Ltd (registered in England & Wales, company no. 15573296)
• ✛Registered office: Store First, Unit 2 Clarke Industrial Estate, St. Modwen Road, Trafford Park, Manchester, M32 0ZF, United Kingdom
• ✛Email: info@sneakswash.com

We process personal data in accordance with the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

We collect only what we need to provide and improve our service:

• ✛Identity & contact data — your name, email address, phone number, and collection/delivery address.
• ✛Order data — the sneakers you send us, their condition, the services you book, and any notes or photos you provide.
• ✛Payment data — card payments are processed securely by Stripe. We do not see or store your full card number; we receive only a confirmation and limited transaction details.
• ✛Account data — if you create an account, login credentials managed by our authentication provider (Clerk).
• ✛Technical & usage data — IP address, device/browser type, and how you interact with the site, collected via cookies and similar technologies (see our Cookie Policy).
• ✛Communications — messages you send us by email, form, or social media.

Under UK GDPR we must have a lawful basis for each use of your data:

• ✛To fulfil your order — booking, collecting, cleaning, and returning your sneakers, and taking payment. Legal basis: performance of a contract.
• ✛To communicate with you — order updates, enquiries, and support. Legal basis: performance of a contract / legitimate interests.
• ✛To run and improve our business — analytics, security, fraud prevention, and record-keeping. Legal basis: legitimate interests.
• ✛Marketing — sending you offers and updates. Legal basis: consent (you can opt out at any time).
• ✛Legal compliance — tax, accounting, and other legal obligations. Legal basis: legal obligation.

We never sell your data. We share it only with trusted service providers ("processors") who help us run the service, and only for the purposes described above:

• ✛Stripe — secure payment processing.
• ✛Convex — database hosting for your orders and account data.
• ✛Clerk — account authentication and login.
• ✛Resend — sending transactional and order-related emails.
• ✛Vercel — website hosting and privacy-friendly analytics.
• ✛Sentry — error monitoring to keep the site secure and working.

Each processor is bound by a data processing agreement and may only use your data on our instructions. We may also disclose data where required by law or to protect our legal rights.

Some of our providers are based outside the UK (for example in the United States). Where your data is transferred abroad, we ensure an equivalent level of protection through safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or a UK adequacy decision.

We keep personal data only as long as necessary for the purposes we collected it, including to satisfy legal, accounting, or reporting requirements. Order and transaction records are typically retained for up to 6 years to meet UK tax and accounting obligations. Marketing preferences are kept until you unsubscribe. When data is no longer needed, we securely delete or anonymise it.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and trusted, security-vetted providers. No system is 100% secure, but we take reasonable steps to guard against unauthorised access, loss, or misuse.

Under UK GDPR you have the right to:

• ✛Access — request a copy of the data we hold about you.
• ✛Rectification — ask us to correct inaccurate or incomplete data.
• ✛Erasure — ask us to delete your data ("right to be forgotten").
• ✛Restriction — ask us to limit how we use your data.
• ✛Portability — receive your data in a portable format.
• ✛Object — object to processing based on legitimate interests or to direct marketing.
• ✛Withdraw consent — where we rely on consent, withdraw it at any time.

To exercise any of these rights, email us at info@sneakswash.com. We will respond within one month. Exercising your rights is free of charge.

We use cookies and similar technologies to run the site, keep it secure, and understand how it is used. You can control non-essential cookies through our consent banner. For full details, see our Cookie Policy.

Our service is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy from time to time. The "last updated" date at the top shows when it was last revised. Significant changes will be highlighted on this page.

If you have a concern about how we handle your data, please contact us first at info@sneakswash.com. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.