Sunglasses2U Privacy Notice (V2)

For Customers, Contractors, and Business Contacts

Sunglasses2U (“the Company”, "we", "us", "our") understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of everyone who visits our website, purchases our products, or enters into business transactions with us. We will only collect and use personal data in ways that are described here, in full compliance with our statutory obligations and your legal rights under the law.

1. Information About Us

Company Name: Watches2U (Trading as Sunglasses2U)
Registered Address: Unit 17, IO Centre, 57a Croydon Road, Beddington, Croydon, CR0 4WQ
Data Protection Lead: Faisal Bhatti
Email Address: privacy@sunglasses2u.com
Telephone Number: 0208 688 5748 (Option 3)

2. What Does This Notice Cover?

This Privacy Notice explains how we use your personal data when you interact with us as a customer, commercial supplier, independent contractor, or business contact. It details how it is collected, safely held, processed, and shared. It also outlines your individual rights under the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

3. What is Personal Data?

Personal data is defined by the UK GDPR as "any information relating to an identifiable natural person who can be directly or indirectly identified, in particular by reference to an identifier".

In simpler terms, it is any information about you that allows you to be identified. This ranges from obvious details like your name, delivery address, and phone number, to technical digital footprints like your IP address, device location logs, and website tracking cookies.

4. What Are My Rights Under the UK GDPR?

Under the UK GDPR, you possess the following statutory rights, which the Company will always work to uphold:

The right to be informed about our collection and use of your personal data. This Privacy Notice provides those details.
The right of access to the personal data we hold about you by submitting a Subject Access Request (see Section 10).
The right to rectification if any personal data we hold about you is inaccurate or incomplete.
The right to erasure (the "right to be forgotten"). This enables you to request the deletion of personal data where there is no overriding statutory or lawful business reason for us to keep it.
The right to restrict or freeze the processing of your personal data under specific legal conditions.
The right to object to the Company using your personal data for a particular purpose, including direct marketing.
The right to data portability, allowing you to move, copy, or transfer your personal data safely from one IT environment to another.
Rights relating to automated decision-making and profiling. Please note that Sunglasses2U does not utilize automated decision-making or profiling systems that produce legal effects concerning our customers or contacts.

Further information about your rights can be obtained from the Information Commissioner's Office (ICO). You also retain the right to lodge an official complaint directly with the ICO if you believe we have processed your data unlawfully.

5. What Personal Data Do We Collect?

We may collect some or all of the following personal data depending on your relationship with us. If you do not allow us to collect this data, we may be unable to fulfil our contractual obligations or complete your transactions:

Identity and Contact Data: Full name, billing address, delivery address, email address, and telephone numbers.
Business Account Data: Business name, job title, profession, and corporate contact details (for commercial suppliers, wholesale partners, and corporate accounts).
Financial and Transaction Data: Payment card details, bank account numbers, transaction histories, and details of products purchased or services engaged.
Technical and Usage Data: IP address, web browser type and version, operating system, and data collected via tracking cookies regarding how you interact with our e-commerce platform.

6. How Do We Use Your Personal Data and Lawful Bases?

Under the UK GDPR, we must always establish valid legal grounds for processing personal data. We rely on the following lawful bases:

Performance of a Contract: Processing is required to fulfil a contract with you or take steps at your request before entering into one (e.g., managing your customer account, processing your payment details, or utilizing your address to deliver an order via our couriers).
Legal Obligation: Processing is mandatory to comply with UK statutory regulations (e.g., maintaining transaction records for corporate tax auditing and financial compliance rules).
Legitimate Interests: Processing is required for our legitimate business operations, provided your privacy rights do not override those interests. This includes:
- Optimizing our website performance and protecting our digital infrastructure from malicious attacks or fraud.
- Engaging in business-to-business (B2B) networking, commercial administration, and supplier relations.
Consent: Where you have explicitly opted-in to receive our email marketing newsletters, product alerts, and special offers. You can withdraw your consent instantly at any time by clicking the "unsubscribe" link found at the bottom of every marketing email.

7. How Long Will We Keep Your Personal Data?

The Company does not retain personal data for any longer than is necessary in light of the purposes for which it was originally collected. Your data will be held as follows:

General Enquiries: If you contact us or make an enquiry but do not purchase products or engage our services, we will retain your personal data for 3 months from the date of the last communication, after which it is deleted.
Customers and Contractors: If you purchase products or enter into a commercial contract with us, your personal, transaction, and financial account data will be retained for 7 years following your last transaction or interaction. This period ensures full compliance with UK corporate accounting standards, HMRC tax tracking laws, and contractual limitation periods.

8. Data Storage and International Transfers

Your personal data is securely stored across hardware on-site at our Croydon premises, or inside encrypted cloud server environments.

We primarily process data within the UK and the European Economic Area (EEA). If we transfer your data outside these zones (for example, using a cloud software vendor whose data centre is located in the United States), we ensure additional statutory safeguards are implemented. This is achieved by using the UK International Data Transfer Agreement (IDTA) or the UK Addendum alongside approved Standard Contractual Clauses to guarantee your data receives an equivalent standard of protection.

9. Sharing Your Personal Data

We may share your personal data with trusted third parties only when necessary to fulfil our business operations or legal obligations:

Logistics and Fulfilment Providers: External courier services and shipping companies who require your name and address to deliver your watch orders.
Financial and Professional Services: Our external accountants, banking providers, and secure payment gateways that process your financial transactions.
Authorized Contractors: Independent technicians or service personnel who perform diagnostic repairs or warranty servicing on our behalf.
Statutory Authorities: We may be legally required to share data with law enforcement, regulatory bodies, or a court of law if required to comply with a valid legal obligation.

10. How Can I Access My Personal Data? (Subject Access Requests)

You possess a statutory right to ask for a copy of the personal data we hold about you by submitting a Subject Access Request (SAR).

All SARs should be made in writing and addressed to Faisal Bhatti at privacy@sunglasses2u.com. To make this process as straightforward as possible, a standard Subject Access Request Form is available on our website or by contacting us directly.

Fees: These requests are processed entirely free of charge. However, if a request is deemed "manifestly unfounded or excessive," we reserve the right to charge a reasonable administrative fee or decline to act on the request.
Timeline: We will deliver copies of your data within one calendar month of receiving your verified request. In highly complex scenarios, this deadline may be extended by up to an additional two months, but you will be kept fully informed of our progress.

11. How Do I Contact You?

For any questions regarding this Privacy Notice, the use of your personal data, or to exercise your individual data rights, please contact our Data Protection Lead:

Attention: Faisal Bhatti (Data Protection Lead)
Postal Address: Sunglasses2U, Unit 17, IO Centre, 57a Croydon Road, Beddington, Croydon, CR0 4WQ
Email Address: privacy@sunglasses2u.com
Telephone: 0208 688 5748 (Option 3)

12. Changes to this Privacy Notice

We review this Privacy Notice periodically to ensure ongoing compliance with evolving data protection laws. The latest version will always be published directly on our website.

Document Control Reference: Customer and Contact Privacy Notice — V2

Effective Issue Date: June 22, 2026

Approved By: Faisal Bhatti (Data Protection Lead)