Privacy

Plain English, no hedging. If anything here is unclear, email hi@goodboi.co.uk and we will explain it.

Who we are

Goodboi & Co is a trading name of James Costen, a sole trader based in Cherry Burton, Beverley, East Yorkshire. We sell a short curated range of dog equipment. For UK GDPR purposes we are the data controller for personal data collected through this shop.

Our full postal address is 7 Two Riggs, Bishop Burton Road, Cherry Burton, Beverley, East Yorkshire, HU17 7SH.

What we collect

When you place an order

• Your name, delivery address and billing address
• Your email address and, if you give one, your phone number
• What you ordered, when, and for how much
• Your payment is handled entirely by our payment provider. We receive confirmation that it succeeded plus the last four digits and card type. We never see or store your full card number.

When you just browse

• Standard server logs including a truncated IP address and your browser’s user-agent, kept to spot abuse and fix faults
• Analytics about which pages get visited — only if you accept analytics cookies. Off by default.

Why we are allowed to

• Order and delivery data — Article 6(1)(b), necessary to perform the contract you entered when you bought something.
• Accounting records — Article 6(1)(c), a legal obligation to HMRC.
• Server logs — Article 6(1)(f), our legitimate interest in a working, secure shop.
• Analytics and marketing email — Article 6(1)(a), your consent. Never pre-ticked, withdrawable any time.

Who we share it with

Only the parties needed to actually get you your order. We do not sell data, and we do not share it with ad networks or data brokers.

• Our ecommerce and payment platform, which hosts the checkout, takes the payment and stores the order record.
• The UK wholesaler that stocks your item. This is the important one to be clear about: where an item ships directly from a supplier’s warehouse rather than from us, that supplier is given your name, delivery address and the item — because they are the ones putting it in a box. They act on our instructions and may not use your details for anything else.
• The courier, who gets your name, address and, if you provided one, your phone or email for delivery notifications.
• Our accountant, for the invoice records HMRC requires.

How long we keep it

• Order and invoice records: 7 years. HMRC requires it and we do not get a choice.
• Marketing list: until you unsubscribe, then we keep a suppression record so we do not accidentally email you again.
• Server logs: 30 days.

Your rights

Under UK GDPR you can ask us to:

• Tell you what we hold about you
• Correct anything wrong
• Delete it, where we are not legally required to keep it
• Stop or restrict processing
• Send you a portable copy
• Withdraw consent, where consent is the basis

Email hi@goodboi.co.uk. We reply within seven days and complete within 30, as the law requires.

If we get it wrong

Tell us first and we will try to fix it. If that does not work you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.