Last updated: 1 October 2026

We're a small, independent business and we respect your privacy. We never sell your personal data. This policy explains what we collect, why, who we share it with and your rights under the UK GDPR and, for customers in the EU, the EU GDPR.

1. Who we are

Paguro Limited, trading as Paguro Upcycle, is the controller of your personal data. Registered in England and Wales (company number 08750559). Registered office: Office 1013, 37 Westminster Buildings, Theatre Square, Nottingham NG1 6LG, United Kingdom. Contact: info@paguroupcycle.com.

2. What we collect

  • Order details: your name, email, phone number, billing and delivery address, what you bought and your order history. We do not see or store your full card details – payments are handled securely by our payment providers.
  • Account details: if you create an account, your login details and saved addresses.
  • Newsletter and marketing: your email address and your marketing preferences.
  • Wishlist: the items you save and, if you give it, your email address so we can remind you about them.
  • Reviews and messages: reviews you leave and messages you send us.
  • Website use: information about your device and how you use our site, collected through cookies and similar technologies (see section 7).

3. How we use it, and why

  • To process and deliver your order, handle returns and provide customer service – because this is necessary to fulfil our contract with you.
  • To send our newsletter and offers – only with your consent. You can unsubscribe at any time using the link in every email.
  • To send wishlist and basket reminders and ask for reviews of products you've bought – with your consent or in our legitimate interest in running our shop, and you can opt out at any time.
  • To improve our website and prevent fraud – in our legitimate interests in running a secure, working shop.
  • To keep accounting and tax records – because the law requires it.

4. Who we share it with

We only share your data with trusted service providers who help us run our shop, and only as much as they need:

  • Shopify, which hosts our online shop, checkout and customer emails;
  • payment providers such as Shopify Payments and PayPal;
  • delivery companies such as Royal Mail and DHL, to deliver your order (and, for international orders, customs authorities);
  • apps that power features of our shop, such as our wishlist (Swym) and reviews (Reviews.io);
  • analytics and advertising partners, such as Microsoft Clarity, Google, Meta (Facebook and Instagram) and Pinterest – only where you have agreed to the relevant cookies.

We may also disclose data where the law requires it, or to protect our rights or prevent fraud.

5. International transfers

Some of our providers, including Shopify, store or process data outside the UK (for example in Canada, Ireland or the USA). Where this happens, the transfer is protected by an adequacy decision or by approved safeguards such as standard contractual clauses.

6. How long we keep it

  • Order and accounting records: six years after the end of the financial year, as required by law.
  • Newsletter data: until you unsubscribe.
  • Customer service messages: up to two years.
  • Wishlist data: until you delete your wishlist or ask us to remove it.

7. Cookies

We use essential cookies to make our shop work (for example to remember your basket). With your consent, we also use analytics cookies to understand how our site is used and marketing cookies to show you relevant adverts. You can accept, reject or change your choices at any time using our cookie banner, and you can also block cookies in your browser settings.

8. Your rights

You have the right to access your personal data, have it corrected or deleted, restrict or object to how we use it, receive it in a portable format, and withdraw your consent at any time. To use any of these rights, email info@paguroupcycle.com. We will reply within one month.

If you're unhappy with how we use your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) or, if you live in the EU, your local data protection authority.

9. Keeping your data safe

We use secure, encrypted systems and limit access to your data to the people who need it to serve you.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.