Privacy Policy

This Privacy Policy explains how The Whatsupp Co. Ltd, trading as The What Supp Co. ("we", "us"), collects, uses and shares your personal information when you visit or make a purchase from www.thewhatsupp.com (the "Site").

We are the data controller for the personal information described in this policy. We are registered in England and Wales, company number 15584210, and you can contact us about anything in this policy at hello@thewhatsupp.com.

"Personal information" means any information that can identify you as an individual.

1. What we collect, and why

Device information

What: browser type and version, IP address, time zone, cookie data, the pages and products you view, search terms, and how you interact with the Site.
Why: to make the Site load and work properly for you, to protect the Site against spam and abuse, and to understand how the Site is used so we can improve it.
How: collected automatically via cookies, log files, pixels and similar technologies, and via Google reCAPTCHA on our forms (which helps us block bots).
Shared with: Shopify (our ecommerce platform) and Google (Analytics and reCAPTCHA).

Order information

What: your name, billing address, shipping address, payment details, email address and phone number.
Why: to fulfil your order - processing payment, arranging delivery, sending invoices and order confirmations - to communicate with you about it, to screen orders for fraud, and, where you have chosen to hear from us, to send you relevant information and offers.
How: provided by you at checkout.
Shared with: Shopify, our payment processor Shopify Payments, our subscription platform (for Subscribe & Save orders), and our fulfilment and shipping partners.

Customer support, reviews and email marketing

What: your name and email address, plus anything you include in messages to us or in product reviews.
Why: to answer your questions and provide support, to publish reviews you choose to leave, and to send you marketing emails where you have signed up.
How: provided by you - for example when you email us, leave a review, or enter your email for a discount or to join our list. Signing up to our emails is your consent to receive them; every email includes an unsubscribe link and you can withdraw consent at any time.
Shared with: Shopify, our email marketing provider Klaviyo, and our reviews platform Judge.me.

2. How we use your personal information

We use your personal information to offer and sell our products, process payments, deliver orders, provide customer support, run our Subscribe & Save service, keep the Site secure, meet our legal obligations, and - where you have opted in - keep you up to date with new products, services and offers.

If you join Subscribe & Save, your payment information is securely stored by our payment processor and used to take the recurring payments you have authorised, until you cancel.

3. Our lawful bases

Under UK GDPR (and EU GDPR where it applies), we process your personal information on these bases:

Contract - to fulfil our contract with you when you place an order or manage a subscription.
Consent - for marketing emails and non-essential cookies. You can withdraw consent at any time.
Legal obligation - for example keeping records for tax and accounting purposes.
Legitimate interests - for example fraud prevention, Site security and improving our services, where these interests are not overridden by your rights and freedoms.

4. Sharing your personal information

We do not sell your personal information. We share it only:

With the service providers described in section 1, who process it on our instructions to help us run the business.
With professional service providers who help us operate, such as marketing and advertising partners.
Where required to comply with applicable laws, respond to lawful requests (such as a court order), or protect our legal rights.

You can read how Shopify handles personal information at https://www.shopify.com/legal/privacy.

5. Advertising and analytics

We use Google Analytics to understand how customers use the Site. You can read Google's privacy policy at https://policies.google.com/privacy and opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.

We also share limited information about your use of the Site, your purchases and your interaction with our ads with advertising partners, so we can show you relevant advertising. Some of this uses cookies or similar technologies, which are only set with your consent where the law requires it.

You can learn how targeted advertising works at the Network Advertising Initiative: https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising here:

You can also use the Digital Advertising Alliance's opt-out portal: https://optout.aboutads.info.

6. Cookies

A cookie is a small file downloaded to your device when you visit the Site. We use functional, performance, advertising and social/content cookies. Non-essential cookies are only set with your consent, which you can give or change via our cookie banner. For full details, please see our Cookie Policy [link to /pages/cookie-policy].

7. How long we keep your information

We keep personal information only as long as we need it:

Order and transaction records - up to 6 years after purchase, to meet tax, accounting and legal obligations.
Marketing data - until you unsubscribe or ask us to remove you.
Support correspondence - for up to 2 years after your query is resolved.
Device and analytics data - according to the retention periods of the relevant cookies and tools.

You can ask us to erase your personal information at any time - see "Your rights" below.

8. International transfers

Your personal information is initially processed in Ireland and may then be transferred outside the UK and Europe for storage and processing, including to Canada and the United States, by our service providers. Where this happens, transfers are protected by appropriate safeguards such as adequacy decisions and standard contractual clauses. For more on how Shopify handles transfers, see https://help.shopify.com/en/manual/your-account/privacy/GDPR.

9. Automated decision-making

We do not make fully automated decisions about you that have legal or similarly significant effects. Our processor Shopify uses limited automated fraud-prevention measures that do not have such effects - for example temporary blocklists of IP addresses or cards associated with repeated failed transactions, which persist for a short period.

10. Your rights

If you are in the UK or the EEA, you have the right to:

Access the personal information we hold about you.
Correct information that is inaccurate or incomplete.
Erase your personal information.
Port your information to another service.
Object to processing based on legitimate interests - and to object at any time to your information being used for direct marketing, which we will always honour.
Restrict processing in certain circumstances.
Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email hello@thewhatsupp.com. We will respond within one month.

If you are a resident of California, you have the right to know what personal information we hold about you, to access it, to ask for it to be corrected or deleted, and to port it to another service. You may also designate an authorised agent to make these requests on your behalf. Contact us at the details below.

11. Children

The Site is not intended for anyone under 16, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it.

12. Do Not Track

Because there is no consistent industry standard for responding to "Do Not Track" browser signals, we do not currently alter our practices when we detect one.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal or regulatory reasons. The latest version will always be on this page.

14. Contact and complaints

For questions, requests or complaints about your personal information, contact us at hello@thewhatsupp.com, or by post:

The Whatsupp Co. Ltd (trading as The What Supp Co.)
PO Box 80568
London NW6 9AR

If you are not satisfied with our response, you have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO): https://ico.org.uk/make-a-complaint. If you are in the EEA, you may also contact your local data protection authority.

Last updated: 1 August 2026