Privacy Policy

To ensure that we can provide you with a positive experience we securely capture and store information about you.

We are W.D. Coe Limited, registered to 20-28 Norwich Road, Ipswich, Suffolk, IP1 2NH, United Kingdom and we are a ‘Data Controller’ registered with the UK Information Commissioner’s Office with the registration number ZB316404. Our ‘Data Protection Officer’ is The DPO Centre LTD, 50 Liverpool Street, London, EC2M 7PY, United Kingdom and is contactable on hello@dpocentre.com.

We have provided this Privacy Policy to inform you of how we collect, protect and use your personal information. We only collect information about you that we will genuinely use to give you a better shopping experience and in accordance with the UK General Data Protection Regulation (UK GDPR).

This privacy policy applies to whichever way you provide personal information to us, whether visiting in-store or at events, writing or emailing us, telephoning or texting or via social media.

If you would like to contact us regarding this Privacy Policy, our details are as follows:

Email: help@coes.co.uk

Post: W.D. Coe Ltd, 20-28 Norwich Road, Ipswich, Suffolk, IP1 2NH

Telephone: 01473 256061

VAT Registered Number: GB 102 1225 48

We may collect the following information:

• Your name, title, gender, date of birth and other relevant personal demographic details.
• Your contact details such as billing address, delivery address, email address and telephone (including mobile) numbers.
• Your purchase and order information.
• Your usage experience regarding our website, products and services.
• Your marketing and communication preferences.
• Your correspondences and communications with us.
• Your job application information.
• Your device and browser information including IP address.
• Your transaction data including payment card details and details about payments to and from you.
• Your user profile data including usernames, marketing preferences and order history.
• Your image data such as CCTV images and photography during events where you have not objected to us using it.

This isn’t a complete list, but it covers the most common types of data and you are under no statutory or contractual requirement or obligation to provide us with your personal information. However, to help provide you with customer service in an efficient and effective manner we collect the above data.

We do not knowingly collect “special category” personal data. This is a special type of sensitive data to which more stringent processing conditions apply, and comprises data concerning your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life or sexual orientation, and genetic data and/or biometric data.

We also do not collect information about criminal convictions or offences.

We obtain personal data from sources as follows:

• Directly from you when you interact with us, for example when you:
• • Create a Coes Option or Coes Subscription account.
  • Buy our products in a store or online.
  • Sign up to our mailing lists.
  • Request information.
  • Write to us.
  • Phone our customer services team.
  • Enter a competition.
  • Take part in a survey.
  • Give us feedback or post comments or reviews.
  • Apply for a job or send a CV.
  • Attend external local events.
  • Indicate on a form that you would like to receive communication from us.

• From customers, for instance:
• • If they provide your details in relation to an order. Please note if you are providing another person’s details, ensure you have that person’s explicit consent to do so.

• From automated technologies such as cookies and tags when you use our website – for more information, please see the Cookies section of this policy.

We only use data in a way that is necessary for the purpose for which it has been collected. We use your data:

• To provide our products and services.
• To verify your identity.
• To assist you with customer service enquiries and requests.
• To manage any accounts you may have with us (financial, loyalty, customer or other).
• To personalise your website or shopping experience.
• To comply where necessary with a legal or regulatory obligation.
• To provide you with personalised marketing communications.
• To carry out billing and administration activities, including refunds and credits.
• To review for analysis or research purposes so that we can provide a better customer experience.

For the purposes of marketing communications, we use your personal data to provide you with information on products, services, promotions or events that we consider may be of interest to you. We only do this where we have been provided your active consent and shown interest in receiving these marketing communications. These communications may be via online, email, post, social media, review sites and advertisers.

You can opt out of receiving these marketing communications by unsubscribing from our emails, by returning our journals or offer mailing to the address indicated, or by contacting us using the contact details at the top of this policy.

Our website uses cookies and similar technologies. Some are needed for the website to work, such as keeping the items in your basket. Others are only used if you accept them in our cookie banner: analytics cookies, which help us understand how our website is used, and marketing cookies, which help us measure our advertising. You can change your choice at any time in the cookie settings. Google’s tag also sends some information without cookies before you choose; see Google adverts below.

Website analytics

If you accept analytics cookies, our website records how it is used so that we can improve it: for example, which products are viewed, what is searched for, what is added to the basket and how quickly our pages load. This is linked to a random visitor ID rather than to your name. If you place an order, we keep with it how you found us, for example a search engine, one of our emails or an advert, so that we can see what leads to sales. If you also accept marketing cookies, we note which advert brought you to us.

We do not record your name, email address, phone number or postal address in this way, and we do not send your IP address to our analytics. We do this only with your consent; if you withdraw it, we remove these items from your browser. We keep this analytics data for 400 days.

