Privacy Policy

The data controller is Woodalls Appliances Ltd, a company registered in England and Wales. Our registered address and principal place of business is:

If you have any questions about how we handle your personal data, please contact us at info@we-sell-it.co.uk or call us on +44 (0) 208 455 3925.

We may collect and process the following categories of personal data about you:

We do not collect any special categories of sensitive personal data (such as data about race, ethnicity, health, religion, or biometric data).

We use the personal data we collect for the following purposes:

• To respond to your enquiries and provide customer service support
• To process and fulfil orders for appliances and related services
• To manage your trade portal account and provide trade pricing
• To send you marketing communications where you have consented to receive them
• To improve our website, products, and services through analytics
• To comply with legal and regulatory obligations
• To detect and prevent fraud or other unlawful activity
• To send transactional communications such as order confirmations and delivery updates

Under UK GDPR, we must have a valid legal basis for processing your personal data. We rely on the following legal bases:

• Contract performance — to process transactions and deliver the products or services you have requested
• Legitimate interests — to operate, improve, and promote our business, where these interests are not overridden by your rights
• Legal obligation — to comply with applicable laws and regulations, including tax and accounting requirements
• Consent — to send you marketing emails or newsletters where you have given us explicit consent to do so

Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

We may share your personal data with the following categories of third parties, strictly as necessary:

• Appliance manufacturers and authorised partners — to process orders, arrange delivery, installation, and warranty support (e.g. Miele, Gaggenau, Sub-Zero & Wolf, Bosch, Siemens)
• Delivery and logistics providers — to fulfil delivery and installation appointments
• Payment processors — to securely handle payment transactions
• IT and website service providers — to operate and maintain our website and systems (e.g. hosting providers, analytics tools)
• Professional advisors — including accountants, solicitors, and auditors where required
• Regulatory authorities — including HMRC and law enforcement where we are required by law to do so

We do not transfer your personal data outside the United Kingdom or European Economic Area unless appropriate safeguards are in place.

Our website uses cookies — small text files placed on your device — to improve your browsing experience. We use the following types of cookies:

You can manage or withdraw your consent to non-essential cookies at any time through your browser settings or by contacting us. Disabling certain cookies may affect website functionality.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Customer and transaction records — retained for 7 years in line with HMRC requirements
• Enquiry and correspondence records — retained for up to 3 years from the date of last contact
• Trade account data — retained for the duration of the trade account relationship plus 3 years
• Marketing consent records — retained until you withdraw consent or for 3 years from the date of last engagement, whichever is sooner
• Website analytics data — retained in anonymised form for up to 26 months

When data is no longer required, it is securely deleted or anonymised.

Under UK GDPR, you have the following rights in relation to your personal data:

1. Right of access — to request a copy of the personal data we hold about you (Subject Access Request)
2. Right to rectification — to request correction of inaccurate or incomplete data
3. Right to erasure — to request deletion of your data where there is no legitimate reason for us to continue processing it
4. Right to restriction — to request that we restrict processing of your data in certain circumstances
5. Right to portability — to receive your data in a structured, machine-readable format and transfer it to another controller
6. Right to object — to object to processing based on legitimate interests or for direct marketing purposes
7. Rights related to automated decision-making — we do not make decisions about you based solely on automated processing

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These include:

• SSL/TLS encryption for all data transmitted via our website
• Access controls limiting data access to authorised staff on a need-to-know basis
• Regular staff training on data protection and security awareness
• Secure password management and multi-factor authentication on internal systems
• Regular security reviews and vulnerability assessments

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay, as required by UK GDPR.

Our website may contain links to third-party websites, including brand websites (such as Gaggenau, Miele, Bosch, etc.) and our trade portal. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party websites you visit.

Any personal data you submit directly to a brand or third-party website is subject to that organisation's own privacy policy and is not governed by this document.

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at info@we-sell-it.co.uk and we will take prompt steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered trade account holders by email where changes significantly affect how we use their data

We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our website or services after changes are posted constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please get in touch: