Privacy policy
Last updated: 2 October 2026
1. Who we are
This website, patcomp.uk, is run by PATCOMP LTD, a company registered in England and Wales under company number 17436054, with its registered office at Office 21073 182-184 High Street North, East Ham, London, United Kingdom, E6 2JA.
We sell everyday leather footwear and shoe care products online. For the personal data described in this policy, PATCOMP LTD is the data controller.
Questions about privacy: email [email protected] or call +44 7824 519637.
2. Data we collect
When you place an order
- Your full name, email address and phone number.
- Delivery address, town or city and postcode.
- Any comment you add to the order, for example your usual size or width.
- Order details: products, sizes, quantities, prices, order number and date.
For size exchanges and returns
- Your order history and the sizes you bought, so we can arrange a size exchange or process a return within 14 days.
- Photos you send us when reporting a fault or making a claim about a product, and the details of the claim.
When you contact us
- Emails you send to us and our replies, including your email address and anything you choose to tell us.
- Notes from phone calls about your order.
Payment data
Card payments are handled by our payment provider. We do not see or store your full card number or security code. We receive only a confirmation that the payment succeeded, the amount, and limited reference details (such as the card type and last four digits).
What we do not collect
Our website has no server-side contact form, account system or analytics tracking. The contact button opens your own email app. The cart works only in your browser while the page is open and is not saved.
3. Purposes and legal bases
Under UK GDPR we must have a lawful basis for each use of personal data:
| Purpose | Data | Legal basis |
|---|---|---|
| Processing, paying for and delivering your order | Order, contact and delivery data | Contract |
| Size exchanges, returns, refunds and faulty-item claims | Order history, sizes, photos, correspondence | Contract; legal obligation (consumer law) |
| Answering your emails and calls | Contact data, correspondence | Legitimate interests (customer service); contract where it concerns an order |
| Keeping accounting and tax records | Order and payment records | Legal obligation |
| Preventing fraud and protecting our business | Order, payment confirmation and delivery data | Legitimate interests |
| Occasional news about new styles, only if you ask for it | Name, email | Consent |
4. Who we share data with
We never sell your personal data. We share only what each party needs:
- Payment provider — to take and refund payments and to check for fraud.
- Courier and delivery services — your name, delivery address, postcode and phone number so they can deliver your parcel or collect a return.
- Email and IT service providers — who host our email and business systems.
- Accountants and professional advisers — where needed for bookkeeping, tax and legal advice.
- Authorities — such as HMRC or the police, only where the law requires it.
These providers act on our instructions or under their own data protection obligations and must keep your data secure.
5. International transfers
We aim to keep personal data within the UK. Some service providers (for example email or payment services) may process data outside the UK. When this happens we rely on UK adequacy regulations or on safeguards approved under UK law, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
6. How long we keep data
- Order, payment and delivery records — 6 years after the end of the financial year of the order, as required for tax and accounting.
- Size and order history for exchanges — kept with the order record; actively used for 12 months after delivery.
- Photos and details of product claims — up to 2 years after the claim is closed.
- Email correspondence — up to 2 years after our last exchange, unless linked to an order record.
- Marketing consent — until you withdraw it.
When data is no longer needed we delete it or anonymise it.
7. Security
The website is served over an encrypted connection. Access to customer data is limited to the people who need it to handle your order. Accounts we use are protected with strong passwords and two-step verification where available. No system is completely secure, so if we ever discover a breach that puts your rights at risk we will tell you and the ICO as the law requires.
8. Cookies
We do not use advertising or analytics cookies, and we do not store your cart in your browser. Fonts are loaded from Google Fonts, which receives your IP address in order to deliver the font files. If we add other cookies in future we will ask for your consent first and update this policy.
9. Your rights
Under UK GDPR you have the right to:
- Access — get a copy of the personal data we hold about you.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — ask us to delete your data where there is no reason to keep it.
- Restriction — ask us to limit how we use your data.
- Data portability — receive data you gave us in a common machine-readable format.
- Objection — object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent — where we rely on consent.
To use any of these rights, email [email protected]. We will reply within one month and will not charge a fee in most cases. We may ask you to confirm your identity.
10. Withdrawing consent
Where we rely on your consent, you can withdraw it at any time by emailing [email protected] or using the unsubscribe link in any email. This does not affect processing carried out before you withdrew consent.
11. Complaints
If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk, telephone 0303 123 1113.
12. Children
Our shop is intended for adults. You must be 18 or over to place an order. We do not knowingly collect personal data from anyone under 18; if you believe a child has given us their data, contact us and we will delete it.
13. Changes to this policy
We may update this policy when our services or the law change. The current version is always on this page, with the date of the latest update shown at the top.
Last updated: 2 October 2026.