Privacy policy
Privacy Policy
Last updated: 8 June 2026.
I Have A Tool For That ("we", "us", "our") operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). I Have A Tool For That is a business operated by Shaun Jones as a sole trader in the United Kingdom. We are powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.
Who we are (the data controller)
For the purposes of UK GDPR, the data controller of your personal information is:
I Have A Tool For That Operated by Shaun Jones, sole trader Email: hello@ihaveatoolforthat.co.uk
If you wish to exercise any of your rights set out in this policy, or have any questions about how your data is handled, please email us at the address above. We aim to respond to all data protection requests within one month, as required by UK GDPR.
Personal information we collect or process
When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you. Personal information does not include information that is collected anonymously or that has been de-identified. We may collect or process the following categories of personal information, depending on how you interact with the Services:
- Contact details including your name, billing address, shipping address, phone number (if provided), and email address.
- Financial information including payment card information, transaction details, form of payment, and payment confirmation. Note: full payment card numbers are processed directly by our payment providers (such as Shopify Payments, Stripe and PayPal) and are not stored by us.
- Account information including your username, password, preferences and settings.
- Transaction information including the items you view, add to your cart or wishlist, purchase, return, exchange or cancel.
- Communications with us including the information you include in messages to us, for example when sending a customer support enquiry.
- Device information including information about your device, browser, network connection, IP address, and other unique identifiers.
- Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.
Sources of personal information
We may collect personal information from the following sources:
- Directly from you when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information.
- Automatically through the Services from your device when you use our products or visit our website, and through the use of cookies and similar technologies.
- From our service providers including Shopify, our payment processors, our shipping partners, and our marketing technology partners, when they collect or process personal information on our behalf.
- From our partners or other third parties including advertising and analytics partners.
Lawful bases for processing
Under UK GDPR, we process your personal information on the following lawful bases:
- Performance of a contract: to provide you with the Services you have ordered, process payments, fulfil orders, arrange shipping, and handle returns or exchanges.
- Legitimate interests: to operate, secure, and improve our business, including fraud prevention, analytics, and customer service. We balance our legitimate interests against your rights and freedoms and will not use them where they would override your interests.
- Consent: for marketing communications and certain types of cookies. You can withdraw consent at any time.
- Legal obligation: where required to comply with applicable law, regulation, or valid legal process.
How we use your personal information
Depending on how you interact with us or which of the Services you use, we may use your personal information for the following purposes:
- Providing the Services. To perform our contract with you, process payments, fulfil orders, remember your preferences, send order and account notifications, process returns and exchanges, enable you to post reviews, and create a customised shopping experience.
- Marketing and advertising. To send you marketing communications by email (only where you have consented), and to show you online advertisements for products on the Services or other websites, based on items you previously viewed or purchased. You can opt out of marketing at any time via the unsubscribe link in any email or by contacting us.
- Security and fraud prevention. To authenticate your account, provide a secure payment and shopping experience, detect and investigate possible fraudulent or illegal activity, and protect our business and customers.
- Customer support. To respond to your enquiries, provide effective customer service, and maintain our relationship with you.
- Legal reasons. To comply with applicable law, respond to valid legal process, investigate or participate in legal proceedings, and enforce our terms or policies.
How we disclose personal information
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:
- With Shopify and other service providers who perform services on our behalf, including IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping. These providers are bound by contractual confidentiality and data protection obligations.
- With our print-on-demand fulfilment partners (including Printify and its print providers) for the purpose of producing and shipping your order. We share only the information necessary to fulfil the order (name, shipping address, order details).
- With business and marketing partners to provide marketing services and online advertising. Our partners use your information in accordance with their own privacy policies. You may opt out of personalised advertising at any time by contacting us.
- When you direct or consent to our disclosure of information to third parties, such as through social media login integrations.
- In connection with a business transaction such as a sale, merger or insolvency, to comply with legal obligations, to enforce our terms, or to protect our rights and the rights of others.
Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services. Information you submit to the Services will be transmitted to and shared with Shopify and third parties that may be located in countries other than where you reside, in order to provide and improve the Services.
To help us protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data from your interactions with our store and with other Shopify merchants. In these circumstances, Shopify may also be a data controller. To learn more about how Shopify uses your personal information, see the Shopify Consumer Privacy Policy.
