GDPR Compliance

Our Commitment

Catwalk Dropship is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of your personal data seriously and process it only in accordance with applicable data protection laws.

Data Controller

Catwalk Wholesale Ltd is the data controller responsible for your personal data collected through the Catwalk Dropship platform. We are registered in England and Wales.

Contact: privacy@catwalkdropship.com

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contract — processing necessary to provide our dropshipping services to you, including order fulfillment, product syncing, and account management.
• Legitimate Interest — processing necessary for our legitimate business interests, such as improving our platform, preventing fraud, and ensuring security.
• Consent — where you have given clear consent for us to process your personal data for marketing communications.
• Legal Obligation — processing necessary to comply with UK laws, such as tax and accounting requirements.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will respond to your request within 30 days.

Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request that we delete your personal data, subject to certain legal exceptions (e.g., where we are required to retain data for tax purposes).

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time.

Data We Collect

We collect and process the following categories of personal data:

• Identity data — name, email address, business name
• Store data — Shopify store domain, product and order information
• Financial data — billing information (processed securely via Stripe)
• Customer data — end-customer shipping addresses for order fulfillment only
• Technical data — IP address, browser type, device information

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specifically:

• Account data is retained while your account is active and for 12 months after closure
• Order data is retained for 6 years to comply with UK tax and accounting requirements
• Marketing consent records are retained for as long as consent remains valid

International Transfers

Your data may be processed by third-party services (such as Stripe and Shopify) that operate outside the UK. Where this occurs, we ensure adequate safeguards are in place, including Standard Contractual Clauses approved by the ICO.

Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Role-based access controls
• Regular security reviews and updates
• Secure payment processing via PCI DSS-compliant Stripe

Data Breach Notification

In the event of a personal data breach, we will notify the Information Commissioner's Office (ICO) within 72 hours where feasible, and affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at privacy@catwalkdropship.com. We will respond to your request within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.