Privacy policy

Privacy Policy

Last updated: 10 April 2026

1. Introduction

This privacy policy explains how MowDirect ("we", "us", or "our") collects, uses, stores, and protects your personal data when you use our website (www.mowdirect.co.uk) and services.

We are committed to protecting your privacy and handling your data in an open and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

MowDirect is the data controller responsible for your personal data.

Contact details:

Company name: Compass and Spectre Limited (trading as MowDirect)
Registered address: Harrison House, Sheep Walk, Langford Road, Biggleswade, Bedfordshire, SG18 9RB
Email: customercare@mowdirect.co.uk
Phone: 020 3026 8712
Company registration number: 10621602

For any questions about this privacy policy or how we handle your personal data, please contact us using the details above.

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

Information you provide to us:

Identity data: Name, title
Contact data: Email address, telephone number, delivery address, billing address
Financial data: Payment card details (processed securely by our payment provider)
Account data: Username, password, purchase history, preferences
Communication data: Your correspondence with us, product reviews, feedback

Information collected automatically:

Technical data: IP address, browser type and version, operating system, device type
Usage data: Pages visited, time spent on site, click patterns, search queries
Cookie data: See our Cookie Policy for full details

Information from third parties:

Fraud prevention data from payment processors
Delivery tracking information from courier partners

4. How We Use Your Personal Data and Our Lawful Basis

Under UK GDPR, we must have a valid lawful basis to process your personal data. The table below explains how we use your data and the legal basis we rely on:

Purpose	Lawful Basis
Processing and fulfilling your orders	Contract – necessary to perform our contract with you
Taking payment and fraud prevention	Contract and Legal obligation – necessary for the transaction and to comply with financial regulations
Sending order confirmations, dispatch notifications, and delivery updates	Contract – necessary to perform our contract with you
Managing your account	Contract – necessary to provide the account service you requested
Providing customer service and responding to enquiries	Contract and Legitimate interests – to respond to your queries and maintain customer relationships
Sending marketing communications about our products and offers	Consent – where you have opted in to receive marketing, or Legitimate interests – for existing customers, where permitted under soft opt-in rules
Improving our website and services	Legitimate interests – to develop and improve our products, services, and customer experience
Preventing fraud and ensuring website security	Legitimate interests – to protect our business and customers from fraudulent activity
Website analytics (Google Analytics, Shopify Analytics)	Consent – we use cookies to collect analytics data, which requires your consent via our cookie banner
Advertising and conversion tracking (Google Ads)	Consent – advertising cookies and tracking require your explicit consent
Complying with legal obligations (e.g., tax records)	Legal obligation – required by law

Legitimate interests: Where we rely on legitimate interests, we have conducted a balancing test to ensure our interests do not override your rights and freedoms. You may contact us for details of these assessments.

5. Marketing Communications

We would like to send you information about products, offers, and services that may be of interest to you.

You have the right to opt out of marketing at any time by:

Clicking the "unsubscribe" link in any marketing email
Contacting us at customercare@mowdirect.co.uk
Updating your preferences in your account settings

We will never share your data with third parties for their own marketing purposes.

6. Who We Share Your Data With

We may share your personal data with the following categories of recipients:

Recipient	Purpose	Safeguards
Shopify (e-commerce platform)	Website hosting, order processing, payment processing, Shopify Analytics	EU/UK Standard Contractual Clauses
Google LLC (Google Analytics)	Website analytics – understanding how visitors use our site, measuring traffic sources, user journeys, and site performance	UK IDTA/Standard Contractual Clauses; IP anonymisation enabled; data retained for 14 months
Google LLC (Google Ads)	Advertising measurement and conversion tracking – understanding which ads lead to purchases, and serving relevant advertisements	UK IDTA/Standard Contractual Clauses; you can opt out via Google Ad Settings
Shopify Payments	Processing credit/debit card payments	PCI DSS Level 1 compliant
Klarna	Buy now, pay later payment option	EU/UK based; own privacy policy applies
PayPal	Payment processing	PCI DSS compliant; EU/UK Standard Contractual Clauses
Delivery partners (e.g., DPD, Royal Mail)	Delivering your orders	UK-based processing
Numasuite	Order management, stock management, and customer service (ERP system)	UK-based processing
Base.com	Marketplace fulfilment	UK-based processing
Shopify Email	Sending marketing communications (where consented)	Processed by Shopify; same safeguards as e-commerce platform
Professional advisers	Legal, accounting, or audit services	Professional duty of confidentiality
Law enforcement or regulators	Where required by law	Legal obligation

We require all third parties to respect the security of your data and to treat it in accordance with the law.

