PRIVACY & COOKIE POLICY

Effective Date: 21/08/2026

Applies to: Workwear Scotland and Catchfly Merchandise, including online Stores and Portals operated through our platform.

We respect your privacy and are committed to protecting your personal information.

This Privacy & Cookie Policy explains what information we collect, how we use it, who we may share it with, how we use cookies, and the rights you have in relation to your personal information.

If you have any questions about this policy or how we handle your information, please contact us at sales@workwearscotland.com.

1. WHO WE ARE

This policy applies to Workwear Scotland and Catchfly Merchandise.

We operate our websites and provide online Stores and Portals for businesses, clubs, organisations and other customers.

Our websites, Stores and Portals use technology and services provided by third parties, including DecoNetwork, which provides ecommerce, Store and Portal functionality.

2. WHAT INFORMATION WE COLLECT

The information we collect depends on how you interact with us.

Personal Information

We may collect:

• Name
• Email address
• Telephone number
• Billing and delivery address
• Account and login information
• Order and purchase information
• Business or organisation details
• Artwork, logos and other files you upload
• Information you provide when contacting us
• Information required to administer a Store or Portal

If you operate a Store or Portal on behalf of a business, club or organisation, we may also collect information about that business or organisation.

Technical and Usage Information

When you use our websites, we may automatically collect information such as:

• IP address
• Browser type and version
• Device and operating system
• Pages visited
• Approximate time spent on pages
• Referring website or source
• Information about how you use our websites

Some technical information may constitute personal data where it can be linked to an identifiable individual.

3. HOW WE COLLECT INFORMATION

We collect information when you:

• Create an account
• Place an order
• Set up or manage a Store or Portal
• Complete forms on our websites
• Contact us by email or telephone
• Subscribe to marketing communications
• Upload artwork or other files
• Interact with our websites and online services

We may also collect technical and usage information through cookies and similar technologies, where permitted.

4. HOW WE USE YOUR INFORMATION

We may use your personal information to:

• Process and fulfil orders
• Arrange delivery
• Manage customer accounts
• Operate Stores and Portals
• Provide customer and technical support
• Communicate with you about orders, accounts and services
• Provide quotations
• Administer Store Owner accounts and services
• Process payments and related transactions
• Improve our websites, Stores, Portals and services
• Maintain the security of our systems
• Prevent and detect fraud or misuse
• Maintain business and financial records
• Comply with legal and regulatory obligations
• Send marketing communications where permitted

We do not sell your personal information.

5. OUR LAWFUL BASES FOR USING YOUR INFORMATION

We use personal information only where we have a lawful basis to do so under applicable data protection law.

Depending on the circumstances, this may include:

Processing and fulfilling an order — Contract

Managing your account — Contract

Operating a Store or Portal — Contract

Providing customer support — Contract and/or legitimate interests

Processing payments — Contract and/or legal obligation

Maintaining financial and business records — Legal obligation

Preventing fraud and protecting our systems — Legitimate interests and/or legal obligation

Improving our services — Legitimate interests, or consent where required

Website analytics — Consent where required

Marketing communications — Consent or another lawful basis where permitted

The lawful basis used will depend on the particular circumstances and the purpose for which your information is being processed.

6. PAYMENT INFORMATION

Payments made through our websites and Stores are processed securely by third-party payment providers.

We do not normally have access to your full payment card details.

Payment providers may process your personal information in accordance with their own privacy policies and terms.

We may retain limited payment and transaction information where necessary for order administration, accounting, fraud prevention or legal requirements.

7. WHEN WE SHARE YOUR INFORMATION

We may share relevant personal information with trusted third parties where necessary to provide our services.

These may include:

• Payment providers
• Courier and delivery companies
• Production and fulfilment partners
• Website, hosting and technology providers
• DecoNetwork and other platform providers
• Email and communication providers
• Analytics providers
• Professional advisers
• Government bodies, regulators or law enforcement where required or permitted by law

Some of these service providers may process or store personal information outside the UK. Where this occurs, we ensure that appropriate safeguards are in place in accordance with applicable UK data protection law.

Store Owners and Organisations

If you place an order through a Store or Portal operated on behalf of a business, club or organisation, we may share relevant information with the Store Owner or organisation where this is necessary to operate the Store or Portal.

The information shared will depend on the particular Store or Portal and may include your name, order details, delivery information or other information necessary to provide the service.

8. THIRD-PARTY SERVICE PROVIDERS

We use third-party companies to help us operate our websites, Stores and Portals.

