Privacy Policy

Privacy Policy

This page explains what data we collect, how we use it, and your rights.

Last updated: 23 Feb 2026

 

1. Who we are

This Privacy Policy explains how Only Rags (“we”, “us”, “our”) collects and uses personal information when you use onlyrags.co.uk (the “Site”) and our services.

Contact: [Insert support email]

Address: [Insert address]

2. What we collect

Depending on how you interact with us, we may collect:

  • Identity and contact data: name, email, phone number, billing and delivery address

  • Order data: items purchased, order value, returns, support queries

  • Payment information: payment status and transaction references (card details are handled by payment providers)

  • Technical data: IP address, device and browser details, cookie identifiers

  • Usage data: pages visited, actions on the Site

  • Marketing preferences: subscription status and consent choices

3. How we use your information

We use personal information to:

  • process and deliver orders

  • manage returns, refunds, and customer support

  • prevent fraud and protect the Site

  • improve the Site, products, and customer experience

  • send service messages (order and delivery updates)

  • send marketing where you have opted in, and measure marketing performance

4. Lawful bases for processing

We process your personal information where it is necessary to:

  • perform a contract with you (to fulfil orders)

  • comply with legal obligations (tax and accounting, fraud prevention)

  • pursue legitimate interests (running and improving our business, security, analytics) where those interests are not overridden by your rights

  • use consent (for marketing emails and certain cookies) where required

5. Cookies and similar technologies

We use cookies and similar technologies for site functionality, analytics, and advertising. You can manage cookie preferences via our cookie banner and your browser settings. Where required, we will ask for your consent.

6. Sharing your information

We share personal information only as needed to run our business, for example with:

  • ecommerce platform providers (for example Shopify)

  • payment processors (for card payments and fraud checks)

  • delivery and logistics partners

  • customer support and email providers

  • analytics and advertising partners where you have permitted this via cookie settings

We may also share information if required by law or to protect our rights.

7. International transfers

Some service providers may process data outside the UK. Where this happens, we use appropriate safeguards designed to protect your information (for example contractual protections).

8. Data retention

We keep personal information only as long as necessary for the purposes described, including to meet legal, accounting, and reporting obligations. Retention periods vary depending on the type of data and purpose.

9. Security

We use appropriate technical and organisational measures to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Your rights

You may have rights including:

  • access to your personal information

  • correction of inaccurate information

  • deletion (in certain circumstances)

  • restriction and objection to processing (in certain circumstances)

  • data portability (in certain circumstances)

  • withdrawing consent (where processing is based on consent)

To exercise rights, contact us at [Insert support email]. You also have the right to complain to the UK Information Commissioner’s Office.

11. Marketing

If you opt in to marketing, you can unsubscribe at any time using the link in emails or by contacting us. Service messages about your orders are not marketing and will still be sent.

12. Children

Our Site is not intended for children, and we do not knowingly collect data from children.

13. Changes to this policy

We may update this policy from time to time. The latest version will be posted on the Site.