Privacy is Ducking Important..

At Ay Up Duck, we’re proper serious about your data. We only collect what we need to get your hoodies, tees and mugs delivered safely to your door. Your trust is the most valuable thing we own (besides our duck designs), so we promise to keep your information locked down tighter than a Derbyshire winter.

1. Information We Collect

Depending on how you use our store, we collect:
Contact and delivery information: your name, email address, telephone number, billing address and delivery address.
Order and transaction information: products, sizes and colours ordered, order history, payment status, transaction references, delivery details, returns and refunds.
Account information: login details, account preferences and saved information, if you choose to create an account.
Communications: enquiries, correspondence, complaints and information or photographs you provide about a product or order.
Marketing information: subscription choices, consent records and information needed to respect an unsubscribe request.
Website information: IP address, device and browser details, pages viewed, referring websites, shopping basket activity and cookie identifiers. Optional tracking depends on your cookie choices.
Payment details are handled by the payment provider selected at checkout. We receive transaction records and limited payment information needed to manage purchases and refunds. The provider explains its handling of payment information in its own privacy notice.

We retain personal information only for as long as needed for the purpose for which it was collected, including any applicable legal requirements. Our usual periods are:

Tax and accounting records: six years after the end of the relevant accounting period, or longer where a specific legal requirement applies.

Customer service correspondence: up to two years after an enquiry or complaint is resolved, unless an ongoing claim or legal requirement justifies longer retention.

Customer accounts: while active. We review accounts after 24 months of inactivity and remove information that is no longer needed. Closing an account does not require us to delete records that must be kept for another lawful purpose.

Marketing records: until you withdraw consent, object or unsubscribe, or until we determine that continued retention is no longer appropriate. We review inactive subscriptions after 24 months. Minimal consent and suppression records may be retained to demonstrate compliance and respect your choices.

Website data: for the duration stated in the cookie information.

Where information is relevant to an unresolved dispute, legal claim or investigation, we may retain the necessary records until the matter is concluded and any applicable retention requirement has ended. We then delete or anonymise information no longer needed. Information awaiting removal from backups is restricted and removed through the normal backup cycle.

2. Cookies and Tracking

Our Wix website uses cookies and similar technologies. Essential technologies support functions such as website security, checkout and your shopping basket. They do not require consent where the relevant PECR exception applies.

Where enabled, optional technologies may support additional features, analytics and advertising. Under our consent approach, we ask for your permission before placing or accessing optional tracking technologies and processing the associated information. You can accept, reject or manage these through the cookie banner and change your choices at any time.

Information about individual technologies can be found on the ICO's website. Refusing optional cookies does not prevent you from making a purchase. Blocking essential cookies in your browser may affect checkout or other necessary functions.

3. Third-Party Services

We may employ third-party companies and individuals to facilitate our Service, provide the Service on our behalf, or perform Service-related tasks. These third parties have access to your Personal Data only to perform these tasks on our behalf.

We use appropriate technical and organisational measures to protect information, including secure website connections and controls over access to customer data. Access is limited to people and providers who need it for their work. If a personal data breach occurs, we will assess it and notify the relevant authority and affected people where the law requires.

4. Your Rights

Depending on the circumstances, you can ask us to:

Confirm whether we process your information and provide access to it.
Correct inaccurate information or complete incomplete information.
Delete information where the right to erasure applies.
Restrict processing in the circumstances provided by law.
Provide portable data where processing is automated and based on consent or contract.
Stop processing based on legitimate interests where your circumstances justify an objection. We must stop unless we can demonstrate overriding grounds or need the information for legal claims.
You may withdraw consent at any time without affecting the lawfulness of earlier processing. Your right to object to direct marketing is absolute. Withdrawing optional consent does not affect information we must process on another lawful basis.

Our store is intended for adult purchasers. If you believe a child has supplied personal information that we should not hold, please contact us. We will investigate and remove information where appropriate.

Contact quack@ayupduck.uk or complete the form below to exercise your rights. You do not have to use a special form or legal wording. We normally respond within one month, subject to lawful extensions or pauses. If these apply, we will explain them. We may request reasonable information to verify identity and protect your data. Requests are normally free; any refusal or charge will only be made where the law allows and will be explained.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator. Information about raising a concern or making a complaint is available at https://ico.org.uk/make-a-complaint/

Got Questions?

Reach out to the ducks at quack@ayupduck.com