Privacy Policy

1. Introduction

This Privacy Notice explains the types of personal data we may collect about you when you interact with us. It also explains how we’ll store and handle that data, and keep it safe.

‘We’ refers to GM8 Group, 54 Wilbury Way, Hitchin, Herts, SG4 0TP.

GDPR - the law on data protection - sets out a number of different reasons for which an organisation may collect and process your personal data. We are allowed to collect your data with:


In specific situations, we can collect and process your data with your consent – such as when you provide your email address so that we can send you our special offers and seasonal tips.

Contractual Obligations

We may need your personal data in order to meet our contractual obligations – such as collecting your address for delivering products to you and passing this to our courier.

Legal Compliance

We are able to process your personal data to comply with a common law or statutory obligation, (such as complying with a court order).

Legitimate Interest

In specific situations, we require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our organisation – such as using details of your purchase history to send you personalised offers or to ensure that we keep up with product demand.

2. When your data is collected

  • When you contact us with an enquiry
  • When you engage with us on social media
  • When you create an account with us
  • When you order products from us
  • When you attend exhibitions and engage with us at our stand
  • When you enter our prize draws or competitions
  • When you comment on or review our products

3. What data is collected

  • Your name, contact details (including address) and payment details when you order our products. (Your payment details are not stored after payment has been made.)
  • If you have a web account with us: your name, billing/delivery address, email and telephone number. For your security, we’ll also keep an encrypted record of your login password.
  • Your social media username, if you interact with us through those channels, to help us respond to your comments, questions or feedback.
  • Information gathered by the use of cookies in your web browser.
  • Your comments and product reviews.

4. How we use your personal data

We will only collect the information needed so that we can provide you with the product and service you require. We may use this data to:

  • Respond to your enquiries and requests
  • Fulfil your product orders
  • Process payments for products purchased and to prevent fraudulent transactions
  • Administer any of our prize draws or competitions which you enter, based on your consent given at the time of entering.
  • Develop and improve the systems, services and products we provide to you. (We’ll do this on the basis of our legitimate business interests, which falls within the remit of the General Data Protection Regulation.)
  • To send you survey and feedback requests to help improve our service and range of products. These messages will not include any promotional content and do not require prior consent when sent by email or text message. We have a legitimate interest to do so as this helps make our products more relevant to you.
  • Your social media username, if you interact with us through those channels, to help us respond to your comments, questions or feedback.
  • To protect our business and your account from fraud and other illegal activities.
  • With your consent, we will use your personal data, preferences and details of your transactions to keep you informed by email, about relevant products and services including tailored special offers, discounts, promotions, events, competitions and so on. You may opt out of hearing from us by any of these channels at any time.

5. How we protect your personal data

We secure access to all transactional areas of our websites using ‘https’ technology.
Our electronic data is held on secure computer systems. Access to your personal data is password-protected.

Marketing related data is held in online systems which are password protected and are GDPR-compliant (EU-based) or have certified compliance with the US Privacy Shield Framework, (US-based).

6. How long will we keep your personal data?

We will process personal data when fulfilling orders and will continue to store only the personal data needed to meet any legal obligations. At the end of that retention period, your data will be deleted from our systems.

7. Who we share your personal data with

The only data we will pass on to third parties will be essential to the processing of your order. For example, we will supply your name and address (and possibly telephone number) to our delivery courier and your billing details to our payment provider.

We provide only the information they need to perform their specific services and they may only use your data for the exact purposes we specify in our contract with them. We do not pass on names and addresses to third parties for the use of marketing.

8. Where your data may be processed

We use online systems to progress enquiries, fulfil orders and store data. These systems comply with the security requirements of the General Data Protection Regulation.

9. Your rights

You have the right to request:

  • Access to the personal data we hold about you.
  • The correction of your personal data when incorrect, out of date or incomplete.
  • That we stop using your personal data for direct marketing (either through specific channels, or all channels).
  • That we stop any consent-based processing of your personal data after you withdraw that consent.

Your right to withdraw consent:

  • Whenever you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent.
  • You have the right to stop the use of your personal data for direct marketing activity through all channels, or selected channels. We must always comply with your request. You can stop direct marketing communications from us by clicking the ‘unsubscribe’ link in any email we send you, or by writing to: Customer Services, GM8 Group, 54 Wilbury Way, Hitchin, Herts, SG4 0TP.
  • In cases where we are processing your personal data on the basis of our legitimate interest, you can ask us to stop at any time. However - we will not be able to keep you informed of important, relevant updates about our services. For example - you will need to know about any changes to our term and conditions.

Checking your identity

To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Privacy Notice. If you have authorised a third party to submit a request on your behalf, we will ask them to prove they have your permission to act.

10. Enquiries and concerns

If you think that there is a problem with the way we are handling your data you have the right to complain to us. If you do not get a response within 30 days, you can complain to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF.

The Data Protection Officer at GM8 Group is the Managing Director and can be contacted at or by writing to GM8 Group, 54 Wilbury Way, Hitchin, Herts, SG4 0TP.