These may provide services including:

• Ecommerce and Store technology
• Hosting and infrastructure
• Payment processing
• Website analytics
• Email and marketing
• Production and fulfilment
• Delivery and courier services
• Security and fraud prevention

Where a provider processes personal information on our behalf, we take appropriate steps to ensure that your information is handled securely and only for authorised purposes.

Some providers may act as independent data controllers and will have their own privacy policies.

9. COOKIES

Our websites use cookies and similar technologies to provide essential website functionality and, where you give permission, to understand how our websites are used and support additional features.

Necessary Cookies

These cookies are essential for our website to function properly. They support core features such as secure login, shopping baskets, checkout and other essential website functions.

They cannot be switched off through our cookie consent settings because the website may not function correctly without them.

Analytics Cookies

These cookies help us understand how visitors use our website, such as which pages are visited and how the website performs.

This information helps us improve our website, products and services.

These cookies are optional and will only be used where you have given the required consent.

Targeting Cookies

These cookies may be used to understand how visitors interact with our website and to support relevant marketing or advertising activities.

They may also help measure the effectiveness of marketing campaigns.

These cookies are optional and will only be used where you have given the required consent.

Social Sharing Cookies

These cookies support features that allow you to share content through social media and other third-party services.

They may also allow those services to recognise your interaction with our website.

These cookies are optional and will only be used where you have given the required consent.

Third-Party Content

These cookies support content and features provided by third-party services, such as embedded content, fonts and other resources used on our websites.

They may allow the third-party provider to collect information about your visit.

These cookies are optional and will only be used where you have given the required consent.

Managing Your Cookie Preferences

When you first visit our website, you can choose which optional cookie categories you wish to allow.

Your choices are remembered as you move around the website.

You can change your cookie preferences at any time through the cookie consent controls provided on our website.

10. GDPR DATA CONSENT AND INTERNATIONAL TRANSFERS

Some of the technology providers we use may process or store personal information outside the United Kingdom or European Union.

Our ecommerce platform provider, DecoNetwork, may store personal information on servers located outside the European Union.

Where required, you will be asked to provide consent to the storage of your personal information outside the EU.

DecoNetwork records relevant consent information, including the date and time of consent, IP address and source of the consent.

Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection law.

11. MARKETING

We may send information about our products, services, offers or other relevant updates where we are legally permitted to do so.

Where consent is required, we will only send marketing communications where you have opted in.

You can unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails or by contacting us at sales@workwearscotland.com.

Withdrawing marketing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

12. HOW LONG WE KEEP YOUR INFORMATION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

The length of time we keep information depends on factors including:

• Why the information was collected
• The nature of the information
• Whether you continue to use our services
• Legal and accounting requirements
• Our legitimate business requirements
• Our need to establish or defend legal claims

Some information, such as financial and transaction records, must be retained for longer periods to meet legal and regulatory requirements.

When information is no longer required, we will securely delete it or anonymise it where appropriate.

13. YOUR DATA PROTECTION RIGHTS

Under UK data protection law, you may have the right to:

• Request access to the personal information we hold about you
• Ask us to correct inaccurate or incomplete information
• Ask us to delete your personal information in certain circumstances
• Ask us to restrict how we use your information in certain circumstances
• Object to certain processing
• Request a copy of your information in a portable format in certain circumstances
• Withdraw consent where we rely on consent as our lawful basis

These rights are subject to certain legal exceptions and limitations.

To exercise your rights, contact us at sales@workwearscotland.com.

We may need to verify your identity before processing certain requests.

14. DATA SECURITY

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Where we become aware of a personal data breach that requires notification under applicable law, we will take the appropriate steps.

15. CHILDREN'S PRIVACY

Our websites and Stores are not specifically directed at children.

We do not knowingly collect personal information from children where we are not permitted to do so.

If you believe that a child has provided us with personal information in circumstances where this should not have occurred, please contact us at sales@workwearscotland.com.

16. THIRD-PARTY WEBSITES

Our websites may contain links to websites or services operated by third parties.

This Privacy & Cookie Policy does not apply to those external websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

17. CHANGES TO THIS POLICY

We may update this Privacy & Cookie Policy from time to time to reflect changes to our services, technology, legal requirements or how we process personal information.

The latest version will always be published on this page with the updated effective date.

Where appropriate, we may also notify registered users of significant changes by email or through their account.

18. CONTACT US

If you have any questions about this Privacy & Cookie Policy, how we use your information or your data protection rights, please contact us:

Business: Catchfly Merchandise

Trading as: Workwear Scotland / Catchfly Merchandise

Email: sales@workwearscotland.com

Website: www.workwearscotland.com

If you are unhappy with how we have handled your personal information, you have the right to raise a concern with the Information Commissioner's Office (ICO).