Privacy policy
Last updated: 2026-10-13
ShedRain UK Limited (“ShedRain”, “we”, “our”, or “us”) is a company registered in England and Wales under company number 17074413 and our registered address is c/o Wallace LLP, 27 Mortimer Street, London, United Kingdom, W1T 3JF.
For the purposes of data protection law, we are the controller of your personal data. This means that we decide how and why your personal data is used and are responsible for protecting your rights when we do so. We are registered with the ICO under registration number ZC256008.
ShedRain sells products through its website. ShedRain is the controller of the personal data collected through that website and in connection with the Services.
To exercise your rights, ask questions or comment on this privacy policy or our privacy practices, contact us at privacy@shedrain.com.
This privacy policy is provided for information purposes and does not form part of any contract with you.
1. THIS POLICY
1.1 ShedRain respects your privacy and is committed to protecting it. This policy describes how we collect, use, retain and disclose personal data about you when you visit our website, shop with us, create an account, contact us, leave a review, or otherwise interact with our website, products and customer services. These interactions are referred to as the “Services”.
1.2 If you choose not to provide or allow us to collect some information, we may not be able to provide you with requested features, services, or information.
1.3 We may update this policy from time to time and will give notice of any changes where required by law. The date on which this privacy policy was last updated is identified at the top of the page. We will notify you of changes by updating the “last updated” date and posting the revised policy on our website. We may also email or otherwise communicate reminders about this policy, but you should check our website periodically for the current version.
1.4 Our website, products and services are not intended for children. We do not knowingly collect personal data from children. If you believe that a child has provided personal data to us, please contact us so that we can consider whether it should be deleted.
1.5 We do not use your personal data to make decisions about you based solely on automated processing that produces legal or similarly significant effects.
1.6 We do not intentionally collect special category data about you. If you choose to upload photographs, reviews or other content, that content may reveal information about you. Please avoid providing sensitive information unless we specifically ask you to do so.
1.7 Some of our service providers and other recipients may process personal data outside the United Kingdom. Where we transfer personal data to a country that is not covered by UK adequacy regulations, we use an appropriate safeguard recognised under UK data protection law, such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. We may also rely on another lawful transfer mechanism where permitted. You can contact us for further information about the safeguards used for a particular transfer.
2. The Personal Data That We Collect or Process
“Personal data” means any information relating to an identified or identifiable individual. It includes information that identifies you directly, such as your name and contact details, and information that may identify you indirectly when combined with other information, such as an online identifier or device identifier.
| General Category | Types of Personal Data |
|---|---|
| Identity information | Information relating to your identity, such as your name or social media account details. |
| Contact information | Information relating to your contact details, such as your email address, postal address and telephone number. |
| Product information | Information about your product preferences. |
| Account and profile information | Your username, sign-in credentials, account preferences, account activity, order history, interests, preferences, feedback and survey responses. |
| Financial information | Information relating to purchases and transactions, including payment information, billing and delivery addresses, order and transaction history, purchase details, returns, refunds and photographic evidence of delivery. Payment-card information may be collected and processed directly by our payment providers. |
| Review information | This may include your name or display name, rating, review text, review date, product reviewed, verification status, moderation information and any images or other content you choose to include in a review. |
| Device information | This is information relating to the browser or device you use to access our website, such as your IP address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website. This includes interactions with the website, such as clickstream information to, through and from our website, products that you view or search for, page response times, download errors and the length of visits to certain pages. We typically collect this information through the use of cookies and similar technologies. For more information, please see our Cookie Policy. |
| Marketing information | Information relating to your marketing and communications preferences and your participation in events, promotions and surveys that we conduct. |
| Communications information | Any other personal data you provide to us directly when communicating with us. This includes information you provide when you complete contact forms, contact us through our customer-service channels, respond to messages and communications that we send you by email or live chat, or interact with us through our social media channels. |
2.1 Statistics or aggregated information. Statistical or aggregated data does not directly identify a specific person, but we may derive non-personal statistical or aggregated data from personal data. For example, we may aggregate personal data to calculate the percentage of users accessing a specific feature of the Services.
If we combine or connect non-personal statistical or technical data with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal data.
3. How We Collect Your Personal and Other Data
3.1 Information you provide to us. We collect information about you when you interact with our Services, such as when you create or update an account; place an order or make a purchase; participate in surveys or promotions; or create, upload or post content to the Services, including reviews and material submitted for warranty purposes, such as photos, videos or audio recordings.
3.2 Information collected as you use our Services. As you navigate through and interact with our Services, we may use automatic data-collection technologies to collect information, including personal data. Information collected automatically may include usage details, IP addresses, operating systems, browser types, and information collected through cookies, web beacons and other tracking technologies. This may include details of your interactions with our Services, such as traffic data, general location data, logs, other communications data, and the resources and features of the Services that you access and use. We may use cookies, pixels, web beacons and similar technologies where permitted by law and, where required, with your consent. Please see our Cookie Policy.
