Your information
Privacy notice
This notice explains how Pay Weekly Store Ltd, trading as SOFGO, uses personal information under the UK GDPR and Data Protection Act 2018.
Last updated 25 September 2026
Who controls your information
Pay Weekly Store Ltd is the controller. Registered office: 248 Lockwood Road, Huddersfield, England, HD1 3TG. Company number: 13009183.
Privacy questions and rights requests can be sent to support@sofgo.co.uk or through the on-site chat.
What we collect, why, and our lawful basis
Orders and delivery
Data: Name, email, mobile number, delivery address and notes, ordered items, chosen options, payment plan, payment status and order status.
Purpose and lawful basis: To fulfil the contract, deliver goods, take payment, provide updates, handle returns and keep accounting records.
Payments
Data: Payment status, any existing plan schedule and transaction references. Stripe receives card details; we do not see or store full card numbers.
Purpose and lawful basis: To fulfil the contract, prevent fraud, send order emails and service existing payment arrangements.
Saved checkouts
Data: Basket, name, email, mobile number, address, delivery notes, chosen payment option, visitor ID and checkout progress, saved automatically as you type.
Purpose and lawful basis: Our legitimate interest in helping shoppers recover an unfinished checkout and sending no more than two basket reminder emails.
AI assistant and customer-care handover
Data: Messages, conversation history, page URL, session ID, suggested products, IP address and any name, email, mobile number or order reference supplied in a handover form.
Purpose and lawful basis: To answer questions, operate abuse limits, preserve context and respond to enquiries. Messages are processed by an AI model provider to prepare answers.
Contact and enquiries
Data: Name, email, optional mobile number, topic, order reference, message and IP address.
Purpose and lawful basis: To answer your request, provide customer service and prevent misuse.
Accounts and sign-in
Data: Account identity, email, authentication records and account-linked order information.
Purpose and lawful basis: To provide the account service, keep it secure and perform our contract with you.
Site visits, analytics and advertising
Data: Our visitor and session IDs, page URL and title, referrer, campaign, device type, country, viewed product and price; IP addresses are also used for security and rate limiting. Google Analytics and Google Ads tags collect device and browsing information.
Purpose and lawful basis: Our legitimate interests in understanding and securing the site, and consent where required for analytics or advertising technologies.
Live-chat monitoring
Data: Tawk.to identifiers, page activity and chat-related technical data.
Purpose and lawful basis: To provide and monitor the chat service, subject to consent where required.
We may also use records where necessary to comply with law, establish or defend legal claims, or protect customers, our business and the public.
Who receives personal information
We share only what is needed with service providers acting for us: Stripe for card payments and fraud prevention; our database host for site, account and order records; Cloudflare for hosting, delivery and security; our email delivery provider; an AI model provider for assistant responses; Tawk.to for chat monitoring; Google Analytics and Google Ads for measurement and advertising; and Google Fonts for typefaces.
Delivery teams and professional advisers may receive relevant details where needed. We may disclose information if required by law or as part of a business sale or reorganisation.
How long we keep information
- • Order, payment and accounting records: normally 6 years after the relevant financial year.
- • Open abandoned checkouts: normally up to 30 days; recovery and suppression records may be kept longer to honour messaging limits.
- • Enquiries, chat handovers and complaint records: normally up to 2 years after the matter closes, or longer where linked to an order or legal claim.
- • AI conversation records: normally up to 12 months for customer service, quality and abuse prevention.
- • Site-visit analytics: normally up to 14 months. Security and rate-limit records are kept only as long as reasonably needed.
- • Account records: while the account remains open, then normally up to 2 years unless linked records must be kept longer.
These are default periods. We may keep a record longer where law, a dispute, fraud prevention or an active customer relationship requires it.
Creator applicants
This applies if you apply to, or join, the SOFGO creator programme. The controller is Pay Weekly Store Ltd trading as SOFGO.
- • What we collect: your name, email address, social media handles, follower count, location and content niche, plus your IP address for spam prevention.
- • Why: to assess your application and, if approved, to run the programme (your personal code, commission records and payments).
- • How long: rejected applications are deleted after 12 months. Approved creators' details are kept while you are in the programme, and afterwards for as long as legally needed for commission and accounting records.
- • Access or deletion: email support@sofgo.co.uk.
Email offers
This applies if you sign up for our buying guides and offers. The controller is Pay Weekly Store Ltd trading as SOFGO.
- • What we collect: your email address, what you told us you're shopping for (if you chose), the page you signed up on, and when you gave consent.
- • Why: to send you buying guides, new arrivals and offers.
- • Lawful basis: your consent.
- • How to unsubscribe: use the unsubscribe link in any of our emails, visit /unsubscribe from that link, or email support@sofgo.co.uk.
- • How long we keep it: until you unsubscribe. After that we keep only a record that you unsubscribed, so we don't email you again.
- • We don't sell or share the list.
International transfers
Some providers may process information outside the UK. Where that happens, we use a lawful safeguard such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, and apply appropriate security measures.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, objection or data portability, and may withdraw consent at any time where consent is the basis. You may also object to direct marketing at any time.
Contact support@sofgo.co.uk. We may need to verify your identity. You can complain to the Information Commissioner's Office at ico.org.uk, but we would welcome the chance to resolve the issue first.