Privacy Policy

Last Updated: 7 September 2026

1. Who controls your personal data

Tee Hub Ltd (“Tee Hub”, “we”, “us”, “our”) is the controller of personal data collected through tee-hub.com.

Registered Address:

Unit A, 82 James Carter Road
Mildenhall Industrial Estate
Suffolk
IP28 7DE

ICO Registration Number: Tee Hub Ltd is not currently registered with the Information Commissioner’s Office (ICO). If registration becomes required, this Privacy Policy will be updated accordingly.

2. Data we collect

We may collect the following categories of personal data:

Identity and Contact Data

Name
Billing address
Delivery address
Email address
Telephone number

Order and Transaction Data

Products purchased
Order history
Payment status
Refund information
Discounts and promotions applied
Delivery and fulfilment information

Tee Hub does not store full payment card details. Payments are processed directly by our payment service providers.

Account Data

Username
Encrypted password
Account preferences
Saved account information

Social Login Data

Where you choose to register or sign in using Google, Apple, Facebook or another supported identity provider, we may receive information including:

Name
Email address
Profile image
Unique account identifier
Other information you choose to make available through the provider

The information we receive depends on your privacy settings and permissions with the provider. We do not receive or store your Google, Apple or Facebook password.

Where Apple’s “Hide My Email” feature is used, we may receive an email relay address instead of your actual email address.

Communication Data

Customer support enquiries
Contact form messages
Complaints
Reviews
Survey responses

Technical and Usage Data

IP address
Device information
Browser information
Operating system information
Website activity
Pages visited
Referring website
Cookie preferences
Session information

Marketing Data

Newsletter subscriptions
Marketing preferences
Campaign engagement information

Security and Fraud Prevention Data

Login activity
Security logs
Fraud prevention indicators
Risk assessment information

We do not intentionally collect special category personal data through normal retail transactions. Please do not provide such information unless specifically requested.

3. How we collect data

We collect personal data directly from you when you:

Visit our Website;
Create an account;
Place an order;
Subscribe to marketing communications;
Contact us;
Submit a review; or
Use social login features.

We may also receive personal data from:

Payment providers;
Delivery and courier services;
Fraud prevention providers;
Analytics providers;
Advertising providers;
Hosting and technology providers; and
Identity providers such as Google, Apple and Facebook when you choose to use social login functionality.

4. Purposes and lawful bases

Under UK GDPR, we must have a lawful basis for processing personal data.

To process orders and provide our services

Including payment processing, order fulfilment, shipping, returns and customer account management.

Lawful basis: Performance of a contract.

To provide customer support

Including responding to enquiries and resolving issues.

Lawful basis: Performance of a contract and legitimate interests.

To maintain financial and tax records

Including bookkeeping and regulatory compliance.

Lawful basis: Legal obligation.

To prevent fraud and maintain security

Including monitoring suspicious activity and securing customer accounts.

Lawful basis: Legitimate interests and legal obligations where applicable.

To provide social login functionality

Including account creation and authentication using Google, Apple and Facebook.

Lawful basis: Performance of a contract and legitimate interests in providing secure and convenient account access.

To improve our Website and services

Including analytics, troubleshooting and Website improvements.

Lawful basis: Legitimate interests and, where required, consent.

To send marketing communications

Including newsletters and promotional messages.

Lawful basis: Consent, or where permitted under the soft opt-in provisions of the Privacy and Electronic Communications Regulations (PECR).

You may withdraw consent at any time.

To personalise advertising

Where advertising personalisation technologies are enabled.

Lawful basis: Consent where required by law.

Where we rely on legitimate interests, we carefully consider the impact on your rights and freedoms and only process data where our interests are not overridden by your interests and fundamental rights.

5. Who receives data

We may share personal data where reasonably necessary with:

WooCommerce and WordPress service providers;
Hosting and technical support providers;
Payment processors;
Fraud prevention providers;
Print-on-demand providers;
Warehousing and fulfilment providers;
Delivery and courier companies;
Email and customer support providers;
Analytics providers;
Consent management providers;
Advertising providers;
Identity and authentication providers including Google, Apple and Meta (Facebook);
Professional advisers, insurers and auditors; and
Government agencies, regulators, law enforcement bodies or courts where required by law.

We do not sell personal data for money.