The cookie and browser storage we use for analytics:

• coes_vid (a cookie, kept for 13 months): a random ID that lets us tell repeat visits apart.
• coes_session (stored in your browser, until 30 minutes without activity): your current visit.
• coes_journey (stored in your browser, until you clear your browser data or change your cookie choice): where your first and most recent visits came from.

Counting visits

We count visits to our website, without asking first, to see how it’s used and to improve it: which pages and products are looked at, what’s searched for, what’s added to the basket and how quickly pages load. The statistics exception in the Privacy and Electronic Communications Regulations allows this, as long as we tell you and you can easily switch it off.

To count a visit, your browser keeps an ID for that visit only (coes_session, in your browser’s storage). A new one replaces it when you come back after 30 minutes or more. With each visit we record the pages you went to, the website that sent you, the kind of device and browser, and roughly where your connection is (the town or area, worked out by Shopify, which hosts our website; we don’t keep your IP address). We don’t set a cookie for this, don’t keep anything that recognises you on a later visit, and never link it to your name, email address, account or orders. We use the counts only as totals, never to look at what one person did, and we don’t share them with advertisers. We keep the visits for 62 days, then only the totals.

You can switch counting off at any time: choose Reject all on the cookie banner, or turn off Counting visits in Cookie settings at the bottom of every page. If your browser sends Global Privacy Control, we don’t count your visits.

We do this because we have a legitimate interest in understanding how our website is used, so we can improve it.

Google adverts

We advertise with Google, and Google’s tag helps us see how well our adverts work. If you say yes to marketing cookies, it works as described under Google in the cookie list below.

If you haven’t said yes, or you’ve said no, Google’s tag still loads on our pages, but in a restricted mode. It doesn’t set or read any cookies, and it leaves out which Google advert you clicked. It sends Google a short message when you view a page and, if you’ve accepted analytics cookies, when you look at a product, search or add something to your basket. The message includes the page address, the time, the website that sent you, and the kind of browser and device you’re using. Like any request to Google, it also reaches Google from your IP address. It doesn’t include your name, email address or anything else we hold about you, and without cookies it can’t be linked to your other visits.

Google uses these messages only to estimate, in total, how many visits and sales our adverts lead to. It doesn’t use them to show you adverts.

If your browser sends Global Privacy Control, Google’s tag doesn’t load until you say yes to marketing cookies. If you say yes and later change your mind in Cookie settings, it goes back to the restricted mode.

We do this because we have a legitimate interest in knowing how well our advertising works.

Keeping our website working

To keep our website working, we record which pages are opened, any that can't be found or fail to load, how long they take, and the country each visit comes from. These records never include your IP address, cookies or anything else that could identify you. We keep them for 90 days, and daily totals for up to 400 days.

We also record problems with our pages in your browser, such as errors, slow loading and pages that jump as they load. If you decline analytics cookies, we don't record how quickly or steadily our pages load for you.

Our online shop runs on Shopify, which also uses cookies to keep your basket and checkout working and, with your consent, for its own analytics. You can read about these in Shopify's cookie policy: https://www.shopify.com/legal/cookies

To provide you with the best possible service, we do on occasion provide your personal data to trusted third parties. Where possible this data is anonymised. We may share your data with:

• Other companies within the trading group, currently: Coes, Golding.
• Service providers such as logistics providers, technical and support partners and recruitment service providers.
• Law enforcement, public or government agencies and officials, regulators including any other person or entity that has the appropriate legal authority to request personal data.
• Any specific parties where we have your active consent to do so.
• Third parties if we need to provide personal data to establish, exercise or defend our legal rights (including preventing fraud and reducing credit risk).
• Payment providers, such as Shopify, PayPal and Klarna.

We will never sell or rent your personal data to other organisations for any purpose.

Lawful processing

To process personal data, we must have a lawful basis to do so. We always ensure that this is the case, and we set out our lawful basis below. However, please note that more than one may apply at any given time, for example, if we inform you of changes to our privacy notice, we may process your personal data on the ground of complying with legitimate interests, where we will always carry out a legitimate interests assessment prior to the processing.

We will use your personal data only for the purposes for which we collected it, unless we fairly consider that we need it for another reason that is compatible with the original purpose.

Please contact us if you would like more information, and on situations in which more than one lawful basis applies.

Legitimate Interests

We process your personal information for our legitimate business purposes, which include the following:

• To conduct and manage our business.
• To identify suspicious purchasing activity (for example, where a card has been used for high-volume and/or high-value purchases or where cardholder and delivery addresses differ) – however, we do not make automated decisions on the basis of such profiling.
• To ensure our website and systems are secure (for example, by conducting security penetration tests on our website to ensure our security tools are effective).
• To personalise your web experience – for example, by tailoring our products and offers to you.
• To allow you to review a product you have purchased.
• To analyse, improve and update our services for the benefit of our customers.
• To deal with complaints.
• Where you have made a purchase from us, to let you know about our products, services, promotions or events that we consider may be of interest to you (and which may be tailored to your interests as construed from your purchase history). We do this only where you have provided us with a preferred means of contact for this purpose. We carry out this processing on the legal basis that we have a legitimate interest in marketing our products and services, and only to the extent that we are permitted to do so by applicable direct marketing laws. You can opt out of receiving this information by unsubscribing from our emails, by returning our journals or offer mailings to the address indicated, or by contacting us using the contact details at the top of this policy.

