Privacy policy

Privacy Policy

Last updated: 17 September 2026

This privacy policy explains how Weekender Brands Limited (trading as SQUAD SOCIETY) collects, uses, stores, and shares your personal data when you visit www.squadsociety.co.uk, place an order, or interact with us. We handle your data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Contents

  1. Who We Are
  2. What Data We Collect
  3. How and Why We Use Your Data
  4. Our Lawful Bases
  5. Who We Share Your Data With
  6. International Transfers
  7. Cookies and Tracking
  8. Marketing Communications
  9. Data Retention
  10. Your Rights
  11. Children's Privacy
  12. Data Security
  13. Changes to This Policy
  14. How to Contact Us

1. Who We Are

The data controller responsible for your personal data is:

Weekender Brands Limited
Trading as SQUAD SOCIETY
Company number: 15832914
Registered address: 28 Manor Park Close, Reading, Berkshire, RG30 4PS, United Kingdom

Email: hello@weekenderbrands.com
Phone: 0118 230 2029 · US toll-free: +1 866 885 4666
Website: www.squadsociety.co.uk

If you have any questions about how we handle your data, contact us using the details above.

2. What Data We Collect

We collect different types of personal data depending on how you interact with us:

Data you give us directly:

  • Identity data: name, title
  • Contact data: email address, delivery address, billing address, phone number
  • Order data: items purchased, personalisation details (names, slogans, or images you provide for custom products), order history
  • Payment data: we do not store card numbers. Payments are processed securely by Shopify Payments and/or PayPal
  • Communication data: messages you send us via email, contact forms, or social media

Data we collect automatically:

  • Technical data: IP address, browser type and version, operating system, device type, screen resolution
  • Usage data: pages visited, time spent on pages, referring URL, click paths
  • Cookie data: see Section 7 below

Data from third parties:

  • Analytics providers: Google Analytics (anonymised usage data)
  • Advertising platforms: Meta (Facebook/Instagram) and Google Ads (conversion tracking data)

3. How and Why We Use Your Data

We only use your personal data when we have a valid reason. The table below sets out how we use your data and our lawful basis for doing so:

Purpose Data Used Lawful Basis
Processing and fulfilling your orders (including personalised products) Identity, contact, order, payment data Contract performance
Sending order confirmations, dispatch updates, and delivery notifications Identity, contact, order data Contract performance
Handling returns, refunds, and customer support queries Identity, contact, order, communication data Contract performance / Legal obligation
Sending marketing emails (promotions, new products, event deadlines) Identity, contact data Consent (you can withdraw at any time)
Running targeted advertising (Facebook, Instagram, Google Ads) Technical, usage, cookie data Consent (via cookie banner)
Improving our website, products, and services Technical, usage data Legitimate interest
Preventing fraud and protecting our business Identity, technical, payment data Legitimate interest / Legal obligation
Meeting legal and tax obligations (e.g. HMRC record-keeping) Identity, contact, order, payment data Legal obligation

4. Our Lawful Bases

Under UK GDPR, we rely on the following lawful bases to process your personal data:

  • Contract performance: we need your data to fulfil orders you place with us, deliver products, and handle returns.
  • Consent: we ask for your explicit opt-in before sending marketing emails or placing non-essential cookies. You can withdraw consent at any time.
  • Legitimate interest: we use data to improve our website, prevent fraud, and understand how customers use our store, provided this does not override your rights.
  • Legal obligation: we retain certain records to comply with UK tax, consumer, and company law.

5. Who We Share Your Data With

We never sell your personal data. We share data only with trusted third-party service providers who help us operate our business:

Provider Purpose Data Shared
Shopify E-commerce platform and payment processing Order, contact, payment, technical data
Printify and its print partners Print-on-demand fulfilment for personalised apparel Name, delivery address, personalisation details, order data
Royal Mail / DPD / courier partners Delivery services Name, delivery address, phone number
Google (Analytics, Ads) Website analytics and advertising Anonymised/pseudonymised usage and cookie data
Meta (Facebook, Instagram) Advertising and conversion tracking Pseudonymised cookie and event data
Klaviyo Email marketing Name, email address, purchase history

 

Pinterest API We use the Pinterest API to publish content from our store to our own Pinterest Business account. We do not collect, store, or process data belonging to other Pinterest users. No third-party Pinterest user authentication takes place through this application.

 

All third-party providers operate under data processing agreements and handle your data in accordance with their own privacy policies and applicable data protection law.

