Privacy Policy
This policy explains what personal data Trendupia Ltd collects, why we collect it, how we use it and what rights you have. We are the data controller for the information described here. Last updated 3 September 2026.
Who we are
Trendupia Ltd, Flat 2, 4 Mayfield Road, Manchester, M16 8FT, United Kingdom.
Email: contact@trendupia.com
We are registered in England and Wales under company number 17414876, and we handle personal data in line with the UK GDPR and the Data Protection Act 2018.
What we collect
When you place an order: your name, billing and delivery address, email address, phone number, order details and delivery preference. Payment card details are entered directly into our payment provider’s secure form and are never seen or stored by us.
When you create an account: your name, email address, password in encrypted form, and your order history.
When you contact us: your name, email address and the content of your message.
When you subscribe to our newsletter: your email address and the fact that you consented.
When you browse the site: IP address, browser and device type, pages viewed, and how you arrived at the site. This is collected through cookies and similar technologies, and only to the extent you allow through our cookie banner.
Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your order, and handling returns | Performance of a contract |
| Sending order, dispatch and delivery emails | Performance of a contract |
| Answering your enquiries | Legitimate interests, and contract where it relates to an order |
| Keeping accounting and tax records | Legal obligation |
| Preventing fraud and securing the site | Legitimate interests |
| Marketing emails and newsletters | Consent, which you can withdraw at any time |
| Analytics and performance cookies | Consent, given through the cookie banner |
Who we share it with
We do not sell your personal data. We share it only with the organisations that help us run the shop, and only what they need:
- Payment processing. Our payment provider handles card payments and fraud checks. They receive your payment and billing details directly.
- Order fulfilment and delivery. Our fulfilment partners and couriers receive your name, delivery address and contact details so they can pack and deliver your order.
- Email and hosting. Our website host and email providers process data on our behalf under contract.
- Analytics. Where you have consented, analytics providers receive usage data about your visit.
We may also disclose information where we are legally required to, for example to a regulator or in response to a valid legal request.
International transfers
Some of our service providers operate outside the UK. Where personal data is transferred overseas, we rely on UK adequacy regulations or on appropriate safeguards such as the International Data Transfer Agreement or Addendum, so that your data continues to be protected to a UK standard.
How long we keep it
- Order and transaction records: 6 years after the end of the relevant tax year, as required for accounting and tax purposes.
- Account details: for as long as your account is open, and then deleted on request.
- Enquiry emails: normally up to 2 years after the matter is closed.
- Newsletter subscriptions: until you unsubscribe.
- Cookie and analytics data: in line with the retention period of the specific cookie, as listed in our cookie notice.
Cookies
We use cookies that are strictly necessary for the site to work, such as keeping items in your basket and keeping you signed in. These do not require consent.
We also use analytics and preference cookies, which run only if you allow them. You can accept, reject or change your choices at any time through the cookie banner and the cookie settings link on the site. If your browser sends a Do Not Track or Global Privacy Control signal, we treat that as a refusal of non-essential cookies.
Marketing
We only send marketing emails if you have asked us to, or where you have bought from us and we are offering similar products, which the rules allow. Every marketing email has an unsubscribe link, and you can also email us to opt out. Unsubscribing does not affect order and delivery emails, which we must send to fulfil your order.
Your rights
Under UK data protection law you have the right to:
- Ask for a copy of the personal data we hold about you.
- Ask us to correct data that is inaccurate or incomplete.
- Ask us to delete your data, where we have no continuing reason to keep it.
- Ask us to restrict how we use your data, or object to us using it.
- Ask us to transfer your data to you or another provider in a portable format.
- Withdraw consent at any time, where we rely on consent.
To exercise any of these, email contact@trendupia.com. We will respond within one month. We will not charge you, and we may ask you to confirm your identity first.
Security
The site runs over HTTPS, payment details are handled by a PCI compliant provider, and access to customer data is limited to those who need it. No system can be guaranteed completely secure, but we take reasonable steps to protect your information and we will notify you and the ICO where we are required to do so after a breach.
Children
Our site is not intended for children. We do not knowingly collect data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.
Complaints
If you are unhappy with how we have handled your data, please contact us first at contact@trendupia.com so we can put it right.
You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy as our business or the law changes. The date at the top shows when it was last revised. Material changes will be highlighted on the site.