Earbuds & Headphones
Smartwatches
Trackers & Finders
Smart HomePrivacy Policy
Information We Collect
We collect personal information that you give us directly, information collected automatically when you use our website, and limited information from our service providers. What we collect depends on how you interact with Wiremason.com.
Information you provide directly
Contact details — name, billing and shipping address, phone number, email address
Account information — login details, preferences and settings (if you create an account)
Order & transaction details — items purchased, returned or exchanged; order history
Communications — the content of emails and messages you send us, including warranty claims and photos of faulty products
Marketing preferences — your choices about email marketing, advertising and cookies
Information collected automatically
Device & browser data — IP address, browser type, operating system, screen resolution, device identifiers
Usage information — pages viewed, items added to cart, traffic source, time spent on pages, click patterns
Location (approximate) — derived from your IP address, for shipping availability and tax purposes
Cookies & tracking pixels — see Section 03 for full disclosure
Payment information — we never see your full card details
When you pay by card, Apple Pay, Google Pay or another method offered at checkout, the payment is processed by Shopify Payments or the relevant payment provider (PCI-DSS Level 1 certified). Wiremason receives confirmation that payment succeeded and a token reference — we never store or have access to your full card number, security code or expiry date.
Data from your devices and their apps
Many of our products — smartwatches, fitness trackers, Bluetooth trackers, cameras and smart glasses — work with companion apps or services such as Apple Find My or Google Find Hub. Wiremason does not receive the data those devices and apps collect, such as health readings, location history, photos, video or recordings. That data is processed by the app or service provider under their own privacy policy, which we recommend you read before use.
How We Use Your Information & Lawful Basis
Under Article 6 of the UK GDPR, every use of your personal data must rest on a lawful basis. The table below sets out each purpose and the basis we rely on.
Cookies & Tracking Pixels
Wiremason.com uses cookies and tracking pixels to run the site, measure performance and advertise. A cookie consent banner appears on your first visit, giving you control over which categories you accept. Cookie consent in the UK is governed by the Privacy and Electronic Communications Regulations 2003 (PECR). You can change your preferences at any time via the cookie settings link in the footer.
Strictly necessary cookies (always on)
Required for the cart, checkout, session management and payment processing. Managed by Shopify. Cannot be disabled. Basis: strictly necessary under PECR; contract and legitimate interests under UK GDPR.
Non-essential (consent required)
Analytics and advertising cookies (including the pixels disclosed below) only fire after you accept them in the cookie banner. Basis: consent under PECR and UK GDPR Art. 6(1)(a).
Tracking pixels we use
Advertising pixel
Meta Pixel
Operated by Meta Platforms, Inc., 1 Meta Way, Menlo Park, California 94025, USA, and its affiliates. Used for Facebook and Instagram advertising.
What it tracks
Page views, products viewed, items added to cart, purchases (with order value), browser data, IP address, and a hashed email address where you provide one at checkout.
Why we use it
To measure the performance of Facebook and Instagram ads, build audiences of past visitors for retargeting, and reach people similar to our customers.
Data destination
Meta servers globally, including the United States. Transfers from the UK rely on the UK Extension to the EU-US Data Privacy Framework (the “UK-US data bridge”), or the ICO's International Data Transfer Addendum where applicable.
Joint controller
For the collection and transmission of pixel data, Wiremason and Meta may act as joint controllers. Meta's controller addendum applies.
How to opt out
Decline advertising cookies in our cookie banner, or visit Meta Ad Preferences.
Analytics & advertising
Google (GA4 + Ads)
Operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. Used for site analytics (Google Analytics 4), Google Ads conversion tracking and Google Shopping.
What it tracks
Page views, traffic source, browsing path, conversion events, IP address (not stored in GA4), browser and device data, time on site and click patterns.
Why we use it
To understand how visitors find and use Wiremason.com, measure Google Ads and Shopping campaign performance, and build remarketing lists for showing relevant ads on Google Search, Shopping, Display and YouTube.
