Privacy Policy
Last updated: May 5, 2026
This Privacy Policy explains how ADSHIFT MEDIA LTD, a company registered in the United Kingdom ("The Well Socks", "we", "us", or "our"), collects, uses, stores, and protects personal information obtained through thewellsocks.com (the "Site"). It applies to visitors, customers, and email subscribers, and is designed to comply with the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Information We Collect
1.1 Information you provide directly
When you place an order, create an account, subscribe to marketing emails, or contact support, we collect the information you submit, typically your name, email address, shipping address, billing address, and phone number.
1.2 Payment information
Payments are processed by Shopify Payments and, where applicable, third-party processors (PayPal, Apple Pay, Google Pay, Shop Pay). We do not see, store, or have access to your full card number, CVV, or bank credentials. We receive only a transaction confirmation, the last four digits of the card, and billing metadata required to fulfill your order.
1.3 Information collected automatically
When you browse the Site, the following is collected automatically via cookies, pixels, and server logs:
- IP address and approximate geographic region
- Browser type and version, operating system, device type
- Pages viewed, referring URL, session duration, clicks and scroll events
- Cart activity and checkout events
2. How We Use Your Information
- Order fulfillment. Processing purchases, arranging shipping, issuing refunds, and providing customer support.
- Transactional communication. Sending order confirmations, shipping notifications, delivery updates, and service-related emails.
- Marketing communication. Sending newsletters, promotions, and product updates, only with your explicit opt-in consent. You can unsubscribe at any time via the link in every email.
- Analytics and performance. Understanding how visitors use the Site and improving products, content, and checkout flow.
- Advertising. Measuring the effectiveness of our campaigns and showing relevant ads on third-party platforms.
- Fraud prevention. Detecting suspicious transactions and securing our systems.
- Legal compliance. Meeting obligations under tax, consumer protection, and privacy laws.
3. Legal Bases for Processing (GDPR)
If you are located in the EU or UK, we rely on the following legal bases under the GDPR:
- Performance of a contract, to process and deliver your order.
- Consent, for marketing emails, analytics cookies, and advertising cookies. You may withdraw consent at any time.
- Legitimate interests, to secure the Site, prevent fraud, and improve our services, where not overridden by your rights.
- Legal obligation, to retain records required by tax or consumer law.
4. Sharing of Information
We do not sell, rent, or trade your personal information. We share data only with the service providers we need to operate the business, each bound by contractual confidentiality and data-protection obligations:
- Shopify Inc., e-commerce platform, order and payment processing.
- Shipping carriers, to deliver your order (name and address only).
- Email service provider, to send transactional and, with consent, marketing emails.
- Google LLC. Google Analytics (site usage) and Google Ads (campaign measurement and remarketing).
- Meta Platforms, Inc.. Facebook Pixel, for ad measurement and audience building.
- Legal authorities, where disclosure is required by law, court order, or to protect our legal rights.
5. Cookies
We use three categories of cookies and similar technologies:
- Essential cookies, required for the Site to function (cart, checkout, login, security). These cannot be disabled.
- Analytics cookies. Google Analytics and similar tools. Used to understand aggregate usage. Set only with your consent where required by law.
- Marketing cookies. Google Ads, Facebook Pixel, and related advertising tags. Used to measure campaigns and show relevant ads. Set only with your consent where required by law.
You can withdraw consent or manage preferences through our cookie banner (where shown) and through your browser settings. Disabling essential cookies may prevent the Site from functioning correctly.
6. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this policy, meet our legal and tax obligations, and resolve disputes. Order and invoice records are retained for up to 7 years where required by UK law. Marketing data is deleted or anonymized within 24 months of your last interaction, or earlier upon request.
7. Data Security
We use industry-standard security measures, including TLS/SSL encryption for data in transit and PCI-DSS compliant payment processing. No online service can guarantee absolute security, but we work to protect your data against unauthorized access, alteration, disclosure, or destruction.
8. Your Rights
Depending on where you live, you have the right to:
- Request access to the personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request deletion of your data ("right to be forgotten");
- Object to or restrict processing of your data;
- Request data portability in a machine-readable format;
- Withdraw consent for marketing communications at any time;
- Lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office, ico.org.uk).
To exercise any of these rights, email support@thewellsocks.com. We will respond within 30 days.
9. California Residents (CCPA)
California residents have the right to know what personal information we collect, how it is used and shared, to request deletion, and to opt out of any "sale" of personal information. We do not sell personal information. To exercise your CCPA rights, contact support@thewellsocks.com. We will not discriminate against you for exercising these rights.
10. International Transfers
We are based in the United Kingdom. Where personal data is transferred outside the UK or EEA (for example, to service providers in the United States), we rely on approved safeguards such as the UK International Data Transfer Agreement, Standard Contractual Clauses, or adequacy decisions.
11. Children's Privacy
The Site is not intended for individuals under the age of 13, and purchases may only be made by individuals aged 18 or older. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Third-Party Links
The Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. Review the privacy policy of any third-party site before providing personal information.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated "Last updated" date. Continued use of the Site after changes take effect constitutes acceptance of the revised policy.
14. Contact
Company: ADSHIFT MEDIA LTD (United Kingdom)
Brand: The Well Socks
Email: support@thewellsocks.com