Cookies and tracking technologies
We and our service providers use cookies and similar technologies to operate the Services, remember your preferences, analyse usage, and deliver relevant advertising. You can manage your cookie preferences through your browser settings or via any cookie banner displayed on our site. Disabling cookies may affect the functionality of the Services.
Third party websites and links
The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies. We are not responsible for the privacy practices or content of third-party sites. Our inclusion of such links does not imply endorsement.
Children's data
The Services are not intended for children. We do not knowingly collect personal information from anyone under the age of 18. Note that some of our brand content, including the picture book "Hank Has A Tool For That," is created for young readers, but it is intended to be purchased by adults on their behalf. If you are the parent or guardian of a child who has provided us with their personal information, please contact us to request that it be deleted.
Security and retention
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse or alteration. However, no system is perfectly secure, and we cannot guarantee absolute security. We recommend you do not send sensitive information through unsecured channels.
We retain your personal information only for as long as necessary for the purposes set out in this Privacy Policy, or for as long as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Order and financial records are typically retained for at least six years to comply with HMRC requirements. Marketing data is retained until you opt out or for a reasonable period of inactivity.
Your rights under UK GDPR
Under UK GDPR, you have the following rights in respect of your personal information:
- Right of access: the right to obtain confirmation that we process your personal information and to receive a copy of it.
- Right to rectification: the right to have inaccurate personal information corrected.
- Right to erasure (the "right to be forgotten"): the right to ask us to delete your personal information in certain circumstances.
- Right to restrict processing: the right to ask us to stop or limit our processing of your personal information.
- Right to data portability: the right to receive a copy of your personal information in a structured, commonly used and machine-readable format, and to transmit it to another controller.
- Right to object: the right to object to our processing of your personal information based on legitimate interests, including direct marketing.
- Right to withdraw consent: where we rely on consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
- Right not to be subject to automated decision-making: including profiling, where such decisions have a legal or similarly significant effect on you.
To exercise any of these rights, please email hello@ihaveatoolforthat.co.uk. We may need to verify your identity before responding. We aim to respond within one month, as required by UK GDPR.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, if you believe we have not handled your personal information in accordance with the law. You can contact the ICO at:
Information Commissioner's Office Wycliffe House, Water Lane Wilmslow, Cheshire SK9 5AF Telephone: 0303 123 1113 Website: ico.org.uk
Rights for customers in the European Economic Area
If you reside in the EEA, you have substantially the same rights as those listed above under the EU GDPR. You may exercise these rights by contacting us at hello@ihaveatoolforthat.co.uk. You also have the right to lodge a complaint with your local data protection authority. A list of EEA supervisory authorities is available at edpb.europa.eu.
Rights for customers in the United States and other regions
If you reside in a US state or other jurisdiction with consumer privacy laws (such as California, Colorado, Connecticut, Utah, or Virginia), you may have rights to access, delete, correct, or opt out of the "sale" or "sharing" of your personal information. To exercise these rights, please email hello@ihaveatoolforthat.co.uk.
If you visit our website with the Global Privacy Control (GPC) signal enabled, we will treat this as a request to opt out of targeted advertising for the device and browser you use. We do not currently recognise other "Do Not Track" signals.
International transfers
We may transfer, store, and process your personal information outside the United Kingdom, including to the European Economic Area, the United States, and other countries where our service providers operate.
When we transfer personal information from the UK or EEA to a country that has not been deemed to provide an adequate level of protection, we rely on recognised safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or other approved transfer mechanisms.
Complaints
If you have any complaints about how we handle your personal information, please contact us first at hello@ihaveatoolforthat.co.uk. We will investigate and respond to your complaint as quickly as possible.
If you are not satisfied with our response, you have the right to lodge a complaint with the ICO (UK customers) or your local data protection authority (EEA and other customers).
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. When we do, we will post the revised policy on this page and update the "Last updated" date. Material changes will be notified to you in accordance with applicable law.
Contact
If you have any questions about this Privacy Policy or our privacy practices, or if you would like to exercise any of your rights, please email us at:
For the purpose of applicable data protection law, the data controller of your personal information is I Have A Tool For That (operated by Shaun Jones, sole trader).