Privacy Policy

One+All Limited trading as Gooddies – Privacy Policy

One+All Limited trading as Gooddies (we/us) are committed to protecting your privacy, including your personal data.

We will be the data controller of any personal data which we collect from or about you. This Policy sets out the terms on which we will hold and process your personal data. If you have any queries about this Policy or how we use your data, you can contact us using the contact details below.

By contracting with us, you acknowledge that your personal data will be used in accordance with this Policy.

When Do We Collect Information?

We will collect information from you when you become our customer or supplier, or contact us in person, by telephone, by email, by post, by fax, by my account or by a digital channel/social media (i.e. live chat, twitter, slack, instagram, linkedin).

We also collect information from you when you voluntarily:

Complete customer surveys
Enter a competition or promotion
Provide feedback
Complete a contact form on our website

We may collect information about you from credit reference agencies when we undertake checks such as credit and identity checks.

Information may also be collected when you visit our website (for example via cookies), such as your IP address and other browser-generated information.

We may record all calls for training and quality purposes, to deal effectively with queries or complaints in order to comply with regulatory obligations.

What Information Will We Collect?

We may collect the following information:

Your contact details or those of your employees (name, address, telephone number and email address)
Date of birth, nationality, country of birth, country of residence, employment status and tax identification number (i.e. National Insurance Number)
Passport details, driving license and utility bills
Details of goods you sell to us or ask us to supply
Payment details (card or bank information for transfers)
Details of your credit history and records held by financial crime prevention services, on the Electoral Register and by utility providers
Employment status, income and source of wealth

Before contracting with you for the purchase or sale of goods, we may need to obtain certain information to verify your identity in order to meet obligations under the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017 (the 'money laundering regulations 2017) and other applicable legislation and for the purposes of assessing our credit risk. You are obliged to provide this information and if you do not provide it, we will be unable to contract with you.

Privacy of Children

Our website is not intended for children and we do not intend to collect and will not knowingly collect personal information from children under 18.

We urge children under 18 to check with their parents or guardians before using the internet, as usage will often result in personal information being collected.

If you believe your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to remove that information.

The Lawful Basis

Under the UK General Data Protection Regulations (UK GDPR), the lawful basis we rely on for processing this information are:

Consent – You may withdraw consent at any time by contacting us.
Contractual obligation – Processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract.
Legal obligation – Processing your data where necessary to comply with a legal or regulatory obligation that we are subject to.
Legitimate interests – Contacting you and sending content we believe you would reasonably expect to receive from us, in accordance with the relationship we have with you to provide you the best service/product information and the best most secure experience.

How We Will Use Your Information

To undertake credit and identity checks to enable us to comply with our anti-money laundering obligations and for the purposes of assessing our credit risk
To comply with contractual obligations to you
To help protect your information from unauthorised access
To deal with queries, complaints or problems reported by you
For payment verification, debt tracing and recovery
Your payment card is debited at the time of placing your schoolwear order and sometimes a password may be asked for. This is an additional security measure requested by your card provider. All transaction information passed between our website is encrypted using 128-bit SSL certificates. No cardholder information is ever passed unencrypted and any messages sent to our servers from our payment service provider are signed using MD5 hashing to prevent tampering. You can be completely assured that nothing we pass to our payment service provider can be examined, used or modified by any third parties attempting to gain access to sensitive information
To administer promotions or competitions
To improve website functionality and user experience
To generate website usage statistics
To provide information about similar goods or services (you may opt out by using the contact details below)
If required to do so by law and to the extent necessary for the proper operations of our systems, to protect us/our customers, or to enforce the terms of any contract that we have entered into with you
To notify you of changes to our terms of business
Our use of your personal data will be for one or more of the legitimate interests described above

Disclosure of Your Information

We may disclose your information:

To companies within our group
To service partners (delivery contractors, embroiderers, IT providers)
To financial and professional advisers (bankers, accountants, lawyers, insurers) to the extent that they require access to the information in order to advise us
To credit reference agencies
To debt collection agencies or courts if required to do so by any legal requirement
To law enforcement agencies and others in orders to investigate or prevent fraud or activities believed to be illegal or otherwise in breach of applicable laws
To HMRC where legally required
If we or substantially all of our assets are acquired by a third party, in which case personal data held by us about our customers and suppliers may be one of the transferred assets

We will not disclose your information to third parties other than as outlined above.