3.3 Information we receive from other sources. We may receive personal data from payment providers, delivery providers, analytics providers, advertising partners, email marketing platforms, fraud-prevention providers, customer-service providers, social media platforms and other service providers that support our retail operations. We may also receive information where you use a third-party login or payment option or interact with us through social media.
4. How We Use Your Information
4.1 We use information that we collect about you or that you provide to us, including any personal data, to:
4.1.1 provide our website, products, account features, customer services and other services you request;
4.1.2 process and manage purchases, orders, payments, deliveries, returns, refunds, exchanges and warranty matters;
4.1.3 create and manage customer accounts and respond to customer-service queries;
4.1.4 publish, verify and moderate customer reviews and other user-generated content where you choose to provide it;
4.1.5 send service communications, including order confirmations, delivery updates, account messages and important notices about our products or services;
4.1.6 send marketing communications where permitted by law, including where you have consented or where we may rely on the soft opt-in for similar products and services. You can opt out of marketing at any time;
4.1.7 use analytics and similar technologies to understand how customers use our website and to improve our website, products and services, subject to applicable cookie-consent requirements;
4.1.8 protect our business, website and customers, including by detecting fraud, preventing misuse and maintaining security;
4.1.9 comply with legal obligations and establish, exercise or defend legal claims.
5. Legal Basis for Processing
5.1 We rely on the following lawful bases when processing your personal data:
5.1.1 Contract: where processing is necessary to take steps at your request before entering into a contract or to perform our contract with you, including processing orders, payments, deliveries, returns, refunds and warranties, and administering your account;
5.1.2 Legal obligation: where processing is necessary to comply with a legal obligation, including obligations relating to tax, accounting, product safety, consumer protection and regulatory requirements;
5.1.3 Legitimate interests: where processing is necessary for our legitimate interests or those of a third party and those interests are not overridden by your rights and interests. These interests include operating and improving our business and website, responding to enquiries, providing customer support, publishing and moderating reviews, preventing fraud and misuse, maintaining security, managing legal claims and marketing our products and services where permitted by law; and
5.1.4 Consent: where you have given us consent, including for certain electronic marketing activities and the use of non-essential cookies and similar technologies. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
5.2 We do not intentionally collect special category personal data. Content that you choose to provide, such as photographs, reviews or warranty information, may incidentally reveal information about your health or other special category information. Please do not provide this information unless we specifically request it. If we need to process special category personal data, we will identify an appropriate lawful basis and an additional condition under data protection law and, where required, obtain your explicit consent. Where you submit a photograph or other content for publication, we will make clear at the point of collection whether and how it may be published.
5.3 The usage information we collect, whether connected to your personal data or not, helps us improve our Services and deliver a better and more personalised experience by enabling us to:
5.3.1 estimate our audience sizes and usage patterns;
5.3.2 store information about your preferences, allowing us to customise the Services according to your individual needs and interests;
5.3.3 speed up your searches;
5.3.4 recognise you when you return to our Services.
6. MARKETING
6.1 We may use your personal data to provide information about our products, services, promotions, events, catalogues, brochures and other updates that we believe may be of interest to you.
6.2 Where required by law, we will obtain your consent before sending marketing communications by email, SMS or other electronic means. Where you purchase goods or services from us, we may also send you electronic marketing relating to our own similar products and services where permitted by applicable law, provided that you were given the opportunity to opt out when your details were collected and in every subsequent communication.
6.3 We may send marketing materials, including catalogues and brochures, by post on the basis of our legitimate interests in promoting and developing our business. You have the right to object to receiving postal marketing at any time and can opt out by contacting us using the details set out below.
6.4 We use cookies, pixels, web beacons and similar technologies to understand how visitors use our website, measure the effectiveness of our advertising and marketing campaigns, personalise content and advertisements, and create and measure audiences for advertising services such as Meta, Google and other digital advertising platforms. Hashed contact details, device identifiers and other online identifiers remain personal data where they can be linked to an identifiable individual. Further information about our use of these technologies, including how to manage your preferences, is set out in our Cookie Policy.
6.5 You may opt out of receiving marketing communications at any time by clicking the unsubscribe link in our marketing emails, following the instructions included in any text message, updating your account preferences, contacting us directly, or exercising your right to object to processing for direct marketing purposes. Once you opt out, we will stop sending you marketing communications, although we may still contact you regarding your orders, account or other service-related matters.
7. How We Share Your Information
7.1 We work with service providers, contractors, business partners and other third parties that may receive personal data for the purposes described in this notice. These may include website hosting providers, payment processors, delivery providers, order-fulfilment providers, customer-support providers, marketing platforms, analytics providers, security and fraud-prevention providers, professional advisers and cloud-storage providers. We assess third parties and enter into appropriate contractual arrangements where required by applicable law.
7.2 Where we use advertising, analytics, personalisation or social media partners, we may share limited information such as device information, online identifiers, website activity and, where permitted, hashed contact details.
