Skip to main content

NUGSM

Inc VAT Ex VAT My account 0 Cart
Order within --:--:--
Next-day dispatch
Privacy & Cookies UK GDPR NUGSM

Privacy & Cookie Policy

Your privacy matters to us. This page explains what personal data we collect, why we collect it, how we use cookies, and what rights you have over your information.

Governed By
UK GDPR & DPA 2018
Data Requests
Within 30 Days
Last Updated
September 2026

Data Protection Queries

Questions about your data or want to exercise your rights?

privacy@nugsm.com Contact Us →
1

Introduction

NUGSM ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you visit our website or place an order with us, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our site.

2

Information We Collect

We collect information you give us directly, and some information automatically as you browse our site:

  • Contact details — name, email address, phone number, delivery and billing address.
  • Account details — username, order history, saved addresses (if you create an account).
  • Order & payment information — items purchased, order value. Card details are processed directly by our payment provider and are never stored on our servers.
  • Technical data — IP address, browser type, device information, and pages visited, collected automatically via cookies and similar technologies.
  • Communications — any messages you send us via our contact form, email, or phone.
We never ask for or store your full card details. All payments are processed securely by our payment provider(s), who are independently responsible for handling that data under their own privacy policies.
3

How We Use Your Data

  • To process and deliver your orders, including payment, shipping, and customer service.
  • To create and manage your account, if you choose to register one.
  • To respond to enquiries, returns requests, and support messages.
  • To send order updates and, where you've opted in, marketing emails about new stock and offers.
  • To improve our website, products, and services based on how visitors use the site.
  • To detect and prevent fraud, and to meet our legal and tax obligations.

We will never sell your personal data to third parties.

4

Legal Basis for Processing

Under UK GDPR, we must have a valid legal basis to process your personal data. Depending on the situation, we rely on:

Legal BasisWhen It Applies
Contract Processing your order, taking payment, and arranging delivery.
Legitimate Interests Improving our website, preventing fraud, and general business administration.
Consent Sending marketing emails and using non-essential cookies — you can withdraw this at any time.
Legal Obligation Keeping financial records for tax and accounting purposes as required by law.
5

Cookies We Use

Cookies are small text files stored on your device that help our website function and let us understand how it's used. Here are the main cookies we use:

CookieTypeDurationPurpose
woocommerce_cart_hash / woocommerce_items_in_cart Strictly Necessary Session Keeps track of what's in your shopping basket.
wp_woocommerce_session_* Strictly Necessary 2 days Identifies your unique session so your cart and checkout work correctly.
nugsm_vat Functional 1 year Remembers whether you prefer to see prices Inc. or Ex. VAT.
PHPSESSID Strictly Necessary Session Standard WordPress/PHP session identifier.
_ga / _gid (if analytics enabled) Performance / Analytics Up to 2 years Helps us understand how visitors use the site, in aggregate and anonymised form.

Strictly necessary cookies can't be switched off as they're essential for the site (like your shopping basket) to work. You can control or delete non-essential cookies through your browser settings at any time — though this may affect how parts of the site function.

6

Sharing Your Information

We only share your data with trusted third parties where it's necessary to run our business, and always under appropriate data protection agreements:

  • Payment processors (e.g. Stripe, PayPal) — to securely take payment for your order.
  • Delivery & courier partners — to ship your order and provide tracking.
  • IT & hosting providers — who host our website and store data securely on our behalf.
  • Email & marketing platforms — to send order confirmations and, where opted in, marketing emails.
  • Law enforcement or regulators — where we're legally required to disclose information.
7

Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Order & transaction records are typically kept for 6 years to meet UK tax law requirements.
  • Account data is kept while your account remains active, and deleted on request thereafter.
  • Marketing data is kept until you unsubscribe or withdraw consent.
8

Your Rights

Under UK GDPR, you have several rights regarding your personal data:

Right to Access

Request a copy of the personal data we hold about you.

Right to Rectification

Ask us to correct inaccurate or incomplete data.

Right to Erasure

Ask us to delete your data, where there's no legal reason for us to keep it.

Right to Restrict Processing

Ask us to limit how we use your data in certain circumstances.

Right to Data Portability

Receive your data in a structured, commonly used format to transfer elsewhere.

Right to Object

Object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, contact us at privacy@nugsm.com. We'll respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you're unhappy with how we've handled your data.
9

Data Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction — including secure (HTTPS) connections, restricted access to customer data, and working only with reputable, security-conscious third-party providers.

While we take data security seriously, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10

Children's Privacy

Our website and services are not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we'll remove it promptly.

11

Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The "Last Updated" date at the top of this page shows when it was last revised. We encourage you to review this page periodically.

12

Contact Us

If you have any questions about this policy or how we handle your personal data, please get in touch:

NUGSM
130 Montague Street, Worthing, BN11 3HG
privacy@nugsm.com · +44 1903 930139

This policy was last reviewed in September 2026 and is governed by the laws of England and Wales.