Last Updated: 22 June 2026
1. Introduction
This Privacy Policy explains how WITHIN ("we", "us", or "our") collects, uses and protects your personal information when you visit our website www.withinfyw.com, place an order, or otherwise interact with us.
We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
We may collect the following personal information:
Information You Provide
- Name
- Billing and delivery address
- Email address
- Telephone number
- Order and purchase details
- Any information you provide when contacting us
Information Collected Automatically
When you visit our website, we may automatically collect:
- IP address
- Browser type and device information
- Website usage information
- Cookie and tracking data
3. How We Use Your Information
We use your information to:
- Process and fulfil orders
- Deliver products and services
- Manage customer enquiries and support
- Send order confirmations and updates
- Improve our website and customer experience
- Prevent fraud and maintain website security
- Comply with legal obligations
Where permitted by law or with your consent, we may also send marketing communications about products, promotions and updates.
You can unsubscribe from marketing communications at any time.
4. Legal Basis for Processing
We process your personal data under one or more of the following legal bases:
- Performance of a contract (to fulfil your order)
- Compliance with legal obligations
- Our legitimate business interests
- Your consent, where required
5. Sharing Your Information
We only share your personal information where necessary to operate our business.
This may include:
- Shopify (our ecommerce platform)
- Payment providers
- Delivery and courier companies
- Website analytics providers
- Professional advisers and legal authorities where required by law
We do not sell your personal information to third parties.
6. International Transfers
Some of our service providers may process personal information outside the United Kingdom.
Where this occurs, appropriate safeguards will be used to ensure your information remains protected in accordance with applicable data protection laws.
7. Data Retention
We retain personal information only for as long as necessary to:
- Fulfil orders and provide services
- Meet legal, accounting and tax requirements
- Resolve disputes and enforce agreements
When information is no longer required, it will be securely deleted or anonymised.
8. Your Rights
Under UK data protection law, you may have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your information
- Restrict or object to processing
- Request transfer of your data
- Withdraw consent where processing is based on consent
- Lodge a complaint with the Information Commissioner's Office (ICO)
To exercise any of these rights, please contact us using the details below.
9. Cookies
Our website uses cookies and similar technologies to improve functionality, analyse website performance and support marketing activities.
For more information, please see our Cookie Policy.
10. Security
We take reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration or destruction.
However, no method of transmission over the internet can be guaranteed to be completely secure.
11. Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices or content of those external websites.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Any changes will be posted on this page together with an updated revision date.
13. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us.
If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).