Last updated: 15 October 2026
This policy explains how Enhance-d Club UK uses your personal information when you visit or buy from https://shop.enhance-d.com.
1. Who we are
The shop is run by Enhance-d Club UK, a trading name of Shifting the Perception of Type One Diabetes CIC (company number 15401822), 18 South View, Leeds, LS19 7JD, United Kingdom. We are the controller of the personal information described here. Contact: shop@enhance-d.com.
The names Enhance-d, Enhance-d Club and Enhance-d Club UK are licensed from Sestante Analytics AG, Freiburgstrasse 3, 3010 Bern, Switzerland, which runs the Enhance-d app. The app has its own privacy policy.
2. What we collect
- Order details: name, billing and delivery address, email, phone number, what you ordered, sizes and any notes.
- Payment: handled by our payment provider; we see the payment status and the last four digits of your card, never the full card number.
- Account: if you create an account, your login details and order history.
- Club credit: if you use an Enhance-d Club credit code, the code and the order it was used on.
- Technical: IP address, device and browser type, and cookies you allow (section 7).
- Messages: anything you send us by email or forms.
We do not ask for health information in the shop. Please do not include it in order notes.
3. Why we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Taking payment, making and delivering your order, returns and customer service | Contract |
| Keeping accounting and tax records | Legal obligation |
| Preventing fraud and keeping the site secure | Legitimate interests |
| Improving the shop (statistics and order attribution) | Legitimate interests |
4. Who we share it with
Only what each needs to do its job:
- Bioracer (Belgium): makes your club kit and, for UK and Dutch orders, delivers it to you.
- Printful (United States and its print centres in the UK and EU): prints and delivers printed clothing and gear.
- Evri, via Parcel2Go (UK): delivers kit we forward from the UK, including customs information for international parcels.
- WooPayments (Automattic) and Stripe: process card and wallet payments and screen them for fraud.
- Our website host and WordPress / WooCommerce service providers: run the shop and send order emails.
- Automattic (Jetpack Stats and WooCommerce Analytics): visitor and shop statistics (section 7).
- Sestante Analytics AG (Switzerland): runs the Enhance-d app, which creates Club credit codes for this shop.
- Customs authorities and couriers, as required to deliver international orders.
We never sell your information.
5. International transfers
Some of these providers are outside the UK (EU, Switzerland, United States). Transfers to the EU and Switzerland rely on UK adequacy regulations. Transfers to the United States rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or on the UK International Data Transfer Addendum to the EU standard contractual clauses.
6. How long we keep it
- Orders and invoices: 6 years after the end of the financial year they belong to (tax law).
- Accounts: until you close your account, then order records as above.
- Emails to us: up to 2 years after the matter is closed.
7. Cookies
We use cookies the shop needs to work (your basket, login and checkout). We also use:
- Jetpack Stats and WooCommerce Analytics (Automattic): counts of visits, pages and shop activity, so we can see what is working.
- WooCommerce order attribution (
sbjs_cookies): records which site or link brought you to the shop, saved with your order.
We only set the statistics and attribution cookies if you agree in the cookie banner. You can change your choice at any time with Manage consent, which also appears at the bottom of every page. Our Cookie policy lists every cookie the shop uses. The shop works fully without the optional cookies, and you can also block or delete cookies in your browser.
8. Your rights
You can ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, or move it to another service. Email shop@enhance-d.com; we reply within one month. Some information (such as invoices) we must keep for the periods in section 6.
If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113), or to the data protection authority where you live.
9. Security
We use secure (HTTPS) connections, a reputable payment provider and limited staff access. No website can be completely secure, so please use a strong password for your account.
10. Changes
We may update this policy. The date at the top shows when it last changed.
