Privacy Policy

Effective Date: 11/2024 

At So Performance, we respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, store, and protect your personal information when you visit our website soperformance.co.uk (the "Site"). By using our Site, you agree to the terms of this Privacy Policy.

We collect different types of information to provide and improve our services to you, including:

When you interact with our Site, we may collect personal data that you provide to us directly, including:

• Name
• Email address
• Telephone number
• Business name (if applicable)
• Billing and payment information (if purchasing products or services)
• Correspondence with us (e.g., customer support requests)

We also collect non-personal technical information automatically when you use our Site, such as:

• IP address
• Browser type and version
• Device information
• Pages you visit on the Site
• Date and time of your visit
• Time spent on each page

We use cookies and similar tracking technologies to enhance your experience on our Site. Cookies are small text files placed on your device that help us remember your preferences and improve your user experience. You can manage your cookie preferences through your browser settings.

For more details about how we use cookies, please refer to our Cookie Policy.

We may use the information we collect for various purposes, including:

• To provide, operate, and maintain our Site
• To process transactions and deliver products or services you have requested
• To communicate with you, including responding to inquiries or providing customer support
• To send marketing communications (with your consent, where required)
• To monitor and analyze usage of our Site to improve functionality and user experience
• To prevent fraud and ensure the security of our Site
• To comply with legal obligations

We process your personal data under the following legal bases, in accordance with the UK GDPR:

• Contractual necessity – When processing is necessary to fulfil a contract (e.g., providing goods or services).
• Consent – When you provide us with explicit consent to process your data (e.g., for marketing communications).
• Legitimate interests – We may process your data based on our legitimate interests (e.g., improving our website, fraud prevention), provided this does not override your rights and interests.
• Legal obligation – We may process your data to comply with legal obligations (e.g., accounting or tax reporting).

We do not sell or rent your personal data to third parties. However, we may share your data with the following types of third parties:

• Service Providers – We may share your information with trusted third-party service providers that help us operate our business, such as payment processors, hosting providers, email marketing platforms, or customer support tools. These third parties are required to protect your data and use it only for the purposes we engage them.
• Legal and Regulatory Authorities – We may disclose your data if required by law, regulation, or court order, or to protect our rights or the safety of others.
• Business Transfers – If we are involved in a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction.

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have certain rights regarding your personal data. These rights include:

• Right to Access – You can request a copy of the personal data we hold about you.
• Right to Rectification – You can request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure – You can request that we delete your personal data under certain circumstances (e.g., if it is no longer necessary for the purposes for which it was collected).
• Right to Restrict Processing – You can request that we restrict the processing of your data in certain situations.
• Right to Data Portability – You can request that we transfer your personal data to another organisation, or to you, in a structured, commonly used, and machine-readable format.
• Right to Object – You can object to the processing of your data based on legitimate interests, direct marketing, or scientific/historical research purposes.
• Right to Withdraw Consent – If we rely on your consent to process your data (e.g., for marketing), you can withdraw your consent at any time.

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section below.

We will only retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (e.g., for tax, accounting, or legal reasons).

Your personal data may be transferred to, and stored in, countries outside the UK, including in countries that may not provide the same level of data protection as the UK. If we transfer your data outside the UK, we will ensure that appropriate safeguards are in place, such as the use of Standard Contractual Clauses or other approved mechanisms.

Our Site is not intended for individuals under the age of 16, and we do not knowingly collect personal data from children. If we learn that we have inadvertently collected personal data from a child under 16, we will take steps to delete such information as soon as possible.

We may update this Privacy Policy from time to time. When we do, we will post the revised policy on this page and update the "Effective Date" at the top of the page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

This privacy policy is a general template and should be reviewed by legal professionals to ensure it complies fully with all relevant UK laws, including the UK GDPR and the Data Protection Act 2018.