Privacy policy
Last updated: 29 September 2026
This Privacy Policy explains how WBYS Limited, trading as DesertBoots.com ("we", "us", "our"), collects, uses and shares your personal information when you visit www.desertboots.com, buy from us or contact us. We are the data controller for the personal information described in this policy.
Who we are
- Company: WBYS Limited, registered company number 09415947
- Registered office: 50 Woodgate, Leicester, LE3 5GF (please do not send post or returns here)
- Trading address: Unit 3a-3b, 55 Hastings Road, Leicester, LE5 0BT
- ICO registration number: ZA248431
- Privacy requests: datacontroller@wbys.co.uk
- Customer service: cs@desertboots.com or 0116 326 0604
Personal information we collect
- Contact details: your name, email address, phone number, and billing and delivery addresses.
- Order information: the items you view, add to your basket, buy, return or exchange, and your order history.
- Payment information: the payment method you use and confirmation that payment was made. Your full card details are handled by our payment providers and are not stored by us.
- Account information: your login details and preferences, if you create an account.
- Communications: messages you send us by email, phone or through our website chat, including your name and email address if you give them.
- Reviews: your name, email address, review and rating, and the product and order it relates to, including reviews you leave on Trustpilot or Google after we invite you to.
- Device and usage information: your IP address, browser and device type, the pages you visit and how you use our website, collected through cookies and similar technologies.
- Marketing preferences: whether you have signed up to, or opted out of, our marketing emails.
How we use your information and why
We only use your personal information where the law allows. The reasons and legal bases are:
- To take and deliver your order, process payment, and handle returns, exchanges and refunds. This is necessary to perform our contract with you.
- To keep accounting and tax records and comply with the law. This is a legal obligation.
- To answer your questions and provide customer support. This is in our legitimate interests, and may also be necessary to perform our contract with you.
- To prevent fraud and keep our website secure. This is in our legitimate interests.
- To ask you for a review after your purchase, and to collect and publish customer reviews on our website, Trustpilot and Google. This is in our legitimate interests in understanding customer experience and building trust in our products. You can opt out of review requests at any time using the link in the request.
- To understand how our website is used and improve it. This is done with your consent where it relies on non-essential cookies.
- To send you marketing emails about our products and offers. We do this with your consent, or, where you have bought from us before, on the basis of our legitimate interests in marketing similar products to existing customers. You can opt out at any time.
- To measure and improve our advertising and show you relevant adverts on other websites. This is done with your consent.
Who we share your information with
We do not sell your personal information. We share it only as needed for the purposes above, and only with organisations that need it, in these categories:
- Shopify, which hosts our website and checkout and processes orders on our behalf.
- Payment providers: Shopify Payments, Shop Pay, Apple Pay, Google Pay, PayPal, Clearpay and Klarna, depending on the method you choose. These providers handle your payment details under their own privacy policies.
- Delivery companies, including Royal Mail and DPD, who need your name, address and contact details to deliver your order.
- Returns and exchanges provider, which supports our online returns service.
- Review providers: a review collection service that sends review requests after purchase and passes your review to Trustpilot and Google, and those platforms themselves. Reviews you post there are public and are handled under their privacy policies.
- Website chat provider, which runs the chat assistant on our website and receives the messages, name and email address you enter.
- Email marketing and communications platforms, which we use to send marketing and order-related emails.
- Google, which provides website analytics, advertising measurement and tag management. For Google Ads conversion measurement we may share details from your order, such as your email address, phone number or address, in an encrypted (hashed) form.
- Meta (Facebook and Instagram), which provides advertising measurement. We share information about your activity on our website and about your orders, both from your browser and from our server, to measure and improve our advertising.
- Analytics and product feed providers, which help us understand website performance and list our products in shopping services.
- IT, order management and warehouse service providers who help us run our business and fulfil orders.
- Professional advisers, regulators, law enforcement and courts, where we are required by law or need to protect our legal rights.
- A buyer or successor, if our business or its assets are sold or reorganised.
Where we can, we share information in aggregated form, and where we send identifiers for advertising measurement they are encrypted (hashed) before they are sent. We only share what each provider needs to do its job, and providers acting on our behalf may only use your information on our instructions.
Cookies and similar technologies
We use cookies and similar technologies. Some are essential to make the website and checkout work. Others are optional and are used for analytics and advertising. We ask for your consent before using optional cookies, through the cookie banner when you first visit. You can change your choices at any time through the cookie preferences on our website or in your browser settings. Blocking essential cookies may stop parts of the website from working.
You can also opt out of the sharing of your information for targeted advertising here. If you visit our website with the Global Privacy Control signal enabled, we treat it as a request to opt out.
Relationship with Shopify
Our website is hosted by Shopify, which collects and processes personal information about your use of the website in order to provide and improve it. For some Shopify features, Shopify is responsible for the processing of your personal information. You can find out more in the Shopify Consumer Privacy Policy and exercise rights over Shopify's use of your data through the Shopify Privacy Portal.
International transfers
Some of the organisations listed above are based outside the United Kingdom, or process data outside the UK. Where your personal information is transferred outside the UK, we make sure it is protected in line with UK law, for example through adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
How long we keep your information
We keep order, invoice and payment records for as long as the law requires for tax and accounting purposes, which is currently six years. We keep other personal information only for as long as we need it for the purposes above, for example while you have an account or while we deal with a query, return or complaint. We keep your details for marketing until you unsubscribe or ask us to stop.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is inaccurate or incomplete;
- ask us to delete your information, in certain circumstances;
- ask us to restrict how we use your information, in certain circumstances;
- object to us using your information where we rely on legitimate interests, and object to direct marketing at any time;
- ask for your information in a portable format, in certain circumstances; and
- withdraw your consent at any time where we rely on it, without affecting anything done before you withdrew it.
To use any of these rights, email datacontroller@wbys.co.uk. We may need to check your identity first, and we will respond within one month. You can unsubscribe from marketing emails at any time using the link in any email we send. We will still send you emails about your orders.
Complaints
If you are unhappy with how we have handled your personal information, please contact us first at datacontroller@wbys.co.uk so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Children
Our website is not aimed at children, and orders must be placed by someone aged 18 or over. If you believe a child has given us their personal information, please contact us at datacontroller@wbys.co.uk and we will delete it.
Security
We take reasonable steps to protect your personal information, and our website uses encrypted connections. No system is completely secure, so please do not send sensitive information to us by unsecured means.
Links to other websites
Our website may link to other websites. We are not responsible for their content or privacy practices, so please read their privacy policies before giving them any personal information.
Changes to this policy
We may update this policy from time to time. We will post the updated version on this page and change the "Last updated" date above.
Contact us
WBYS Limited, trading as DesertBoots.com
Trading address: Unit 3a-3b, 55 Hastings Road, Leicester, LE5 0BT
Registered office: 50 Woodgate, Leicester, LE3 5GF
Privacy requests: datacontroller@wbys.co.uk
Customer service: cs@desertboots.com or 0116 326 0604