Data destination
Google servers globally, including the United States. Transfers from the UK rely on the UK-US data bridge, or the ICO's International Data Transfer Addendum where applicable.
Retention
GA4 data is retained for 14 months; you can request earlier deletion using the contact details below.
How to opt out
Decline analytics and advertising cookies in our cookie banner. You can also visit Google Ad Settings or install the Google Analytics opt-out add-on.
Your control over tracking
You can decline all advertising and analytics cookies in our cookie banner on your first visit, or change your preferences at any time via the cookie settings link in our footer. Declining cookies does not affect your ability to browse and buy from Wiremason.com.
Who We Share Your Information With
We share your personal information with the following categories of recipients. Each acts either as a processor on our behalf or, in some cases, as an independent or joint controller. We never sell your personal information.
Service providers (processors acting on our behalf)
Shopify Inc. (Ottawa, Canada) and Shopify International Ltd. (Dublin, Ireland) — the platform that hosts Wiremason.com, manages checkout and processes payments via Shopify Payments.
Fulfilment partner — our fulfilment partner, which picks, packs and dispatches your orders and handles returns.
Delivery carriers — the international and UK carriers shown in your tracking information. Carriers receive only your name, delivery address, phone number and email for delivery updates.
Customer service tools — email and messaging providers we use to answer your enquiries.
Advertising & analytics partners
Meta Platforms, Inc. — for Facebook and Instagram advertising via the Meta Pixel (Section 03).
Google LLC — for Google Analytics 4, Google Ads and Google Shopping (Section 03).
These disclosures only occur if you have accepted the relevant cookies in our cookie banner.
Corporate group & legal
BULKECOM LLC-FZ (Dubai, UAE) — our parent company and brand owner, on a need-to-know basis for brand operations and reporting.
Tax authorities, regulators & law enforcement — when required by UK or Hong Kong law, including HM Revenue & Customs, product safety authorities and lawful requests.
Professional advisers — accountants, lawyers and auditors bound by professional confidentiality.
We don't sell your data
Wiremason does not sell your personal information to data brokers, list rental companies or any third party. Where data is shared with advertising partners (Meta, Google), it is only for the purposes disclosed in Section 03 and only with your cookie consent.
International Data Transfers
Because BULKECOM LIMITED is incorporated in Hong Kong, your personal information is transferred outside the United Kingdom when you place an order, contact us or use our site. We use transfer mechanisms recognised under UK data protection law to ensure your data is protected to an equivalent standard.
Transfer mechanisms we rely on
International Data Transfer Agreement (IDTA) or UK Addendum — the ICO-approved contractual safeguards, used for transfers from the UK to Hong Kong (BULKECOM LIMITED) and to other countries without UK adequacy status.
UK Extension to the EU-US Data Privacy Framework (“UK-US data bridge”) — for transfers to certified US organisations, including Meta and Google.
UK adequacy regulations — for transfers to countries the UK recognises as providing adequate protection, including the European Economic Area (e.g. Shopify International Ltd. in Ireland) and Canada (Shopify Inc.).
Hong Kong's data protection framework
Hong Kong does not currently have UK adequacy status, but operates its own data protection regime under the Personal Data (Privacy) Ordinance (PDPO), supervised by the Privacy Commissioner for Personal Data (PCPD). Our contractual safeguards bind us to standards equivalent to UK GDPR for your data.
Request a copy of our safeguards
You have the right to request a copy of the safeguards we use to transfer your data outside the UK. Email info@wiremason.com with the subject “Transfer Safeguards Request” and we will provide the relevant documentation within one month.
Your Rights & Choices
Under the UK GDPR and the Data Protection Act 2018, you have the following rights over your personal information. We will respond to any verified request within one month, as required by Article 12 — extendable by up to two further months for complex requests, in which case we will tell you why.
Your UK GDPR rights
Right of access (Art. 15) — request a copy of the personal information we hold about you (a “subject access request”).