Credit and Identity Checks

We may carry out automated checks using your personal data, such as your name, postal address, date of birth, telephone numbers and employment status.

These checks include credit checks and identity checks and involve obtaining information (such as your credit history) from credit reference agencies, the Electoral Register and providers of utility services.

We need to carry out these checks in order to meet our obligations under the Money Laundering Regulations 2017 (and any other applicable legislation) and for the purposes of assessing our credit risk. The information obtained from these checks is used by us to determine if an account can be opened or whether further information is required, based on factors such as whether we have been able to verify your identity or your credit history.

Credit reference agencies will record the details of our search and may record whether or not your application to contract with us is accepted. We may make periodic searches with credit agencies to manage your account.

We may provide information to financial and other organisations involved in fraud prevention to protect ourselves and our customers from theft and/or fraud. If false or inaccurate information is provided and fraud is identified or reasonable suspected, details may be passed to fraud prevention agencies who will record this. This information may also be accessed by law enforcement agencies. This information may be used by us to prevent fraud and money laundering, for example, when processing applications for credit, managing credit or for debt recovery.

Storage of Your Personal Data

We will only keep your personal data for as long as we need to in order to fulfil the purpose(s) for which it was collected, as set out above in this policy, and for as long as we are required to keep it by law.

We retain personal data collected in connection with the performance of our contractual obligations to you and the information provided to us for identity checks and anti-money laundering checks for 7 years after the performance of our contract with you. You may require us to delete personal data once that period has expired unless we are required to retain that personal data for a longer period by law.

We take appropriate security measures (including physical, electronic and procedural measures) to help safeguard your personal information from unauthorised access and disclosure.

We do not collect Special Categories of personal data.

Where you have chosen a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. We also recommend that you use a two-factor authentication process.

We may transfer, or allow access to, your information internationally including to countries outside the European Economic Area (EEA) such as Egypt, Bangladesh, the Philippines and Cambodia, when performing our contractual obligations to you. We will ensure that your personal data is adequately protected when it is transferred outside the EEA in accordance with applicable data protection laws.

You can update your personal data by contacting us.

Cookies

Our website uses website user information (including user journeys and cookie tracking) to distinguish you from other users, to enable us to provide you with a better experience when you browse our website and to allow us to improve our website.

Your Rights

You have the following rights which can be exercised by contacting us using the details below:

To ask us not to process your personal data for marketing purposes
To access and obtain a copy of your personal data
To prevent any processing of personal data that is causing or is likely to cause unwarranted and substantial damage or distress to you or another individual
To obtain the rectification or completion of personal data which is inaccurate or incomplete
To restrict or object to the processing of your personal data and to request its erasure under certain circumstances
In certain circumstances, to receive a copy of your personal data in a structured, commonly used and machine readable format and the right to require us to transmit that data to another data controller where technically feasible
To be informed about any use of your personal data to make automated decisions about you, and to obtain meaningful information about the logic involved, as well as the significance and the envisaged consequences of this processing
To lodge a complaint about the way in which your personal data is being used
To withdraw your consent to any use by us of your personal data otherwise than for one of the legitimate purposes set out above

Changes to Our Privacy Policy

We reserve the right to amend this policy at any time. When we do, we will revise the updated date at the bottom of this page. We encourage you to frequently check this page for any changes to stay informed about how we help to protect the personal information we collect.

Contacting Us

If you have any queries, comments or requests regarding this policy or would like to exercise any of your rights set out above, you can contact us at:

Email: theteam@gooddies.co.uk
Post: Unity Place, Waterside, Hadfield, Glossop, Derbyshire, SK13 1FN

Complaints

You may complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data:

Post: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk

Effective from: 1st September 2026