Last Updated: 22 October 2026

1. Introduction

Good One Deals UK Ltd ("Good One Deals", "we", "us" or "our") is committed to protecting the privacy and security of personal information.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when individuals visit our website, www.goodonedeals.co.uk, register an account, purchase products, communicate with us or otherwise interact with our business.

This policy applies to customers, website visitors, business representatives, suppliers and other individuals whose personal information we process.

Good One Deals UK Ltd is the data controller for personal information where we determine the purposes and means of its processing.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

2. Personal Information We Collect

Depending on your relationship with us, we may collect the following information:

Personal and Contact Information

• Name, email address and telephone number.
• Billing, delivery and business addresses.
• Job title and business contact information.

Business and Account Information

• Business or trading name.
• Company registration and VAT numbers.
• Details of authorised account representatives.
• Account registration information and preferences.

Transaction and Financial Information

• Purchase and order history.
• Invoice and payment records.
• Transaction details and payment status.
• Relevant credit account information, where applicable.

Technical and Usage Information

• IP address and device information.
• Browser and operating system details.
• Login activity and account access records.
• Website usage data.
• Cookies and similar technologies.

Communications

• Customer service correspondence.
• Enquiries and complaints.
• Information voluntarily provided when communicating with us.

We may also obtain relevant information from third parties, including payment providers, delivery partners, business verification services and publicly available business registers.

We seek to collect only personal information reasonably necessary for specified, legitimate purposes.

3. How We Use Personal Information

We may use personal information to:

• Register, maintain and administer customer accounts.
• Process orders, payments, invoices and deliveries.
• Verify customer and business information.
• Provide customer support and respond to enquiries.
• Maintain accurate business and transaction records.
• Protect our website, systems and accounts against fraud and unauthorised access.
• Investigate security incidents and suspicious activity.
• Improve our website and customer experience.
• Communicate service updates and important account information.
• Send marketing communications where legally permitted.
• Comply with legal and regulatory obligations.
• Establish, exercise or defend legal claims where necessary.

We will not use personal information for purposes incompatible with those for which it was collected unless permitted by applicable law.

4. Lawful Basis for Processing

We process personal information only where an appropriate lawful basis applies.

Depending on the circumstances, this may include:

Contractual Necessity

Where processing is necessary to perform a contract with an individual or take steps requested before entering into one.

Legitimate Interests

Where processing is necessary for legitimate business purposes, including account administration, fraud prevention, information security and maintaining business relationships, provided those interests are not overridden by individuals' rights and freedoms.

Legal Obligations

Where processing is necessary to comply with applicable legal, accounting, tax or regulatory requirements.

Consent

Where consent is required for particular activities, including certain marketing communications and non-essential cookies.

Where processing is based on consent, it may be withdrawn at any time.

5. Business Verification and Fraud Prevention

We may process relevant personal information to verify business customers, authorised representatives and account activity.

This may include checking business registration information, reviewing account access activity and using appropriate verification or fraud-prevention services.

Where lawful and necessary, we may retain relevant information to investigate suspected fraud, prevent unauthorised activity and protect the security of our systems.

Any such processing will be proportionate and supported by an appropriate lawful basis.

6. Sharing Personal Information

We may share personal information with trusted third parties where necessary for legitimate business purposes or to meet legal obligations.

These may include:

• Website and ecommerce service providers.
• Cloud hosting and IT support providers.
• Payment processors and financial institutions.
• Delivery and logistics providers.
• Business verification and fraud-prevention services.
• Professional advisers, including accountants, auditors and solicitors.
• Relevant government authorities, regulators and law enforcement agencies.
• Other service providers supporting our business operations.

We may also disclose relevant information in connection with a proposed or completed business restructuring, merger, acquisition or sale where legally permitted and subject to appropriate safeguards.

We do not sell personal information to third parties.

Where third parties process personal information on our behalf, we require appropriate contractual and security protections in accordance with applicable law.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies to provide essential functionality, maintain account sessions, improve website performance and understand visitor activity.

