Last updated: 25 September 2026
1. Who We Are
This website is operated by Ingenious Partners Ltd (“Ingenious Partners”, “we”, “us” or “our”), a company registered in England and Wales.
- Company number: 13362245
- VAT number: GB489612250
- Registered office: Suite 132, 123 Stratford Road, Shirley, Solihull, B90 3ND
We are the data controller for the personal data we collect through this website, which means we decide why and how your personal data is processed.
2. Contact Us About This Policy
If you have any questions about this policy or how we handle your personal data, or you want to exercise any of the rights set out below, you can contact us at:
- Email: privacy@ingeniouspartners.co.uk
- Post: Ingenious Partners Ltd, Suite 132, 123 Stratford Road, Shirley, Solihull, B90 3ND
3. Personal Data We Collect
We collect personal data about you in the following ways:
3.1 Information you give us directly
When you use the contact form on this website, we ask you for:
- Your name
- Your email address
- The content of your message
3.2 Information collected automatically
Like most websites, our hosting and security systems automatically log some technical information when you visit, including your IP address, browser type and version, device type, referring website, and the pages you view and when. This is used for security, diagnosing technical issues, and understanding how the site is used — see the Cookies section below for detail on how this is gathered.
4. Cookies and Similar Technologies
Cookies are small text files placed on your device when you visit a website. We use the following categories of cookies:
- Strictly necessary cookies – required for the site and contact form to function and to protect against spam and abuse (for example, cookies set by our form and security plugins). These do not require your consent under the Privacy and Electronic Communications Regulations (PECR), but we tell you about them for transparency.
- Analytics cookies – We use Google Analytics to help us understand how visitors use this website, including which pages are viewed, how long visitors stay, what device and browser they use, and how they arrived at the site. Google Analytics sets cookies such as _ga, _ga_* and _gid to collect this information. Data is reported to us in aggregated and anonymised form and is not used to identify you personally. These cookies are not strictly necessary and require your consent, which we ask for via our cookie banner before they are set — you can decline or withdraw consent at any time.
Where we use any cookie that requires consent, we will ask for it through a cookie banner before that cookie is set, and you can withdraw consent at any time through your browser settings.
5. How We Use Your Personal Data and Our Legal Basis
Under UK GDPR, we must have a valid legal basis to process your personal data. The table below sets out how we use your data and which basis we rely on.
| What we use it for | Personal data involved | Legal basis |
|---|---|---|
| Responding to your enquiry submitted via our contact form | Name, email address, message content | Legitimate interests – responding to enquiries about our services |
| Keeping the website secure and understanding site usage | IP address, device/browser information, pages visited | Legitimate interests (security) / Consent (analytics, where applicable) |
| Complying with our legal and accounting obligations | Records connected to any contract or invoice | Legal obligation |
Where we rely on legitimate interests, we have considered that this processing is proportionate, has a minimal privacy impact, and you would reasonably expect us to use your data this way given our relationship with you.
6. Who We Share Your Data With
We do not sell your personal data. We share personal data only with trusted third parties who help us run our business and this website, including:
- Our website hosting provider IONOS, who stores the site and any data submitted through it on our behalf
- The providers of plugins and tools used to run this site, such as our contact form software
- Google Analytics (Google Ireland Limited), which helps us understand how visitors use this website
- Professional advisers such as our accountant or solicitor, where necessary
- Law enforcement or regulators, where we are required to by law
Each of these third parties is only permitted to use your data for the specific purpose we authorise and in line with our instructions and UK GDPR.
7. International Transfers
We use Google Analytics, provided by Google, which may transfer data to the United States and other countries outside the UK. Google is certified under the UK Extension to the EU-U.S. Data Privacy Framework, which provides an approved safeguard for this transfer. You can read more about how Google handles data at https://policies.google.com/privacy.
8. How Long We Keep Your Data
We only keep personal data for as long as necessary for the purpose it was collected for:
- Contact form enquiries: retained for 12 months from your last contact with us, unless a longer period is needed to deal with your enquiry or any dispute
- Client and contractual records: retained for 6 years to meet our legal and accounting obligations
After the relevant retention period, we securely delete or anonymise your data.
