Privacy policy
PRIVACY POLICY
Last Updated: 20/02/26
This Privacy Policy explains how Yes the Basics Limited, trading as Yes the Basics, collects, uses, stores, and shares your personal data when you visit our website, make a purchase, sign up to our newsletter, or otherwise contact us.
Please read this policy carefully. By using our website, you confirm that you have read and understood this Privacy Policy.
Who we are
Yes the Basics is the trading name of Yes the Basics Limited, a company registered in England and Wales.
Registered office:
5 Ivy Lodge
Addlestone
KT15 1QE
United Kingdom
Contact email: community@yesthebasics.com
For the purposes of UK data protection law, Yes the Basics Limited is the data controller responsible for your personal data.
What personal data we collect
We collect personal data that you provide to us and data collected automatically when you use our website.
Data you provide to us
This may include:
Name
Email address
Phone number if you provide it
Billing address
Delivery address
Order details and purchase history
Messages you send us, including customer support enquiries
Marketing preferences, including newsletter subscription status
Data collected automatically
This may include:
Device information such as browser type, IP address, and device identifiers
Usage information such as pages viewed and actions taken on the site
Approximate location inferred from IP address
Cookie data
Payment information
We do not store full payment card details or bank details. Payments are processed securely by Shopify and its payment providers.
We may receive limited payment related information such as confirmation that payment has been made, transaction IDs, and fraud related signals.
Where we get your data from
We collect personal data from:
You directly when you place an order, sign up to emails, or contact us
Automatically when you browse our website, including via cookies and similar technologies
Service providers we use to run the business, such as Shopify and Klaviyo
Payment providers and fraud prevention tools used through Shopify
How we use your personal data
We use your personal data for the following purposes.
To provide our services and fulfil orders
This includes:
Processing orders, payments, and delivery
Communicating with you about your order, including confirmations and dispatch updates
Handling returns, exchanges, refunds, and customer support
To send marketing communications
If you sign up to our newsletter, we use your email address to send marketing emails and brand updates via Klaviyo. You can unsubscribe at any time using the link in any email.
Unsubscribing from marketing emails does not affect your purchases or ability to use the site.
To operate, secure, and improve our website
This includes:
Maintaining site functionality and checkout
Monitoring performance and fixing issues
Preventing fraud, abuse, and unauthorised access
Understanding how customers use our website so we can improve it
To comply with legal obligations
This includes:
Keeping records for tax and accounting
Responding to lawful requests from regulators or law enforcement
Enforcing our terms and protecting our legal rights
Legal bases for processing under UK GDPR
We rely on one or more of the following legal bases:
Contract, where processing is necessary to fulfil your order or provide requested services
Legal obligation, where we must keep records or comply with the law
Legitimate interests, where we have a genuine business reason such as improving the site, preventing fraud, or responding to customer queries, provided your rights do not override these interests
Consent, where required such as sending marketing emails and for certain cookies
You can withdraw consent at any time where we rely on it.
Marketing and newsletters
We use Klaviyo to manage marketing emails.
You can opt out at any time by:
Clicking the unsubscribe link in any marketing email
Emailing community@yesthebasics.com
We may still send necessary service messages such as order confirmations and responses to customer enquiries.
Cookies and similar technologies
We use cookies and similar technologies to help our website function and to understand how it is used.
Cookies may be used for:
Essential site functions such as basket and checkout
Security and fraud prevention
Remembering preferences
Website performance and improvements
You can manage cookies through your browser settings and, where applicable, through any cookie consent tools on the site. Blocking essential cookies may affect site functionality.
For more detail, see our Cookie Policy.
Who we share your personal data with
We share personal data only where necessary to run our store, fulfil orders, and operate our services.
This may include:
Shopify, which hosts our online store and provides checkout and order management
Klaviyo, which sends marketing emails
Payment providers used through Shopify
Delivery and fulfilment partners
IT, security, and fraud prevention providers
Professional advisers such as accountants or solicitors
We do not sell your personal data.
Shopify’s role
Our store is hosted by Shopify. Shopify processes personal data to provide services to us and to you, including securing the platform.
Depending on the features enabled, Shopify may also process certain data for its own purposes as described in Shopify’s privacy information. Where Shopify acts as an independent controller, it is responsible for that processing.
International data transfers
Some service providers, including Shopify and Klaviyo, may process personal data outside the United Kingdom.
Where personal data is transferred outside the UK, we rely on appropriate safeguards recognised under UK data protection law, such as international data transfer agreements, UK addenda to standard contractual clauses, or adequacy decisions where applicable.
Data retention
We keep personal data only for as long as necessary for the purposes described in this policy.
Typical retention periods include:
Order and customer records kept for up to six years after your last transaction
Newsletter data kept until you unsubscribe
Customer support messages are kept for up to three years after your query, and may be used for training and monitoring purposes
We may retain certain data for longer where required by law or to resolve disputes.
Security
We take reasonable steps to protect your personal data, including limiting access to authorised persons and using reputable service providers.
No online service can be guaranteed to be completely secure. You should avoid sending sensitive information through unsecured channels.
Children’s data
Our website and services are not intended for children and we do not knowingly collect personal data from children.
If you believe a child has provided personal data to us, please contact us and we will take appropriate steps to delete it.
Your rights
If you are in the UK, you have rights under UK GDPR, including the right to:
Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Request deletion in certain circumstances
Object to processing in certain circumstances
Request restriction of processing in certain circumstances
Request data portability in certain circumstances
Withdraw consent at any time where we rely on consent
To exercise your rights, contact community@yesthebasics.com. We may need to verify your identity before responding.
Complaints
If you have concerns about how we use your personal data, please contact us first at community@yesthebasics.com and we will do our best to resolve the issue.
You also have the right to lodge a complaint with the Information Commissioner’s Office.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, services, or legal requirements. The updated version will be posted on this page with a revised last updated date.