Privacy Policy

Effective Date: 02 Mar 2026

1. Who We Are
iNWAYS operates the website inways.shop from:
Great Portland Street
London, England
W1W 5PF
For any data protection queries, contact:
support@inways.shop
We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Personal Data We Collect
2.1 Information You Provide Directly
When you use our website or purchase a digital product, we may collect:
- Full name
- Email address
- Billing address
- Payment confirmation details (we do not store full card numbers)
- Order history
- Customisation information you submit
- Communications sent to our support team

2.2 Information Collected Automatically
When you browse inways.shop, we may collect:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent on site
- Referral source
- Cookie identifiers
This information helps us improve website functionality and security.

3. Legal Basis for Processing
Under UK GDPR, we process your data based on:
- Contractual necessity – to fulfil your order
- Legal obligation – to comply with tax and accounting laws
- Legitimate interests – to operate and improve our business
- Consent – for marketing communications (where applicable)
You may withdraw consent at any time.

4. How We Use Your Information
We use your data to:
- Process and deliver customised digital products
- Communicate about your order
- Provide customer support
- Prevent fraud and secure transactions
- Improve website performance
- Send marketing communications (if you opt in)
- Comply with legal obligations
We do not sell your personal data to third parties.

5. Sharing Your Information
We may share your data with:
- Payment processors
- Website hosting providers
- IT and security providers
- Professional advisers (legal/accounting)
- Government authorities where legally required
All third parties are required to process data securely and lawfully.

6. International Transfers
Where service providers operate outside the UK, we ensure appropriate safeguards are in place, such as:
- UK-approved standard contractual clauses
- Adequacy regulations

7. Data Retention
We retain personal data only as long as necessary:
- Order records: typically 6 years (for tax compliance)
- Marketing data: until you unsubscribe
- Support communications: as reasonably required
Data is securely deleted or anonymised when no longer needed.

8. Your Rights Under UK GDPR
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure (“right to be forgotten”)
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent at any time
To exercise your rights, contact:
support@inways.shop
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

9. Cookies
We use cookies to:
- Enable essential website functionality
- Improve performance
- Analyse traffic
- Remember preferences
You can control cookies through your browser settings.
Further details are provided in our Cookie Policy.

10. Data Security
We implement appropriate technical and organisational measures including:
- SSL encryption
- Secure hosting environments
- Access restrictions
- Payment gateway security compliance
However, no system is completely secure, and we cannot guarantee absolute protection.

11. Updates to This Policy
We may update this Privacy Policy periodically.
The latest version will always appear on inways.shop.