Privacy policy

This policy explains how Mission Outdoors Ltd, trading as Task Outdoor ("Task Outdoor", "we", "us"), collects, uses, shares and protects personal information when you visit taskoutdoor.co.uk, buy from us, contact us, or use our Specialist Procurement Service. It applies wherever you live. It is written to meet UK data protection law (the UK GDPR and the Data Protection Act 2018) and the EU General Data Protection Regulation, and section 12 adds points for customers in Australia, New Zealand and the United States.

1. Who we are

Mission Outdoors Ltd is the controller of your personal information, which means we decide how and why it is used.

• Company number 15438971, registered in England and Wales
• Registered office: 23A The Precinct, London Road, Waterlooville, Hampshire, PO7 7DT, United Kingdom

For any question about your personal information, or to use your rights, email sales@taskoutdoor.co.uk, call +44 (0) 7581 617 813, or write to us at the address above marked "Data protection". We have not appointed a Data Protection Officer, as our activities do not require one.

2. The information we collect

Information you give us

• Contact and delivery details: your name, email address, phone number, and billing and delivery addresses, including BFPO addresses.
• Order details: what you bought, what you paid, how it was delivered, and any returns, exchanges, withdrawals, refunds or warranty claims.
• Payment details: the payment method you used and limited card details, such as the card type and last four digits. Full card numbers go straight to our payment providers. We never see or store them.
• Account details: if you create an account, your email address and order history. You sign in with a one-time code sent to your email, so we do not hold a password for you.
• Messages: what you tell us by email, contact form, live chat, phone or social media, including photos you send us of a faulty item.
• Reviews: your rating, review text, any photos or video you add, and the name you choose to show with it.
• Marketing preferences: whether you have signed up for our emails, and when and how you did so.
• Specialist Procurement Service enquiries: your name, job title, organisation, work contact details, and any purchase orders, tender documents or requirements you send us.
• Age confirmation: All age restricted items will have photo ID checked on delivery.

A BFPO address shows that you, or the person you are sending to, are connected with the Armed Forces. We use it only to deliver your order.

We do not ask for sensitive information, such as details of your health. Please leave it out of messages and reviews.

Information collected automatically

When you use our website, we and the services we use collect technical information: your IP address and the approximate location it indicates, your device and browser type, the pages and products you view, what you add to your basket, and how you reached our site (for example from a search engine, an advert or one of our emails). Some of this is collected with cookies and similar technologies. Anything not needed to run the site is collected only if you agree, as explained in section 5.

When you open or click one of our marketing emails, our email provider records that you did so.

Information from other people

• Payment providers tell us whether a payment succeeded and give us fraud-risk information.
• Marketplaces: if you buy from us through a marketplace such as TikTok Shop, or Temu, it passes us your name, delivery address and order details so we can send your order.
• Delivery companies tell us when a parcel has been delivered, delayed or returned.
• Advertising platforms tell us which of our adverts led to a visit or a sale. This reaches us mostly as combined statistics, not as information about you personally.
• Other people may give us your details, for example when a parent orders expedition kit for delivery to a young person, or a friend sends you a gift.

3. How we use it, and our lawful basis

Data protection law requires a lawful basis for each use of your information. This is what we do, and why.

Where we rely on legitimate interests, we have weighed our interests against yours, and you can object (see section 10). Where we rely on consent, you can withdraw it at any time. Withdrawing does not affect anything we did before.

If you do not give us the details we need for an order, such as a delivery address, we cannot complete it.

Automated checks. Shopify and our payment providers screen orders for fraud automatically, and your card issuer may decline a payment. If Shopify flags an order as high risk, one of our team reviews it before we decide whether to send it  We do not make decisions about you that have legal or similarly significant effects by purely automated means.

4. Marketing emails

We send marketing emails only if you have signed up, for example by ticking the box at checkout or using a sign-up form on our website. They cover new kit, offers and useful guides. Every email has an unsubscribe link, and you can also ask us to stop at any time. You will still receive messages about your orders.

Our email provider, Klaviyo, records whether you open or click our emails. If you have accepted marketing cookies, it can also link your visits to our website with your email address, so that, for example, we can remind you about items left in your basket. We do not send marketing by post or make marketing phone calls.

5. Cookies, pixels and advertising

Our website uses cookies and similar technologies, such as pixels. Some are strictly necessary to run the shop, your basket and checkout, and to keep the site secure, so they are always on. Everything else, meaning analytics and advertising, is used only if you accept it in our cookie banner. You can change your choice at any time with the cookie preferences link at the bottom of every page.

These services can run on our website:

• Shopify: runs the shop, basket and checkout, and measures visits.
• Google (Google Analytics, Google Ads and Google Merchant Center): measures how the site is used and which adverts and product listings lead to sales. Google's tags follow your cookie choice through Google Consent Mode.
• Meta (Facebook and Instagram): measures our adverts and shows them to people likely to be interested.
• TikTok: measures our adverts and shows them to people likely to be interested.
• Klaviyo: runs our email sign-up forms and recognises subscribers who arrive from one of our emails.
• Judge.me: shows product reviews and measures how they are used.
• Shopify Inbox: runs our live chat.
• hCaptcha: checks that our forms are filled in by a person, not a bot.

