Privacy Policy

Last updated: 27 August 2026

This Privacy Policy explains how Board-Worx collects, uses, stores and shares personal information when you visit www.board-worx.com, buy from us, contact us or otherwise interact with our business.

We are committed to handling personal information fairly, lawfully and transparently in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who is responsible for your personal information?

The data controller is:

Whitstable Windsurfing Limited, trading as Board-Worx
Company number: 05103154
VAT number: GB 837 877 369

Trading and correspondence address:
Board-Worx
Beach Walk
Whitstable
Kent
CT5 2BP
United Kingdom

Registered office:
2nd Floor, Maritime Place Quayside
Chatham Maritime
Chatham
Kent
ME4 4QZ
United Kingdom

Email: info@board-worx.com
Phone: +44 1227 276566

2. Personal information we may collect

Depending on how you use our Website and services, we may collect and process information including:

• your name;
• billing and delivery address;
• email address;
• telephone number;
• order and purchase history;
• products you have viewed or added to your basket;
• customer account information;
• payment and transaction information;
• refund and returns information;
• communications you send to us by email, contact form, telephone, WhatsApp or other channels;
• reviews or other content you choose to submit;
• IP address;
• browser and device information;
• Website usage information;
• cookie and similar tracking information;
• marketing preferences;
• information relevant to fraud prevention and Website security; and
• any other information you voluntarily provide to us.

3. Payment information

Payments made through our Website are processed using third-party payment providers.

We do not normally receive or store your complete payment-card number. Payment providers process payment information and tell us whether a transaction has been successfully authorised or completed.

Depending on the payment method you choose, payment providers may include:

• Shopify Payments;
• Shop Pay;
• Visa;
• Mastercard;
• American Express;
• Google Pay;
• PayPal; and
• Klarna.

Those providers process personal information under their own privacy notices and may act as independent data controllers for some of their activities.

4. How we use your information

We may use personal information to:

• process and fulfil orders;
• take and administer payments;
• arrange delivery and collection;
• manage returns, repairs, refunds and warranties;
• create and administer customer accounts;
• answer questions and provide customer support;
• communicate with you about an order or enquiry;
• keep appropriate accounting, tax and business records;
• prevent and investigate fraud, abuse and security incidents;
• operate, maintain and improve our Website;
• understand Website usage and performance;
• measure advertising effectiveness;
• show advertising where permitted;
• send marketing where permitted by law;
• manage reviews and customer feedback;
• establish, exercise or defend legal claims; and
• comply with our legal and regulatory obligations.

5. Our lawful bases for using personal information

UK data protection law requires us to have a lawful basis for processing personal information. The basis we rely on depends on what we are doing with the information.

Contract

We process information where it is necessary to enter into or perform a contract with you. This includes processing an order, taking payment, arranging delivery, handling a return and communicating with you about your purchase.

Legal obligation

We process information where necessary to comply with legal obligations, including tax, accounting, consumer-protection and other regulatory requirements.

Legitimate interests

We may process information where it is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.

These interests may include:

• operating and protecting our business and Website;
• preventing fraud and misuse;
• providing customer service;
• maintaining business records;
• understanding how customers use our services;
• improving our products, Website and customer experience; and
• establishing or defending legal claims.

Consent

Where the law requires consent, we rely on your consent. This may include certain marketing communications and the use of non-essential cookies or similar tracking technologies.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawing consent does not affect processing that was lawful before it was withdrawn.

6. Orders and customer accounts

When you place an order, we use the information you provide to process payment, fulfil the order, arrange delivery, communicate with you, handle returns or complaints and maintain records of the transaction.

If you create a customer account, we use the information associated with that account to provide account functionality and make it easier for you to manage orders and details.

7. Customer service and enquiries

If you contact us by email, telephone, Website form, WhatsApp or another communication service, we use the information you provide to respond to your enquiry and maintain an appropriate record of the communication.

Depending on the communication method, third-party communication providers may also process your information.

8. Marketing

We may send marketing communications where we have a lawful basis to do so.

