Privacy policy
Last Updated: 1 June 2026
Polyshe is operated by POLYSHE LTD (Company No. 16411434), registered at 128 City Road, London, United Kingdom, EC1V 2NX ("we", "us", or "our"). We operate the website https://polyshe.com (the "Site").
This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our Site, create an account, or make a purchase. We are committed to handling your data responsibly and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information We Collect
Information You Provide Directly
- Identity Data: first name, last name, title.
- Contact Data: email address, telephone number, billing address, shipping address.
- Financial Data: payment card details, processed securely by our payment providers. We do not store card numbers.
- Transaction Data: details of products you have purchased, order history, and payment records.
- Communication Data: messages you send us via email, contact forms, or other correspondence.
- Account Data: if you create an account, your login credentials and preferences.
Information Collected Automatically
- Technical Data: IP address, browser type and version, operating system, device type, screen resolution.
- Usage Data: pages visited, time spent on each page, referring URL, click patterns, and search queries on our Site.
- Cookie Data: we use cookies and similar technologies to recognise you and improve your experience (see Section 8).
- Location Data: approximate geographic location derived from your IP address.
Information from Third Parties
- Shopify: as our ecommerce platform, Shopify processes your orders and collects technical and transactional data on our behalf, acting as a data processor under our instruction.
- Payment Providers: Shopify Payments and PayPal process your payment securely and may share transaction confirmation data with us.
- Analytics: we use Shopify's built-in analytics and Microsoft Clarity, a product analytics and session replay service from Microsoft Corporation, to understand how visitors use our Site.
2. How We Use Your Information
We use your personal data only where we have a lawful basis to do so:
| Purpose | Lawful Basis |
| Processing and fulfilling your orders | Contract performance |
| Sending order confirmations and shipping updates | Contract performance |
| Responding to your enquiries and support requests | Legitimate interest |
| Sending marketing emails (only with your consent) | Consent |
| Improving our Site, products, and services | Legitimate interest |
| Preventing fraud and protecting our business | Legitimate interest |
| Complying with legal and tax obligations | Legal obligation |
3. Sharing Your Information
We do not sell, rent, or trade your personal information. We share your data only with:
- Shopify Inc., our ecommerce platform provider, which processes orders and payments and hosts the Site as a data processor.
- Payment Processors (Shopify Payments and PayPal), to securely process transactions.
- Shipping Carriers (Royal Mail and other carriers), to deliver your orders, using your name, address, and phone number for delivery notifications.
- Microsoft, in connection with Microsoft Clarity analytics. Microsoft processes this data in accordance with its privacy statement at privacy.microsoft.com/privacystatement.
- Legal and Regulatory Authorities, where required by law, regulation, or legal proceedings.
- Professional Advisers (accountants, auditors, and lawyers), where necessary for our business.
All third-party processors are bound by data processing agreements and are required to handle your data in accordance with UK GDPR.
4. International Data Transfers
Your data may be transferred outside the United Kingdom where our service providers operate (for example, Shopify's and Microsoft's servers in Canada, the United States, and the European Union). Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO), to protect your data to UK standards.
5. Data Retention
| Data Type | Retention Period | Reason |
| Order and transaction records | 6 years | HMRC tax compliance obligations |
| Customer account data | Until account deletion or 3 years of inactivity | Service provision |
| Marketing consent records | Until consent is withdrawn | Legal requirement to demonstrate consent |
| Website analytics data | Up to 26 months | Aggregate analysis |
| Support correspondence | 2 years from resolution | Customer service quality |
6. Your Rights Under UK GDPR
- Right of Access: request a copy of the personal data we hold about you.
- Right to Rectification: request correction of inaccurate or incomplete data.
- Right to Erasure: request deletion of your data, subject to legal retention requirements.
- Right to Restrict Processing: request that we limit how we use your data.
- Right to Data Portability: request your data in a structured, machine readable format.
- Right to Object: object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: where processing is based on consent, withdraw at any time.
To exercise any of these rights, contact us at support@polyshe.com. We will respond within one month. There is no fee for most requests.
7. Security
We implement appropriate technical and organisational measures to protect your personal data, including SSL/TLS encryption on all pages, secure payment processing (PCI-DSS compliant via Shopify Payments), access controls limiting who can view customer data, and regular review of our data handling practices. No method of transmission over the internet is completely secure, and while we strive to protect your data we cannot guarantee absolute security.
8. Cookies
We use the following types of cookies:
- Essential: site functionality, cart, checkout, and login sessions. Duration: session to 1 year.
- Analytics: Shopify's built-in analytics and Microsoft Clarity, used to understand how visitors use our Site. Set only after you accept analytics cookies via our consent banner. Duration: up to 26 months.
The analytics cookies we use include:
| Cookie | Provider | Purpose |
| _clck | Microsoft Clarity | Persists a Clarity user ID and preferences for this Site |
| _clsk | Microsoft Clarity | Links page views into a single Clarity session recording |
You can opt out of Clarity at any time by clearing cookies in your browser, using your browser's privacy controls, or via Microsoft's opt-out tools. A cookie consent banner is displayed when you first visit our Site, allowing you to accept, decline, or manage your cookie preferences. You can also manage cookies through your browser settings. Disabling essential cookies may affect Site functionality.
9. Children's Privacy
Our Site is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
11. Complaints
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): Website ico.org.uk, Telephone 0303 123 1113, Address Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Contact Us
Email: support@polyshe.com
Phone: +44 7537 180436
Address: POLYSHE LTD, 128 City Road, London, United Kingdom, EC1V 2NX
Company No.: 16411434