We take your privacy and personal data seriously. By using this site or giving us your details you accept this policy. If you do not agree, do not send us personal information.

TheFullWorks Limited, 18–19 Potters Way, Southend-on-Sea, SS2 5SJ. Information Commissioner’s Office registration ZA337899. Questions: contact us.

Who this covers

Two groups:

Merchandisers and other clients contracted directly to us.
End users who buy through a shop on the platform. They contract with the merchandiser, not with us. We can advise that a shop needs its own notice. We are not responsible for how that merchandiser handles the data it collects in running its business.

What we collect

Details you put in a form, an email, a call or other correspondence.
Records of enquiries and the correspondence that follows.
Where it is reasonable and not unfair, information from public sources such as Companies House, HM Land Registry, internet searches and broadcast media.
Log data our servers record when you use the services: IP address, browser, operating system, referring page, pages visited, device type, search terms and cookie information.
Account details when you register. Card and billing details when you pay us, so we can take payment.
Location you give us, stored against the account to run the service and to check billing details.

If you do not provide data we need, we may be unable to meet a legal duty, perform a contract, or provide the service.

Cookies and analytics

This website sets no cookies of its own. The one outside service it loads is Google Analytics 4, which we use to see which pages are read and where visitors leave. We do not use it to identify anyone, and we run no advertising, remarketing or social-media tracking on this site.

Nothing is stored until you choose. Google Analytics runs here in Google Consent Mode v2, with every category set to “denied” before the Google tag loads. Until you accept analytics, it stores nothing on your device and reads nothing from it; it sends only signals that carry no identifier and cannot be tied to a return visit. If you accept, Google Analytics sets two cookies:

_ga: tells one visitor from another, so a return is not counted as a new person. Expires two years after it is set.
_ga_ followed by a property identifier: holds the state of the current visit. Expires two years after it is set.

If you decline, or if you ignore the notice, neither cookie is set. Declining after you have accepted stops both from being renewed. You can also delete stored cookies in your browser.

Session cookies on the platform keep you signed in and let us see usage and traffic. Persistent cookies remember basic preferences, such as a recent search, and keep a registered session consistent when you return.

Your answer is kept in this browser’s local storage under the name “cookie-consent”. It is not a cookie, it is not sent to us, and it records only the categories you agreed to, the date, and the version of this notice. It lasts twelve months, after which we ask again.

Select Cookie settings in the footer of any page to reopen the panel and turn analytics on or off. Withdrawing consent takes effect immediately. Clearing site data for this website resets the choice and brings the notice back. Demo Shop requests are handled on fullworksdemo.com, which has its own notice at the point of collection.

Google acts as our processor for Analytics data. Google explains how it uses information from sites that use its services at policies.google.com/technologies/partner-sites.

Why we process it

We only process personal data when one of these applies:

To perform a contract with you.
We have a legal obligation.
You have consented.
It is in our legitimate interests, and not unfair to you.
It is in the public interest.

Where we rely on legitimate interests we will say so, say what the interest is, and give you a way to object. A compelling ground can override that objection.

With your consent we may send news and service updates. You can unsubscribe at any time.

Processors who administer or provide the services see personal data only to do that work. We use Xero for accounts, the platform hosted in Amazon data centres, Gmail for email, and Google Analytics for this website’s visit statistics if you accept them. Those stores encrypt data. We do not keep paper copies.

We pass what a warehouse or courier needs to deliver an order. Those parties are contracted to our processing controls and to confidentiality. Traffic is encrypted under SSL.

We also share data:

With law enforcement, regulators and other authorities when the law requires it, or where we find fraud or a security or technical threat to the platform.
With a third party you ask us, or permit us, to share it with.
With a third party needed to provide a product or service you have requested. Where that product needs it, we ask for your consent first.

Social networks and user-generated content are governed by the third party that hosts them. Do not post personal data you do not want others to see. We are not responsible for what you choose to publish.

Outside the UK and EEA

Data may be stored in a country we choose, and is then subject to the law of that place. A transfer outside the UK or EEA happens only with your explicit consent, where it is needed to set up or perform your contract, or to meet a legal duty.

Where we transfer data we protect it by one of these:

The destination has been found to offer an adequate level of protection.
A contract that requires the recipient to protect the data to the same standard.

If the law compels a disclosure we may have limited control over how that authority protects it.

How long we keep it

We keep data while you are a customer or client, then for the minimum period needed for the purposes in this policy and for legal or regulatory duties. Some copies can remain in backup for technical reasons. Where we have no legitimate interest to keep marketing details, you can ask to be forgotten. Contact us by telephone, email or in person.

Security

We treat the data as confidential and protect it with encryption and other controls. Transmission and storage on the internet are never completely secure, so we cannot guarantee it.

Your rights

You can ask us to:

Give you access to the personal data we hold.
Correct data that is wrong or out of date.
Erase it.
Restrict processing in certain cases.
Provide it to you or a company you name (portability).
Object where we rely on legitimate interests.
Withdraw consent. That does not undo processing already carried out.
Contest a decision made only by automated processing, and ask a person to review it.

Write via contact us. We delete what we can as soon as practicable. Archived copies may remain where the law or a backup requires it. You can also complain to the ICO.

Questions

If you are unsure about anything in this policy, contact us. You can also complain to the Information Commissioner’s Office.

Changes

We may update this policy. Please check it. If a change is material we will try to tell you in advance by a notice on the site or another agreed channel. We will not enforce a material change without your express consent. If you do not accept it, we may be unable to keep providing some or all of the services.

Privacy