Where consent is required, we will ask for it. In circumstances where UK electronic-marketing rules permit us to contact an existing customer about similar products or services, we may rely on the applicable existing-customer provisions, provided you were given an appropriate opportunity to opt out.

You can stop receiving direct marketing from us at any time by using the unsubscribe option provided in a message, adjusting any available marketing preferences, or contacting us at info@board-worx.com.

We may retain a minimal suppression record after you unsubscribe so that we can respect your request not to receive future marketing.

9. WhatsApp

Where you choose to communicate with Board-Worx through WhatsApp, Meta and WhatsApp may process information associated with those communications under their own terms and privacy policies.

We may use WhatsApp for customer-service communications and, where permitted by law, marketing communications.

You can ask us to stop sending marketing messages through WhatsApp at any time.

10. Analytics and advertising

We use services that help us understand how our Website is used and how effective our advertising is.

These services may include:

• Google Analytics 4;
• Google Ads conversion tracking;
• Google Conversion Linker; and
• Google Tag Manager.

Depending on your consent choices and the configuration of these services, information such as device information, Website interactions, cookies, online identifiers and usage data may be processed.

Where UK law requires consent for non-essential cookies or similar technologies, we ask for consent before using them.

11. Reviews

We may use third-party review services, including Judge.me, to request, collect, manage or display customer reviews.

If you submit a review, information associated with that review may be processed by us and the relevant review provider.

You should not include information in a public review that you do not want other people to see.

12. Shopify

Our online store is hosted on Shopify. Shopify provides the ecommerce platform that allows us to operate our Website and sell products online.

Shopify may process information about Website visitors and customers in order to provide hosting, checkout, payment, security, customer-account and other ecommerce services.

Shopify may process information in more than one country in accordance with its own privacy arrangements and applicable law.

13. Cloudflare and Website infrastructure

Where used on our Website, Cloudflare provides services including Website performance, traffic management and security.

Cloudflare may process technical information such as IP addresses, device details and Website requests in order to provide those services.

14. Google-hosted services

Some Website features or resources may use services provided by Google, including Google Hosted Libraries.

Those services may receive technical information such as IP address, browser information and Website request data.

15. Cookies and similar technologies

Our Website uses cookies and similar technologies. Some cookies are necessary for core functions such as security, checkout, the shopping basket and remembering privacy choices. Other cookies may be used for analytics, advertising, preferences or related purposes.

Where consent is required by law, we use non-essential cookies and similar technologies only in accordance with the choices you make through our cookie controls.

We use Avada Cookie Consent to display the cookie banner and manage available choices. When the banner is shown, select Preferences to review the available cookie categories. You can change or withdraw your choices at any time by using the cookie-settings icon displayed on the Website.

The cookies and third-party services used on the Website may change as our services are updated. Our cookie controls provide the current categories and choices available on your device.

16. Who we share personal information with

Where necessary, we may share personal information with organisations including:

• Shopify and ecommerce service providers;
• payment processors and payment networks;
• Klarna and other payment providers chosen by you;
• delivery companies and couriers;
• IT, hosting, security and Website-service providers;
• analytics and advertising providers;
• communications providers;
• review platforms;
• professional advisers such as accountants, insurers and lawyers;
• government, tax, regulatory or law-enforcement authorities where required; and
• other organisations where disclosure is required by law or necessary to establish, exercise or defend legal rights.

We only disclose information that is reasonably necessary for the relevant purpose.

17. International transfers

Some of our service providers operate internationally, so personal information may be processed outside the United Kingdom.

Where UK data protection law requires safeguards for an international transfer, we rely on an appropriate lawful transfer mechanism. Depending on the destination and provider, this may include:

• UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the UK Addendum to approved standard contractual clauses; or
• another transfer mechanism permitted by UK data protection law.

You can contact us if you would like further information about safeguards relevant to a particular transfer.

18. How long we keep personal information

We do not keep personal information for longer than reasonably necessary. The appropriate retention period depends on why the information was collected, our legal obligations and whether the information may be needed to establish or defend a legal claim.