9. How We Protect Your Data
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration, including secure hosting, restricted access to personal data, and the use of reputable, security-conscious third-party providers. No method of transmission over the internet is completely secure, but we work to protect your data to industry standards.
10. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- Right of access – to ask us for a copy of the personal data we hold about you
- Right to rectification – to ask us to correct inaccurate or incomplete data
- Right to erasure – to ask us to delete your data in certain circumstances
- Right to restrict processing – to ask us to limit how we use your data
- Right to data portability – to ask us to transfer your data to you or another organisation
- Right to object – to object to our processing, including for direct marketing
- Right to withdraw consent – where we rely on consent, at any time, without affecting processing carried out before withdrawal
- Right to complain – to the Information Commissioner’s Office (see Section 12)
To exercise any of these rights, contact us using the details in Section 2. We will normally respond within one month. We may need to ask you for information to confirm your identity before we can act on your request.
11. Children’s Privacy
This website and our services are directed at businesses and professionals. We do not knowingly collect personal data from children, and this website is not intended for use by children.
12. How to Complain
If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve it. You also have the right to complain to the UK’s data protection regulator:
- Information Commissioner’s Office (ICO)
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
13. Our Online Shop and Client Shops
This section explains how we use personal information when you buy from our public Shop or use a shop set up for your organisation. We are the controller of this information. You can contact us about privacy at orders@ingeniouspartners.co.uk or by post at Suite 132, 123 Stratford Road, Shirley, Solihull, B90 3ND, marked for the attention of Tracy Clarke, Director.
What we collect
- Contact and delivery details: name, email, phone, billing and delivery address, when you order or create an account.
- Order details: items, sizes, prices, order history and returns.
- Account details: username, password (stored encrypted), organisation, role, and staff or payroll number, for client shops or if you create an account.
- Payment information: card payments are handled by Stripe; we only see the card type, last four digits and payment status.
- Organisation information: purchase order numbers, cost centres and the manager who added you, for client account orders.
Why we use it
- Processing and delivering your order, returns and refunds (performance of a contract with you).
- Running client shops for organisations, including user accounts, approvals, invoicing and reports to your organisation (our legitimate interests, and those of your organisation, in supplying workwear under its agreement with us).
- Keeping accounting and tax records (legal obligation).
- Preventing fraud and keeping the website secure (legitimate interests).
- Sending order and account emails (performance of a contract).
- Sending marketing emails, only if you opt in (consent, which you can withdraw at any time).
Client shops
If you use a shop set up for your employer, council, university or other organisation, that organisation gives us your name and work details, or a manager adds you. Your organisation can see the orders placed on its account, including what you ordered and when, so it can manage budgets and uniform supply. We only use your information to supply your organisation and you.
Who we share it with
We share information only where needed: Stripe (card payments); our couriers, such as DHL, Evri and Royal Mail, and campus collection points (to deliver your order); our suppliers and decorators (to make branded items, without your personal details where possible); our website host IONOS and email provider Microsoft (to run our systems); our accountants and HMRC (for tax and accounts); and your organisation, for client shop orders. We never sell your information. Some of these providers may process data outside the UK; where they do, they use safeguards approved under UK data protection law.
How long we keep it
We keep order and invoice records for 6 years after the end of the financial year in which the order was placed, as required for tax. Customer accounts are kept while they are active and deleted, or anonymised, after 3 years without use. Client shop user accounts are deactivated when your organisation tells us you have left, and deleted when no longer needed for order records. Marketing preferences are kept until you unsubscribe.
Your rights
You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to its use, to ask for it in a portable format, and to withdraw consent at any time. Contact us at orders@ingeniouspartners.co.uk. We will respond within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
14. Changes to This Policy
We may update this privacy policy from time to time, for example to reflect changes in the law or in how we use your data. We will post any changes on this page and update the “Last updated” date at the top. We encourage you to review this policy periodically.