We may also disclose your data if required by law, court order, or regulatory authority.

6. International Transfers

Some of our third-party service providers (including Shopify, Google, Meta, and Klaviyo) process data on servers located outside the United Kingdom, including in the United States and EEA countries.

Where data transfers outside the UK occur, we ensure appropriate safeguards are in place, including:

  • Transfers to countries with UK adequacy regulations (e.g. EEA countries)
  • The UK Extension to the EU-US Data Privacy Framework for certified US-based providers
  • Standard contractual clauses approved by the ICO

7. Cookies and Tracking

Our website uses cookies (small text files stored on your device) to help the site function, improve your experience, and support our marketing.

Essential cookies
Strictly necessary for the website to work (e.g. shopping cart, checkout session, security). We do not need your consent for these.

Analytics cookies
We use Google Analytics to understand how visitors use our site. These cookies collect anonymised data about pages visited, time on site, and traffic sources. We only set these with your consent.

Marketing cookies
We use cookies from Meta (Facebook Pixel) and Google Ads to measure ad performance and show you relevant advertisements. We only set these with your consent.

Managing cookies
When you first visit our site, our cookie consent banner asks you to accept or reject non-essential cookies. You can change your preferences at any time by:

  • Clicking the cookie preferences link in our website footer
  • Adjusting your browser settings to block or delete cookies
  • Using browser extensions that manage cookie consent

Blocking essential cookies may prevent parts of the website from functioning correctly.

8. Marketing Communications

We send marketing emails (promotions, event deadline reminders, new product launches) only when you have given us explicit consent, typically by ticking the opt-in box at checkout or subscribing via our website.

You can withdraw consent and unsubscribe at any time by:

We will process your unsubscribe request promptly. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before you withdraw.

We will still send transactional emails (order confirmations, dispatch notifications, refund updates) as these are necessary to perform our contract with you.

9. Data Retention

We keep your data only for as long as necessary for the purposes described in this policy. Our standard retention periods are:

Data Type Retention Period Reason
Order records and invoices 6 years from date of transaction HMRC tax obligations and potential legal claims
Customer account data Duration of account + 2 years after last activity Service provision and legitimate interest
Marketing consent records Duration of consent + 1 year after withdrawal Demonstrating lawful consent under PECR
Customer support correspondence 2 years from resolution Quality assurance and dispute resolution
Website analytics data 26 months (Google Analytics default) Website improvement
Cookie consent records 12 months (then re-consent required) PECR compliance

Once the retention period expires, we securely delete or anonymise the data.

10. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access: request a copy of the personal data we hold about you (a "subject access request").
  • Right to rectification: ask us to correct any inaccurate or incomplete data.
  • Right to erasure: ask us to delete your personal data where there is no compelling reason for us to continue processing it.
  • Right to restrict processing: ask us to suspend processing of your data in certain circumstances.
  • Right to data portability: request your data in a structured, commonly used, machine-readable format.
  • Right to object: object to processing based on legitimate interest or for direct marketing purposes.
  • Right to withdraw consent: where we rely on consent, you can withdraw it at any time without affecting prior processing.

To exercise any of these rights, email us at hello@weekenderbrands.com with "Data Rights Request" in the subject line. We will respond within one calendar month. We may ask you to verify your identity before processing your request.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ico.org.uk/make-a-complaint
Helpline: 0303 123 1113

11. Children's Privacy

Our products and services target adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 16. If you believe we have inadvertently collected data from a child, contact us immediately at hello@weekenderbrands.com and we will delete it promptly.

12. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or damage. These measures include:

  • SSL/TLS encryption on all pages of our website
  • PCI-DSS-compliant payment processing via Shopify Payments
  • Restricted access to personal data on a need-to-know basis
  • Regular review of data processing practices and security measures

While we implement robust safeguards, no method of electronic transmission or storage is 100% secure. We encourage you to use strong passwords and protect your account credentials.

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will post the updated policy on this page with a revised "Last updated" date.

For significant changes that materially affect how we use your data, we will notify you by email or via a prominent notice on our website before the changes take effect.

14. How to Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or your personal data, contact us:

Weekender Brands Limited (trading as SQUAD SOCIETY)
28 Manor Park Close, Reading, Berkshire, RG30 4PS
Email: hello@weekenderbrands.com
Phone: 0118 230 2029 · US toll-free: +1 866 885 4666
Hours: Monday to Friday, 09:00 to 17:00 (GMT)