Privacy Notice

Last updated: 29 October 2026

1. Who is responsible for your data

The controller of your personal data is Chris I-O trading as We Buy Any Shower, 9 Penntiow Golf, Cott Road, Lostwithiel, Cornwall, PL22 0FB, lostoak@hotmail.com. I-OSCC Ltd built this website but is not the controller of your data.

2. What we collect and why

Data	Why	Lawful basis (UK GDPR)
Name, email, postal address, shower details and photos, WBAS reference	To make, confirm and complete your trade-in offer	Contract, or steps before a contract
Bank or PayPal details	To pay you	Contract
Name, email, delivery address, order details (payment handled by PayPal)	To process and deliver your shop order, and handle returns	Contract
Name, company, email, message	To answer contractor and other enquiries	Legitimate interests (replying to you)
Email address and your consent record	To send our newsletter	Consent. You can withdraw it at any time.
Sale and payment records	Tax and accounting	Legal obligation

3. Who we share it with

• PayPal (payments and payouts)
• Microsoft (our email, Hotmail/Outlook)
• Cloudflare (Cloudflare, Inc.), which hosts this website
• Couriers, for deliveries we send
• Our accountant and HMRC, where required

We do not sell your data. Some of these providers may process data outside the UK. Where they do, they use legally recognised safeguards such as UK adequacy regulations or the International Data Transfer Addendum. [CONFIRM: transfer safeguards for each supplier]

4. How long we keep it

• Sale, purchase and payment records: at least 5 years after the 31 January tax return deadline for the tax year they relate to, as HMRC requires for sole traders.
• Trade-in offers that don't go ahead: 12 months
• Newsletter: until you unsubscribe. After that, we keep a record that you've opted out so we don't email you again.
• Enquiries: 12 months

5. Newsletter

We only email you news and offers if you've ticked the box to agree. Every email tells you how to unsubscribe, or you can email us at any time to stop.

6. Cookies and similar technology

Our website uses your browser's session storage to remember your basket, trade-in discount and trade account choice while you browse. This is strictly necessary for the service you've asked for, so it doesn't need your consent, and it is cleared when you close the tab. We don't use analytics or advertising cookies. [CONFIRM: list any cookies set by PayPal’s checkout once payments are live]

7. Your rights

You have the right to access your data, have it corrected or erased, restrict or object to its use, receive a copy in a portable format, and withdraw consent at any time. To use any of these rights, email lostoak@hotmail.com. We'll reply within one month.

8. Complaints

If you're unhappy with how we've used your data, please tell us first. We'll acknowledge your complaint within 30 days and tell you the outcome. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.