Whenever we process your personal data for these purposes, we ensure that your interests, rights and freedoms are carefully considered, and we will carry out a Legitimate Interest Assessment prior to the processing of your data.

Compliance with laws

We may process your personal data in order to comply with applicable laws (for example, if we are required to co-operate with an investigation pursuant to a court order).

If you give us information on behalf of someone else, you confirm to us that you have their permission to do so and that they are aware of the contents of this privacy policy and do not have any objection to our processing their information in accordance with this policy.

You are responsible for informing us of any changes in your details such as change of address. You have a right to ask us to correct any inaccuracies in the information we hold about you.

You have a right to ask what information we hold about you. We may charge you a small fee for this. You may contact us using the contact details at the top of this policy.

If you are under 16 please do not provide us with any personal information unless you have the permission of your parent or guardian to do so.

Please note that we're not responsible for the content of external websites.

Coes have security measures in place designed to prevent data loss, to preserve data integrity, and to regulate access to the data. Only authorised Coes employees and third parties processing data on our behalf have access to your personal data.

Coes employees who have access to your personal data are required to adhere to the Coes Privacy Notice and we have in place contractual safeguards with our third-party data processors to ensure that your personal data is processed only as instructed by Coes.

The security measures we have in place include:

• Regular reviews of information collection, storage and processing practices to protect against unauthorised access.
• Restriction of access to personal information.
• Monitoring of systems storing and processing information.
• Use of secure technologies (e.g. SSL, encryption)
• Scenario planning and crisis-management exercises to ensure we are ready to respond to cyber security attacks and data security incidents.
• Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share the password with anyone.
• We take all reasonable steps to keep your data safe and secure and to ensure the data is accessed only by those who have a legitimate interest to do so. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to us. Any transmission is at your own risk. Therefore, we recommend that information such as bank details or passwords are not sent to us by email. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access.
• Please contact us using the contact details at the top of this policy if you would like more information about this.

We carefully consider the personal data that we store, and we will not keep your information in a form that identifies you for longer than is necessary for the purposes set out in this notice or as required by applicable law. In some instances, we are required to hold data for minimum periods: for example, UK tax law currently specifies a six-year period for retention of some of your personal data.

Although we are based in England, we may transfer your personal information to a location (for example, to a secure server) outside the UK, if we consider it necessary or desirable for the purposes set out in this notice.

In such cases, to safeguard your privacy rights, transfers will only be made to countries covered by UK adequacy regulations, or under the UK International Data Transfer Agreement or the UK Addendum to the EU’s standard contractual clauses, or, for recipients in the United States, under the UK Extension to the EU-US Data Privacy Framework.

We draw your attention to your following rights under data protection law:

• Right to be informed about the collection and use of your personal data.
• Right of access to your personal data, and the right to request a copy of the information that we hold about you and supplementary details about that information – you will be asked to provide proof of your identity and residential address, and we may ask you to provide further details to assist us in the provision of such information.
• Right to have inaccurate personal data that we process about you rectified – we want to ensure that the personal information that we process and retain about you is accurate, so please do remember to tell us about any changes, for example if you have moved to a new house or changed your contact details. It is your responsibility to ensure you submit true, accurate, and complete information to us; please also update us in the event this information changes.
• Right of erasure – in certain circumstances you have the right to have personal data that we process about you blocked, erased or destroyed.
• The right to object to, or restrict: - the processing of personal data concerning you for direct marketing.
• Decisions being taken by automated means which produce legal effects concerning you or that similarly significantly affect you.
• In certain other situations, to our continued processing of your personal data
• The right of portability of your data in certain circumstances.

We may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

Please contact us using the contact details at the top of this policy if you would like to exercise any of these rights or know more about them.

These rights are subject to certain limitations that exist in law. Further information about your information rights is available on the ICO’s website: https://ico.org.uk/.

To form a contract with you, we will need some or all the personal data described above so that we can perform that contract or the steps that lead up to it: this is set out above in this notice. If we do not receive the data, the contract could not be performed.

If you sign up to our mailing list, you will have to provide certain personal data. Of course, you may decide to stop receiving our mailings at any time.

We hope that you will be satisfied with the way in which we approach and use your personal data.

Should you find it necessary, you have a right to raise a concern with the information regulator, the Information Commissioner’s Office: https://ico.org.uk/.

However, we do hope that if you have a complaint about the way we handle your personal data, you will contact us in the first instance using the contact details at the top of this policy, so that we have an opportunity to resolve it.

Last modified: 9 November 2026