Our general approach is:

• Order, transaction, invoice and accounting information: retained for the period required by applicable tax, accounting and company law and for an appropriate period afterwards where necessary for legal claims.
• Customer-account information: retained while the account remains active and afterwards for as long as reasonably necessary for orders, legal obligations, fraud prevention and dispute handling.
• Customer-service communications: retained for as long as reasonably necessary to deal with the enquiry, maintain appropriate business records and handle any resulting dispute.
• Returns, warranty and complaint information: retained for as long as reasonably necessary to administer the matter and protect the legal rights of you and us.
• Marketing information: retained until you opt out, withdraw consent where applicable, or the information is no longer reasonably required. We may retain a suppression record so that we can honour an opt-out request.
• Cookie, analytics and advertising information: retained according to the settings and retention periods applying to the relevant cookie or third-party service.
• Security and fraud-prevention information: retained for as long as reasonably necessary to protect the Website, investigate incidents and establish or defend legal claims.

When information is no longer required, we will delete it, anonymise it or otherwise dispose of it appropriately.

19. Keeping your information secure

We take reasonable technical and organisational measures designed to protect personal information against accidental or unlawful loss, misuse, alteration, unauthorised access or disclosure.

No internet or electronic-storage system can be guaranteed to be completely secure, but we take reasonable steps appropriate to the nature of the information we process.

20. Your UK data protection rights

Depending on the circumstances and the lawful basis for processing, you may have rights including:

• the right to be informed about how your personal information is used;
• the right to request access to your personal information;
• the right to ask us to correct inaccurate or incomplete information;
• the right to request erasure of your information in certain circumstances;
• the right to request restriction of processing in certain circumstances;
• the right to object to certain processing;
• the right to data portability in certain circumstances; and
• the right to withdraw consent where we rely on consent.

These rights are not absolute and may be subject to legal exemptions.

Your right to object

You have the right to object at any time to the use of your personal information for direct marketing. If you object to direct marketing, we will stop using your information for that purpose.

You may also have the right to object to processing based on legitimate interests, depending on the circumstances.

21. Exercising your rights

To make a data protection request, contact:

Email: info@board-worx.com

Post:
Board-Worx
Beach Walk
Whitstable
Kent
CT5 2BP

We may need to ask for information to confirm your identity before responding to certain requests.

We will respond within the period required by applicable data protection law. There is normally no charge for exercising your rights, although the law permits charges or refusal in certain limited circumstances.

22. Automated decision-making

Board-Worx does not normally make decisions about customers based solely on automated processing that produce legal or similarly significant effects.

Third-party payment, fraud-prevention or credit providers may use automated systems when deciding whether to authorise a transaction or provide their service. For example, Klarna may carry out its own eligibility or credit checks. Those organisations are responsible for explaining their own decision-making processes in their privacy information.

23. Complaints

If you are concerned about how we have handled your personal information, please contact us first and we will try to resolve the issue.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Information about making a complaint is available from the ICO at ico.org.uk .

24. Links to other websites

Our Website may contain links to websites operated by other organisations. We are not responsible for the privacy practices of those websites. Please read the privacy information provided by the relevant organisation when you visit another website.

25. Children's information

Our Website is not intended specifically to collect personal information from children. If a parent or guardian believes that a child has provided us with personal information inappropriately, they can contact us at info@board-worx.com.

26. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Website, service providers, business practices or the law.

When we make a significant change, we will update the date shown at the top of this page and take any additional steps required by law.

27. Contact details

Whitstable Windsurfing Limited trading as Board-Worx
Company number: 05103154
VAT number: GB 837 877 369

Board-Worx
Beach Walk
Whitstable
Kent
CT5 2BP
United Kingdom

Email: info@board-worx.com
Phone: +44 1227 276566

Registered office:
2nd Floor, Maritime Place Quayside
Chatham Maritime
Chatham
Kent
ME4 4QZ
United Kingdom