7.3 We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.
7.4 We may also disclose personal data that we collect or you provide as described in this privacy policy:
7.4.1 to our parent company, subsidiaries and other group companies;
7.4.2 to contractors, service providers and other third parties that support our business and are required to protect personal data and use it only for the purposes for which it is disclosed;
7.4.3 to a prospective buyer, seller or other participant in connection with a proposed or completed sale, merger, acquisition, reorganisation or transfer of all or part of our business or assets;
7.4.4 to our professional advisers, including lawyers, accountants, auditors and insurers;
7.4.5 in connection with any actual or potential legal, litigation or regulatory process;
7.4.6 where permitted by law and subject to any required consent, with advertising, analytics and social media partners so that we can measure and improve advertising and provide relevant marketing. This may include limited identifiers such as hashed email addresses.
7.5 We may also disclose your personal data:
7.5.1 to comply with a legal obligation, court order or regulatory request;
7.5.2 to establish, exercise or defend legal claims, enforce our agreements or collect amounts owed to us; and
7.5.3 where necessary to prevent fraud or protect the rights, property or safety of ShedRain, our customers or others.
8. Data Retention
8.1 We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including providing our products and services, maintaining customer accounts, complying with legal, regulatory, tax, accounting and reporting obligations, resolving disputes and enforcing our agreements.
8.2 The period for which we retain personal data varies depending on the type of information involved, the purpose for which it was collected, and any applicable legal or regulatory requirements. In determining appropriate retention periods, we take into account the nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it and whether those purposes can be achieved through other means.
8.3 Customer account information is generally retained for as long as the account remains active and for a reasonable period thereafter. Information relating to purchases, orders and financial transactions will ordinarily be retained for six years after the end of the financial year to which it relates, or for a longer period where required or permitted by law.
8.4 Marketing information will be retained until you unsubscribe, object to the processing, withdraw your consent (where consent is relied upon) or we otherwise determine that the information is no longer required for marketing purposes.
8.5 Where personal data is no longer required, we will securely delete, anonymise or otherwise dispose of it in accordance with our retention policies and applicable law, unless we are required or permitted to retain it for a longer period.
9. How We Protect Your Personal Data
9.1 We take the security of your personal data seriously and have implemented appropriate technical and organisational measures designed to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, and other unlawful forms of processing.
9.2 We maintain security measures including access controls, password protection, encryption where appropriate, network and system security controls, staff training and policies governing the handling of personal data. Access to personal data is restricted to employees, contractors and service providers who have a legitimate business need to access it and who are subject to appropriate confidentiality obligations.
9.3 We use reputable third-party technology providers to host, store and process personal data on our behalf. Where we engage such providers, we take reasonable steps to ensure that they maintain appropriate security standards and process personal data only in accordance with our instructions and applicable data protection laws.
9.4 While we implement measures designed to safeguard your personal data, no method of transmission over the internet or electronic storage is completely secure. We therefore cannot guarantee the absolute security of any information transmitted to or from our website, although we will continue to review and enhance our security measures as appropriate.
9.5 If we become aware of a personal data breach involving your personal data, we will take the steps required under applicable law, including notifying affected individuals and regulatory authorities where required.
9.6 Where you have an account with us, you should keep your password and other sign-in details confidential and notify us promptly if you believe that your account or credentials have been compromised.
10. Your Data Protection Rights
10.1 Subject to applicable law, you may have the following rights in relation to your personal data:
10.1.1 the right to request access to, and copies of, the personal data we process about you;
10.1.2 the right to ask us to correct inaccurate or incomplete personal data;
10.1.3 the right to ask us to erase personal data in certain circumstances;
10.1.4 the right to ask us to restrict processing in certain circumstances;
10.1.5 the right to object to processing based on legitimate interests, and the right to object to direct marketing at any time;
10.1.6 the right to data portability in certain circumstances; and
10.1.7 where we rely on consent, the right to withdraw that consent at any time.
10.2 If you wish to exercise any of these rights, please contact us as described in the introductory paragraph.
10.3 You will not usually have to pay a fee to access your personal data or to exercise your rights. However, we may charge a reasonable fee or refuse to comply with a request where the law allows us to do so, for example if the request is manifestly unfounded, excessive or repetitive.
10.4 We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
10.5 Please note that your rights are subject to legal limits and exemptions. Depending on the circumstances, we may not be required to provide all personal data or to comply with a request in full. If we cannot comply with a request, we will explain why, unless the law prevents us from doing so.
11. Time limit to respond
We will respond to requests without undue delay and normally within one month of receiving the request. We may extend this period by up to a further two months where a request is complex or you have made a number of requests. If an extension is required, we will tell you within the initial one-month period and explain the reason for the delay.
12. Complaints
12.1 You also have the right to complain to us if you consider that your data protection rights have been infringed. When we receive a data protection complaint, we will consider it promptly and take appropriate steps to respond without undue delay. This may include making enquiries into the subject matter of the complaint and, where appropriate, keeping you informed about the progress of our handling of it.
12.2 We would appreciate the opportunity to address your concerns first, but you have the right to make a complaint to the Information Commissioner’s Office (ICO) at any time. The ICO’s contact details are: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline: 0303 123 1113. Further information is available at www.ico.org.uk.