Right to rectification (Art. 16) — ask us to correct inaccurate or incomplete information.
Right to erasure (Art. 17) — ask us to delete your data, subject to legal retention obligations.
Right to restriction (Art. 18) — ask us to limit how we use your information.
Right to data portability (Art. 20) — receive your data in a structured, machine-readable format and ask for it to be sent to another organisation.
Right to object (Art. 21) — object to processing based on legitimate interests, and to direct marketing at any time.
Right to withdraw consent (Art. 7) — where processing is based on consent, withdraw it at any time without affecting earlier lawful processing.
Rights relating to automated decisions (Art. 22) — we do not make significant decisions about you by automated means alone; if we ever did, you would have the right to human review.
How to exercise your rights
Email info@wiremason.com with the subject line “Privacy Request — [Right]” (for example “Privacy Request — Access” or “Privacy Request — Erasure”). We will respond within one month.
To protect your data, we may need to verify your identity before acting on a request. Exercising your rights is free of charge, except where a request is manifestly unfounded or excessive.
Right to complain to the ICO
If you believe we have not handled your personal information lawfully, you have the right to complain to the UK data protection regulator. We would appreciate the chance to resolve your concern first.
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Web: ico.org.uk
How Long We Keep Your Information
We keep your personal information only as long as necessary for the purposes it was collected for, and to meet our legal obligations. Specific retention periods are listed below.
Retention periods
Order & transaction data — 7 years from the date of order, to meet UK VAT record-keeping requirements and Hong Kong Inland Revenue Ordinance obligations.
Account data — for as long as your account remains active, plus a reasonable period after closure for legal and dispute-resolution purposes.
Marketing consent & preferences — until you withdraw consent or unsubscribe, plus a record of the withdrawal for compliance evidence.
Customer service & warranty correspondence — for the length of the warranty period plus 1 year, unless needed longer for a dispute.
Google Analytics 4 data — 14 months.
Cookie consent records — 12 months from your choice, after which the banner reappears.
Fraud prevention logs — up to 5 years for security and dispute purposes.
Security of Your Information
We use appropriate technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure or destruction, as required by Article 32 of the UK GDPR.
Security measures in place
TLS encryption — all traffic to and from Wiremason.com is encrypted in transit (TLS 1.2 or higher).
PCI-DSS Level 1 — payments are handled by Shopify Payments at the highest level of payment security certification.
Access controls — access to personal information is restricted to authorised personnel on a need-to-know basis, with strong authentication.
No card storage — Wiremason never stores full card numbers, security codes or expiry dates. All card data is tokenised by the payment provider.
Regular review — our security practices are reviewed periodically and updated as threats and requirements change.
No system is perfect
While we take security seriously, no internet transmission or storage system is 100% secure. If a personal data breach occurs that must be reported, we will notify the ICO within 72 hours of becoming aware of it, and we will inform you without undue delay where the breach is likely to result in a high risk to your rights and freedoms, as required by Articles 33 and 34 of the UK GDPR.
Children's Privacy
Wiremason.com is not directed at children, and purchases must be made by adults aged 18 or over. We do not knowingly collect personal information from anyone under 13 years of age, the age of consent for online services under the UK GDPR. Some products, such as kids' smartwatches, are designed for children to use — they must be bought and set up by a parent or guardian, and any data they collect is handled by the relevant app provider, not by Wiremason.
If we have collected a child's data
If you are a parent or guardian and believe we have collected personal information from a child without your consent, please contact us at info@wiremason.com. We will promptly delete the information and any associated account.
Changes to This Policy & Contact
We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. The revised version will be posted on this page with an updated “Last updated” date. For material changes, we will notify you by email (if you have given us your email address) or by a prominent notice on Wiremason.com before the changes take effect.
This Privacy Policy may change from time to time; the version published on this page is the one in force. For individuals in the United Kingdom, the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 apply in addition to this policy and prevail wherever they offer greater protection. Effective 22 September 2026. Last updated 22 September 2026.