Privacy Policy

ProvenGK a brand of Proven Clothing

1. Who We Are

1.1  This Privacy Policy explains how Lewis Watkins, an individual trading as ProvenGK (a brand of Proven Clothing) ("we", "us", "our"), collects, uses, and protects your personal data when you visit our websites at www.provengk.com or www.provenclothing.com, or when you purchase from us.

1.2  We are the "data controller" of your personal data within the meaning of UK GDPR. If you have any questions about how we handle your data, contact us at support@provenclothing.com.

1.3  We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Personal Data We Collect

We collect the following categories of personal data:

       Contact details: name, email address, phone number, delivery and billing address.

       Order data: items purchased, order value, payment method (we do not store full card details), order history.

       Account data: if you create an account, your login credentials (password is encrypted).

       Marketing preferences: whether you have consented to receive email marketing.

       Technical data: IP address, browser type and version, device type, operating system, pages viewed, referral source.

       Cookies and tracking data: as described in our Cookie Policy (Section 8 below).

       Communications: any emails or messages you send us, including customer service queries.

3. Why We Collect Your Data (Lawful Basis)

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

3.1  Contract: to fulfil orders, process payments, deliver goods, and provide customer service. Without this data we cannot complete your purchase.

3.2  Legitimate interests: to operate our business, prevent fraud, improve our website, and analyse purchasing patterns. We balance these interests against your rights and only use data in ways you would reasonably expect.

3.3  Consent: for marketing communications, optional cookies, and any data use beyond the above. You can withdraw consent at any time.

3.4  Legal obligation: to comply with tax law, accounting requirements, and other applicable regulations.

4. Who We Share Your Data With

We share your personal data with the following categories of third parties, only where necessary:

 

Recipient

Purpose

Location

Shopify Inc.

E-commerce platform — order processing, customer accounts

Canada / USA

Stripe Payments UK Ltd / Shopify Payments

Payment processing

UK / USA

Klaviyo Inc.

Email marketing (only if you opt in)

USA

Royal Mail / DPD / shipping carriers

Order delivery

UK

Meta Platforms Inc. (Facebook/Instagram)

Advertising (where applicable, with cookie consent)

USA

Google LLC (Analytics, Ads)

Website analytics and advertising (with cookie consent)

USA

HMRC

Tax and accounting compliance (where required by law)

UK

 

4.1  All third parties are required to handle your data in accordance with applicable data protection law. We do not sell your data to anyone.

4.2  Where data is transferred outside the UK (e.g. to the USA), we rely on appropriate safeguards including UK Adequacy Regulations, Standard Contractual Clauses, or the UK-US Data Bridge.

5. How Long We Keep Your Data

5.1  Order and tax records: we retain these for 6 years from the end of the relevant tax year, in accordance with HMRC requirements.

5.2  Account data: retained while your account is active and for up to 12 months after your last login or order, after which it is deleted unless retention is required by law.

5.3  Marketing data: retained until you withdraw consent or unsubscribe, after which it is deleted within 30 days.

5.4  Technical and analytics data: aggregated and anonymised after 14 months.

5.5  Customer service correspondence: retained for 2 years after the issue is resolved.

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

       Right of access: request a copy of the personal data we hold about you.

       Right to rectification: ask us to correct inaccurate or incomplete data.

       Right to erasure ("right to be forgotten"): ask us to delete your data, subject to legal retention requirements.

       Right to restrict processing: ask us to limit how we use your data.

       Right to data portability: receive your data in a structured, machine-readable format.

       Right to object: object to processing based on legitimate interests or direct marketing.

       Right to withdraw consent: where processing is based on consent, withdraw it at any time.

       Right to complain: lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk if you believe we have mishandled your data.

6.1  To exercise any of these rights, contact us at support@provenclothing.com. We will respond within one (1) month.

6.2  We do not charge for handling rights requests, except in exceptional circumstances permitted by law (e.g. manifestly unfounded or excessive requests).

7. Marketing Communications

7.1  We will only send you marketing emails if you have given explicit consent (e.g. by ticking the marketing opt-in box at checkout or signing up to our newsletter).

7.2  You can unsubscribe at any time using the "unsubscribe" link in any marketing email, or by contacting support@provenclothing.com.

7.3  Withdrawing marketing consent will not affect transactional emails about your orders, which we send under our contractual obligation to you.

8. Cookies and Tracking

8.1  Our websites use cookies and similar tracking technologies. Cookies are small text files placed on your device that help us understand how you use our site and deliver a better experience.

8.2  We use:

       Essential cookies: required for the website to function (e.g. shopping cart, login session). No consent needed.

       Analytics cookies: help us understand how visitors use the site (e.g. Google Analytics). Set only with consent.

       Advertising cookies: used by Meta (Facebook/Instagram) and Google to show you relevant ads on other websites. Set only with consent.

8.3  You can manage cookie preferences via the cookie banner on first visit, or by adjusting your browser settings. Disabling cookies may affect site functionality.

9. International Data Transfers

9.1  Some of our service providers (such as Shopify, Klaviyo, Meta, and Google) are based outside the UK, primarily in the USA. When data is transferred internationally, we rely on:

       UK Adequacy Decisions where applicable

       Standard Contractual Clauses approved by the UK Information Commissioner

       The UK-US Data Bridge where the recipient is certified under the EU-US Data Privacy Framework

9.2  These safeguards ensure your data receives a level of protection equivalent to UK GDPR.

10. Children’s Data

10.1  Our products and services are intended for customers aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe we have collected data from a child, contact us at support@provenclothing.com and we will delete it.

11. Data Security

11.1  We take appropriate technical and organisational measures to protect your personal data, including secure hosting via Shopify (PCI-DSS Level 1 compliant), encrypted data transmission (HTTPS), and access controls.

11.2  No system is 100% secure. In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO within 72 hours as required by law.

12. Changes to This Policy

12.1  We may update this Privacy Policy from time to time. Material changes will be communicated via email (if we have your contact details) or via a notice on our website.

12.2  The "Last updated" date at the bottom of this policy indicates when it was last revised.

13. Contact Us

13.1  If you have any questions about this Privacy Policy, your data, or wish to exercise any of your rights, please contact:

Lewis Watkins (trading as ProvenGK / Proven Clothing)

Email: support@provenclothing.com

Post: 5 Neville Road, Darlington

13.2  You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: www.ico.org.uk

Phone: 0303 123 1113

Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Last updated: 20/05/2026. Version 1.0