To measure adverts accurately, we or Shopify may also send these advertising platforms details of what you did on our site, sometimes with your email address or phone number in scrambled (hashed) form so they can match it to an account you hold with them. This happens only if you have accepted marketing cookies.

Google, Meta and TikTok also use this information for their own purposes, under their own privacy policies. You can manage the adverts you see in your Google, Facebook, Instagram and TikTok account settings.

If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of advertising sharing for that browser. Full details of each cookie are in our Cookie Policy.

6. Who we share it with

We share personal information only with organisations that help us run the business, and only what each one needs. We never sell your information for money.

7. Transfers outside the UK

We are based in the UK. Some of our providers store or process information in other countries, including the United States, Canada and countries in the European Economic Area. When information leaves the UK, we make sure it stays protected in one of these ways:

• the UK government recognises the country as providing adequate protection, as it does for the European Economic Area and Canada;
• the recipient in the United States is certified under the UK Extension to the EU-US Data Privacy Framework; or
• we use contract terms approved by the Information Commissioner, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

If you are in the European Union, the European Commission recognises the UK as providing adequate protection, so your information can come to us without extra safeguards. You can ask us for details of the safeguards used for any provider.

8. How long we keep it

After that, we delete the information or make it anonymous.

9. Keeping it secure

Our shop runs on Shopify, which is certified to the highest level of the Payment Card Industry Data Security Standard (PCI DSS Level 1), and our website uses an encrypted (HTTPS) connection. Only people who need your details to do their job can see them, and our staff logins are protected by two-step verification.

No system is completely secure, so please do not send card details or other sensitive information by email or chat. If a breach puts your information at risk, we will report it to the Information Commissioner within 72 hours where the law requires, and tell you directly if the risk to you is high.

10. Your rights

You have the right to:

• access the personal information we hold about you and get a copy;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information;
• ask us to restrict how we use it, for example while a correction is checked;
• object to our use of it where we rely on legitimate interests. You can always object to direct marketing, and we will stop;
• receive information you gave us in a portable, machine-readable format, or have it sent to another organisation;
• withdraw consent at any time where we rely on it;
• ask for a person to review any decision made about you by automated means; and
• complain to a data protection regulator (see section 12).

To use any of these rights, contact us using the details in section 1. It is free. We may ask you to confirm your identity, for example by replying from the email address on your order. We will respond within one month. If a request is complex, or you make several, we may take up to two further months and will tell you why.

Some rights have limits. For example, we must keep order records for tax purposes even if you ask us to delete them, and we will explain when that applies. You can ask someone else to make a request for you, and we will check that you have authorised them.

11. Children and young people

Our website is intended for adults. Many of our customers buy kit for young people, for example for Duke of Edinburgh's Award expeditions or cadets, and we expect a parent or guardian to place those orders. If you are under 18, please ask a parent or guardian to order for you. We do not knowingly collect personal information directly from children under 13, and if we find that we have, we will delete it. Knives and other age-restricted items are sold only to adults.

12. Where you live

United Kingdom

If you are unhappy with how we have handled your information, please contact us first and we will try to put it right. We will acknowledge your complaint within 30 days. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

European Union and European Economic Area

The EU GDPR applies to our sales to customers in the EU. You can contact us or our EU representative (see section 1), and you can complain to the data protection authority in the country where you live or work. The European Data Protection Board lists them at edpb.europa.eu.

Australia

We handle the personal information of Australian customers consistently with the Australian Privacy Principles. You can ask to access or correct your information using the details in section 1. Your information may be disclosed to the overseas recipients described in sections 6 and 7, which are mainly in the UK, the United States, Canada and the EU. If you are not satisfied with our response to a complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

New Zealand

Under the Privacy Act 2020 you can ask for access to, and correction of, your personal information. It is sent overseas as described in section 7. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

United States

Some US state laws give residents rights to access, correct or delete personal information, and to opt out of "sales", "sharing" or "targeted advertising". We do not sell personal information for money, but our use of advertising cookies and pixels may count as a "sale" or "sharing" under those laws. You can opt out on our Your Privacy Choices page, or by using a browser with Global Privacy Control switched on. We will not treat you differently for using your rights. If we decline a request, you can appeal by replying to our decision.

Everywhere else

We apply the same standards to every customer. If your local law gives you further rights, contact us and we will help.

13. Other websites

Our website links to other sites, such as brand websites and social media. They have their own privacy policies, and we are not responsible for how they handle your information.

14. Changes to this policy

We update this policy when our practices or the law change, and change the date at the top when we do. If a change significantly affects how we use information you have already given us, we will tell you by email or with a notice on our website.

15. Contact us

Email sales@taskoutdoor.co.uk or call +44 (0) 7581 617 813, or write to: Data protection, Mission Outdoors Ltd, 23A The Precinct, London Road, Waterlooville, Hampshire, PO7 7DT, United Kingdom.