6. Social Login Services

Tee Hub provides the option to register and sign in using:

Google
Apple
Facebook

When you choose a social login option, you are redirected to the relevant provider’s authentication service.

We may receive information such as:

Your name;
Email address;
Profile image; and
A unique user identifier.

We use this information solely to:

Create and manage your account;
Authenticate future logins;
Improve account security;
Prevent fraud; and
Support customer service requests.

These providers process information in accordance with their own privacy policies and act as independent controllers for data collected through their own services.

Please review their privacy notices:

Google Privacy Policy: https://policies.google.com/privacy
Apple Privacy Policy: https://www.apple.com/legal/privacy/
Facebook Privacy Policy: https://www.facebook.com/privacy/policy/

7. International transfers

Some of our service providers may process personal data outside the United Kingdom.

Where UK GDPR applies and data is transferred internationally, we rely on appropriate safeguards such as:

UK adequacy regulations;
The International Data Transfer Agreement (IDTA);
The UK Addendum to Standard Contractual Clauses; or
Other lawful transfer mechanisms recognised under UK law.

This may include transfers by providers such as Google, Apple and Meta.

You may contact us for further information regarding applicable safeguards.

8. Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy.

Typical retention periods include:

Data Category	Retention Period
Order and tax records	6 years after the end of the relevant financial year
Customer service records	2 years
Website security logs	12 months
Marketing records	Until consent is withdrawn, plus suppression records as needed
Customer accounts	While active and up to 3 years after inactivity
Fraud prevention information	As reasonably necessary for security purposes

We may retain information longer where required to:

Comply with legal obligations;
Resolve disputes; or
Establish, exercise or defend legal claims.

9. Your rights

Depending on applicable law, you may have the right to:

Access your personal data;
Correct inaccurate personal data;
Request erasure of personal data;
Restrict processing;
Object to processing;
Request data portability;
Withdraw consent at any time where processing is based on consent; and
Object to direct marketing.

To exercise your rights, contact us at [email protected].

We may need to verify your identity before responding.

We normally respond within one month of receiving a valid request, although the law permits extensions in certain circumstances.

If UK GDPR applies to you, you also have the right to complain to the Information Commissioner’s Office (ICO).

Further information is available from the ICO website:

https://ico.org.uk

10. Marketing choices

You may unsubscribe from marketing emails at any time by:

Clicking the unsubscribe link in any marketing email; or
Contacting us directly.

We may retain a minimal suppression record to ensure we continue honouring your opt-out request.

Service-related communications, including order updates, account notifications and security messages, are not marketing communications.

11. Cookies

Our Website uses cookies and similar technologies.

Certain cookies are strictly necessary for essential Website functions, including:

Shopping basket functionality;
Secure login;
Account authentication;
Checkout services;
Fraud prevention; and
Security monitoring.

Where social login functionality is enabled, Google, Apple, Facebook or their service providers may place or access cookies or similar technologies necessary for authentication and security.

Analytics, advertising and personalisation cookies are only activated where required consent has been obtained.

For more information, please see our Cookie Policy.

12. Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

No online transmission or storage method can be guaranteed to be completely secure. You are responsible for keeping your account credentials confidential.

Please contact us immediately if you become aware of any unauthorised use of your account.

13. Children

The Website is intended for a general audience and is not directed at children under the age of 13.

We do not knowingly collect personal data from children under 13 without an appropriate lawful basis and any required parental involvement.

If you believe a child has provided personal information to us, please contact us and we will investigate and take appropriate action.

14. Automated decisions

We do not make solely automated decisions that produce legal or similarly significant effects on individuals.

15. External links

Our Website may contain links to third-party websites.

Those websites operate independently and have their own privacy practices. We encourage you to read their privacy notices before providing personal information.

We are not responsible for the privacy practices of third-party websites.

16. Changes to this policy

We may update this Privacy Policy from time to time.

The latest version will always be published on this page and identified by the “Last Updated” date shown at the top.

Where changes are significant, we may take additional steps to bring them to your attention.

17. Contact Us

For privacy-related questions, requests or complaints, please contact:

Tee Hub Ltd
Unit A, 82 James Carter Road
Mildenhall Industrial Estate
Suffolk
IP28 7DE

Email: [email protected]

Website: tee-hub.com