Privacy Policy

Last updated: 6 August 2026

Warmoura (“Warmoura”, “we”, “us”, “our”) is a United Kingdom based wellness brand that ships internationally from warmoura.com. Looking after your personal information matters to us as much as the comfort of the products we make. This policy explains what we collect, why we collect it, how long we keep it, and the control you have over it.

Warmoura is the data controller for the personal information described below. We handle personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and — for customers in the EU and EEA — the EU GDPR.

1. Who we are

  • Trading name: Warmoura
  • Website: warmoura.com
  • Registered / trading address: [TO CONFIRM — registered business address]
  • Company registration number: [TO CONFIRM — Companies House number, if registered]
  • UK VAT number: [TO CONFIRM — if VAT registered]
  • Privacy contact: support@warmoura.com

2. The information we collect

We only collect what we need to run the shop well.

Information you give us

  • Order details — name, billing and delivery address, email address, telephone number, and the items you bought.
  • Payment details — processed by our payment providers. Warmoura never sees or stores your full card number.
  • Account details — if you create an account: your login credentials, saved addresses and order history.
  • Marketing preferences — the email address you give us when you subscribe, and whether you have opted in or out.
  • Support correspondence — anything you send us by email or through our contact form, including photographs you send to support a damage or warranty claim.
  • Reviews and content — any review, photo or comment you choose to submit.

Information we collect automatically

  • Device and browsing data — IP address, browser type and version, time zone, operating system, referring site, and the pages you viewed on warmoura.com.
  • Cookies and similar technologies — described in full in our Cookie Policy.
  • Fraud signals — data used by Shopify and our payment providers to screen orders for fraud.

Information from third parties

  • Order and delivery status from our carriers and fulfilment partners.
  • Payment authorisation and chargeback information from our payment providers.
  • Aggregated advertising and analytics data from platforms such as Meta, Google and TikTok, where you have consented to marketing cookies.

3. Why we use your information, and our lawful basis

What we do Lawful basis (UK / EU GDPR)
Take payment, fulfil and deliver your order, send order and shipping confirmations Performance of a contract
Handle returns, refunds, exchanges and warranty claims Performance of a contract / legal obligation
Answer your questions and provide customer support Legitimate interests — running a responsive shop
Prevent fraud and keep the store secure Legitimate interests / legal obligation
Keep tax, VAT, customs and accounting records Legal obligation
Send marketing emails and personalised advertising Consent — you can withdraw it at any time
Measure how the site is used and improve it Consent for analytics cookies; legitimate interests for aggregated reporting
Publish a review you submitted Consent

4. Who we share your information with

We never sell your personal information. We share it only with the partners who make an order possible, and only what they need:

  • Shopify Inc. — our e-commerce platform, which hosts the store and processes orders on our behalf.
  • Payment providers — Shopify Payments, PayPal, Klarna, Apple Pay, Google Pay and similar, to take and secure your payment.
  • Fulfilment and shipping partners — our suppliers and carriers, who receive the name, address and contact details needed to deliver your parcel and, for international orders, the customs information the destination country requires.
  • Email and marketing platforms — to send order notifications and, where you have consented, marketing.
  • Analytics and advertising platforms — where you have accepted the relevant cookies.
  • Professional advisers and authorities — accountants, insurers, lawyers, HMRC or law enforcement, where we are required or permitted to disclose.

If Warmoura is ever sold or merged, customer data may transfer to the new owner under the same protections described here.

5. International transfers

Because we sell internationally, some of our partners are based outside the UK and EEA — including in the United States, Canada and Asia. Where personal data leaves the UK or EEA we rely on one of the following safeguards: an adequacy decision by the UK Government or European Commission, the UK International Data Transfer Agreement or Addendum, or the European Commission’s Standard Contractual Clauses. You may ask us which safeguard applies to a particular transfer.

6. How long we keep your information

  • Order, invoice and VAT records — 7 years from the end of the relevant financial year, as UK tax law requires.
  • Customer accounts — while your account is open, and for 24 months after your last activity, after which we delete or anonymise it.
  • Support correspondence — 3 years from the date the matter is closed.
  • Marketing data — until you unsubscribe, and then a minimal suppression record so we do not contact you again by mistake.
  • Cookie and analytics data — as set out in our Cookie Policy.

7. Your rights

Under UK and EU data protection law you have the right to:

  • Be informed about how your data is used — this policy.
  • Access a copy of the personal data we hold about you.
  • Rectify data that is inaccurate or incomplete.
  • Erase your data, where we have no continuing legal reason to keep it.
  • Restrict or object to our processing, including any processing based on legitimate interests.
  • Data portability — receive your data in a structured, machine-readable format.
  • Withdraw consent at any time, without affecting processing carried out before you withdrew it.

To exercise any of these rights, email support@warmoura.com. We respond within one month. We may ask you to confirm your identity first, so that we never release your data to someone else.

If you are not satisfied with our response you may complain to the UK Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. If you live in the EU or EEA you may complain to your local supervisory authority. We would always prefer the chance to put things right first.

8. Marketing emails

We only email marketing to people who have asked for it. Every marketing email carries a one-click unsubscribe link, and you can also email us to be removed. Unsubscribing takes effect immediately. It never affects transactional messages such as order confirmations, dispatch notices or refund receipts, which we must send in order to fulfil your order.

9. Automated decisions

We do not make decisions about you by automated means that produce legal effects. Our payment providers do run automated fraud screening on orders; if an order is declined on those grounds, contact us and we will review it manually.

10. Security

warmoura.com is served over TLS encryption and payments are handled by PCI-DSS compliant providers. We limit access to personal data to the people who need it to do their job. No system is perfectly secure, but if a breach ever affected your rights we would notify you and the Information Commissioner’s Office as the law requires.

11. Children

Warmoura products and this website are intended for adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us their data, contact us and we will delete it.

12. Changes to this policy

We may update this policy as our business, our partners or the law change. The date at the top always shows the current version. Where a change materially affects your rights we will tell you by email or with a notice on the site.

13. Contact us

We answer privacy enquiries within 24–48 business hours and complete formal data requests within one month.