Cookies may include:

• Essential cookies: Necessary for website operation and security.
• Functional cookies: Used to remember preferences and improve functionality.
• Analytics cookies: Used to understand website usage and performance.
• Marketing cookies: Used to support advertising and measure campaign effectiveness.

Where legally required, we obtain consent before using non-essential cookies.

Visitors may manage their cookie preferences using the controls provided on our website.

Disabling certain cookies may affect website functionality.

8. Marketing Communications

We may send product updates, promotional information and other marketing communications where permitted by applicable law.

Where consent is required, we will obtain it before sending such communications.

Individuals may opt out of direct marketing at any time by using an available unsubscribe mechanism or contacting us at shop@goodonedeals.co.uk.

We may continue sending necessary non-marketing communications concerning accounts, orders, security and other service-related matters.

9. Data Security

We implement appropriate technical and organisational measures designed to protect personal information from accidental loss, unauthorised access, unlawful disclosure, alteration or destruction.

These measures may include access controls, authentication systems, secure infrastructure, monitoring and internal security procedures.

Access to personal information is restricted where appropriate to individuals and service providers who require it for legitimate purposes.

Although we take reasonable and appropriate precautions, no electronic system or method of transmission can be guaranteed to be completely secure.

Nothing in this policy excludes or restricts our obligations under applicable data protection legislation.

10. Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected or as otherwise permitted or required by law.

Retention periods may depend on:

• The nature of the information.
• The duration of the customer or business relationship.
• Legal, tax and accounting obligations.
• Security and fraud-prevention requirements.
• The need to resolve disputes or establish, exercise or defend legal claims.

Where information is no longer required, we will take appropriate steps to securely delete or anonymise it.

Requests for deletion will be assessed in accordance with applicable legal requirements and exemptions.

11. International Data Transfers

Some of our service providers may process or store personal information outside the United Kingdom.

Where international transfers occur, we will ensure that an appropriate lawful transfer mechanism applies.

This may include UK adequacy regulations, approved contractual safeguards or other transfer mechanisms permitted under UK data protection legislation.

12. Your Data Protection Rights

Subject to applicable legal conditions, individuals may have the right to:

• Request access to personal information held about them.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information in certain circumstances.
• Request restriction of certain processing activities.
• Object to processing based on legitimate interests.
• Object to direct marketing.
• Request data portability where applicable.
• Withdraw consent where processing is based on consent.
• Exercise applicable rights concerning automated decision-making.

These rights are subject to relevant statutory conditions and exemptions.

For example, we may be entitled or required to retain certain records for legal compliance or the establishment, exercise or defence of legal claims.

To exercise your rights, please contact shop@goodonedeals.co.uk.

We may request reasonable information to verify your identity before responding.

We will respond within the timeframes required by applicable law.

13. Automated Processing

We may use automated technologies to assist with website functionality, account security, transaction verification and fraud detection.

Where automated processing involves personal information, we will comply with applicable data protection requirements.

Where solely automated decisions produce legal or similarly significant effects on individuals, we will provide applicable safeguards and respect relevant statutory rights.

14. Third-Party Websites

Our website may contain links to third-party websites or services.

These third parties may operate independently and maintain their own privacy policies.

We are not responsible for their independent processing activities or privacy practices.

We encourage visitors to review relevant third-party privacy notices before providing personal information.

15. Children's Privacy

Our website and wholesale services are intended for business users and adults.

We do not knowingly collect personal information directly from children for the purpose of establishing customer accounts.

If we become aware that personal information has been collected from a child without an appropriate lawful basis, we will take appropriate action in accordance with applicable law.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our operations, technology, legal obligations or data protection practices.

The latest version will be made available on our website with an updated revision date.

Where required by law, we will provide additional notice or obtain consent before implementing relevant changes.

17. Complaints

If you have concerns regarding how we handle personal information, please contact us so we can investigate your concerns.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Website: www.ico.org.uk

18. Contact Information

For privacy-related enquiries or requests concerning your personal information, please contact:

Good One Deals UK Ltd

Candy House
Crystal Drive
Smethwick
B66 1QG
United Kingdom

Email: shop@goodonedeals.co.uk

Website: www.goodonedeals.co.uk