Privacy policy

Privacy Policy
The Whizzer Co
Last updated: 19 June 2026

1. Who we are

   This policy explains how The Whizzer Co collects, uses, and protects personal data, whether someone buys from us directly through our website, through our Shopify store, through Amazon, or gets in touch with us about an order, a query, or a review.
   
   Trading Name: The Whizzer Co
   Business Address: Monomark House 27 Old Gloucester Street, London, Greater London, England, WC1N 3AX
   Company number: 12915444
   ICO registration number: ZB627911 
   
   If you have any questions about this policy or how we handle your information, you can contact us at admin@whizzer.co.uk.
   
   

2. The personal data we collect

   Depending on how you interact with us, we may collect:
   • Order and contact details — name, delivery and billing address, email address, phone number
   • Order history — what you've bought, when, and any preferences or notes attached to an order
   • Payment information — we never see or store your full card details; payments are handled securely by our payment processor and by Amazon or Shopify Payments
   • Customer service correspondence — emails, social media messages, Amazon buyer-seller messages, and anything you tell us when you contact us with a question or an issue
   • Reviews and feedback — anything you choose to share publicly on Trustpilot, Amazon, or social media, and any photos or comments you send us directly
   • Website usage data — pages visited, how you found us, and similar analytics collected through cookies (see Section 6)
   • Marketing preferences — whether you've opted in or out of receiving emails or messages from us
   
   We sometimes receive limited information about children - for example, if a Whizzer is bought for a child's potty training, or a parent mentions their child's age in a review or a customer service query. We only ever collect what's necessary, we don't use it for any purpose beyond the original reason it was
   shared, and we never use it for marketing directly aimed at children unless otherwise agreed with you (for example a blog).
   
   

3. Where this information comes from

   We collect personal data directly from you when you order from our own website, and indirectly through the platforms we sell on:
   • Amazon — when you order through Amazon, Amazon shares the order and delivery details we need to fulfil it, in line with Amazon's own privacy policy
   • Shopify — our website is built on Shopify, which processes orders on our behalf as part of running our store
   • Direct contact — anything you tell us by email, social media, or our website contact form
   
   

4. Why we use your information, and our lawful basis

   Data protection law requires us to have a valid reason — a "lawful basis" — for everything we do with personal data. Here's how that applies to us:
   • To fulfil your order — processing and dispatching what you've bought, and dealing with any returns or issues. Lawful basis: performance of a contract.
   • To respond to queries and complaints — answering questions, resolving issues, and replying to reviews. Lawful basis: legitimate interests (running a responsive small business) and, where relevant, contract.
   • To improve our products and service — understanding feedback and common questions so we can make the Whizzer range better. Lawful basis: legitimate interests.
   • To send marketing, where you've agreed to it — offers, new products, and updates by email.
   Lawful basis: consent, which you can withdraw at any time.
   • To meet our legal and accounting obligations — keeping records of sales for tax and accounting purposes. Lawful basis: legal obligation.
   
   Recent changes to the law introduced a small number of new "recognised legitimate interests" that businesses can rely on without needing to run a separate balancing test — these mainly cover things like reporting safeguarding concerns or crime prevention, and aren't generally relevant to how we use your data day to day, but we mention it here for completeness.
   
   

5. Who we share your data with

   We don't sell personal data, and we keep the list of people we share it with as short as possible:
   • Amazon and Shopify, as the platforms that process and help fulfil your order
   • Our payment processor, to take payment securely
   • Royal Mail and our other couriers, to deliver your order
   • Our email/marketing platform, if you've opted in to marketing
   • Our bookkeeper and accountant, for financial record-keeping
   • Any professional advisers, such as a solicitor or insurer, if ever needed
   • Our staff.
   
   We only ever share what's needed for the purpose in question, and we expect everyone we work with to keep your data secure.
   
   

6. Cookies and website tracking

   Our website uses cookies to make the site work properly, to understand how visitors use it, and, if you've agreed, for marketing purposes.
   • Essential cookies — needed for the site and checkout to function, and always active
   • Analytics and functionality cookies — help us understand how the site is used and improve it.
   
   Under the latest changes to the law, some cookies of this kind no longer need your consent, provided we give you a clear and easy way to opt out, which we do through our cookie settings
   • Marketing cookies — used for things like Meta and Google advertising, and only set with your consent
   
   You can manage your cookie preferences at any time through the cookie banner or your browser settings.
   
   

7. International transfers

   Some of the tools we use — such as Amazon, Shopify, and our email marketing platform — may store or process data outside the UK. Where this happens, we only use providers who put in place safeguards that meet the UK's data protection standard, in line with the rules on international transfers under UK
   data protection law.
   
   

8. How long we keep your information

   We keep order and customer data for as long as needed to fulfil orders, deal with any after-sales issues, and meet our legal and tax obligations — generally up to 6 years for financial records, in line with HMRC requirements. Marketing data is kept until you unsubscribe or ask us to stop, and we'll periodically
   remove contacts who haven't engaged in a long time.
   
   

9. Automated decision-making

   We don't currently use any automated systems to make decisions about individual customers that have a legal or significant effect on them — every order, query, and complaint is looked at by a real person.
   
   

10. Your rights

    Under data protection law, you have the right to:
    • Ask for a copy of the personal data we hold about you
    • Ask us to correct anything that's inaccurate or incomplete
    • Ask us to delete your data, where there's no good reason for us to keep it
    • Ask us to restrict or object to certain uses of your data
    • Ask for your data to be moved to another provider, where this is technically possible
    • Withdraw consent for marketing at any time
    To exercise any of these rights, just get in touch using the details in Section 1. We'll usually respond within one month.
    
    

11. How to complain

    If you're ever unhappy with how we've handled your personal data, please tell us first — we'd genuinely like the chance to put it right. You can reach us using the details in Section 1, or through our dedicated Data Protection Complaints Policy, which sets out exactly how we handle these concerns and how
    quickly.
    
    If you're not satisfied with our response, you also have the right to complain to the Information
    Commissioner's Office (ICO):
    • Website: ico.org.uk/make-a-complaint
    • Phone: 0303 123 1113
    
    

12. Changes to this policy

    We may update this policy from time to time, particularly as data protection law continues to change.
    
    The "last updated" date at the top of this page will always reflect the most recent version, and any significant changes will be highlighted on our website.