7. International Transfers

Some of our third-party service providers are based outside the United Kingdom. Where we transfer your personal data outside the UK, we ensure it is protected by:

Transferring to countries deemed to provide adequate protection by the UK Government
Using UK International Data Transfer Agreements (IDTAs) or EU Standard Contractual Clauses
Ensuring appropriate supplementary measures are in place

Please contact us if you want further information on the specific mechanisms used.

8. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes for which it was collected:

Data Type	Retention Period	Reason
Order and transaction records	7 years from date of transaction	Legal and tax obligations
Customer account data	Duration of account plus 2 years after closure	Contract performance and legitimate interests
Marketing preferences	Until you unsubscribe or 3 years of inactivity	Consent management
Customer service correspondence	3 years	Legitimate interests (resolving disputes)
Website analytics (anonymised)	26 months	Legitimate interests (improving services)

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to be informed

You have the right to be told how your personal data is being used. This privacy policy fulfils that requirement.

Right of access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a "subject access request."

Right to rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to erasure ("right to be forgotten")

You have the right to request that we delete your personal data in certain circumstances, for example:

The data is no longer necessary for the purpose it was collected
You withdraw consent (where consent was the lawful basis)
You object to processing and there are no overriding legitimate grounds

Right to restrict processing

You have the right to request that we limit how we use your data in certain circumstances, for example while we verify accuracy following a dispute.

Right to data portability

You have the right to request a copy of your personal data in a structured, commonly used, machine-readable format, and to have it transferred to another organisation where technically feasible.

Right to object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.

Rights related to automated decision-making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making of this nature.

How to exercise your rights

To exercise any of these rights, please contact us at:

Email: customercare@mowdirect.co.uk
Post: 60 Sunderland Road, Sandy, SG19 1QY, United Kingdom

We will respond to your request within one month. There is no fee for most requests, but we may charge a reasonable fee if your request is clearly unfounded or excessive.

We may need to request specific information from you to verify your identity before processing your request.

10. Cookies

Our website uses cookies to distinguish you from other users and to improve your experience.

Types of cookies we use:

Cookie Type	Purpose	Consent Required?
Strictly necessary	Essential for the website to function (e.g., shopping basket, checkout)	No
Analytics cookies (Google Analytics, Shopify Analytics)	Help us understand how visitors use our site, which pages are popular, and how users navigate	Yes
Advertising cookies (Google Ads)	Track conversions from our advertising, and may be used to show you relevant ads on other websites	Yes
Functional cookies	Remember your preferences (e.g., language, region)	Yes

Managing cookies

When you first visit our website, you will be shown a cookie consent banner where you can choose which types of cookies to accept. You can change your preferences at any time by clearing your cookies and revisiting the site, or by clicking "Manage preferences" when the cookie banner appears.

You can also manage cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

Google Analytics

We use Google Analytics to analyse website usage. Google Analytics uses cookies to collect information about your visit (pages viewed, time on site, etc.). This data is transmitted to Google servers in the United States. We have:

Enabled IP anonymisation so your full IP address is not stored
Signed a Data Processing Agreement with Google
Set data retention to 14 months

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Google Ads

We use Google Ads conversion tracking to measure the effectiveness of our advertising. If you click on one of our ads, a cookie may be placed on your device. We may also use remarketing to show you relevant ads on other websites based on your visit to our site.

You can manage your Google ad preferences at Google Ad Settings or opt out of personalised advertising at Your Online Choices.

For detailed information about all cookies we use, please see our Cookie Policy.

11. Security

We have implemented appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access, including:

SSL/TLS encryption for data in transit
Secure payment processing (we do not store full card details)
Access controls limiting who can access your data
Regular security assessments of our systems and providers

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read the privacy policy of every website you visit.

13. Children's Privacy

Our website and services are not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.

14. Changes to This Privacy Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

For significant changes, we will notify you by email or through a notice on our website.

15. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office

Website: www.ico.org.uk
Helpline: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us first.

Document Control

Version	Date	Changes
1.0	10 April 2026	Initial GDPR-compliant policy

This privacy policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.