Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Propinout, operated by [FULL LEGAL NAME] trading as Propinout ([REGISTERED ADDRESS, CITY, POSTCODE]), collects, uses, stores, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

5.1 Data We Collect

We collect the following personal data when you use our website or make a purchase:

Information you provide directly:

• Full name and delivery address
• Email address
• Phone number (if provided)
• Payment details (processed securely by our payment provider — we do not store card details)
• Account login credentials (if you register an account)
• Communications you send to us

Information collected automatically:

• IP address and browser type
• Pages visited and time spent on site
• Referring website or search terms
• Cookie data (see Section 5.7)

5.2 How We Use Your Data

We process your personal data for the following purposes:

• To process and fulfil your orders and communicate order status
• To share necessary order details with the relevant vendor for fulfilment
• To handle returns, refunds, and complaints
• To send transactional emails relating to your purchase
• To maintain your account if you have registered
• To comply with our legal obligations
• To improve our website and services (using anonymised analytics data)
• To send marketing communications, only where you have given explicit consent

5.3 Legal Basis for Processing

We rely on the following lawful bases under UK GDPR:

• Contract performance — to process your order and fulfil our obligations to you.
• Legal obligation — to comply with UK consumer law and tax obligations.
• Legitimate interests — to operate and improve our marketplace, detect fraud, and maintain security.
• Consent — for marketing emails and non-essential cookies.

5.4 Sharing Your Data

We share your personal data only where necessary:

• With the vendor fulfilling your order (name, delivery address, order details).
• With our payment processor to handle your transaction securely.
• With delivery/courier services engaged by vendors to fulfil your order.
• With our website hosting and IT service providers.
• With regulators or law enforcement where required by law.

We do not sell your personal data to third parties for marketing purposes.

5.5 Data Retention

• Order and transaction records are retained for 7 years for tax and legal compliance purposes.
• Account data is retained for as long as your account is active, plus 2 years.
• Marketing consent records are retained until you withdraw consent.
• Analytics data is retained in anonymised form indefinitely.

5.6 Your Rights

Under UK GDPR, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate data.
• Right to erasure — to request deletion of your data, subject to legal retention obligations.
• Right to restrict processing — to ask us to limit how we use your data.
• Right to data portability — to receive your data in a portable format.
• Right to object — to object to processing based on legitimate interests.
• Right to withdraw consent — for marketing or non-essential cookies at any time.

To exercise any of these rights, contact us at contact@propinout.com. We will respond within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

5.7 Cookies

We use cookies and similar tracking technologies on www.propinout.com. Cookies are small text files placed on your device.

Essential cookies (no consent required):

• Session cookies to maintain your shopping basket and login state.
• Security cookies to protect against fraud.

Analytics cookies (consent required):

• We use anonymised analytics to understand how visitors use our site and improve it.

Marketing cookies (consent required):

• Used only where you have given explicit consent to receive personalised marketing.

You can manage cookie preferences via our cookie banner or your browser settings. Withdrawing consent for non-essential cookies will not affect your ability to use the site.

5.8 Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Our website uses SSL encryption for all data transmission. Payment processing is handled by PCI-DSS compliant third-party payment providers.

5.9 Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email (where we hold your address) or by a prominent notice on our website. The date at the top of this document reflects the most recent revision.