Last updated: 10 August 2026
Privacy policy
This policy explains what personal data we collect when you shop with us, why we hold it, how long we keep it and what you can ask us to do with it.
1. Who we are
[LEGAL NAME LTD] (“we”, “us”, “our”) trades as [BRAND] and operates [WEBSITE]. We are the data controller for the personal data described here.
- Registered address: [LEGAL ADDRESS]
- Company number: [COMPANY NUMBER]
- Privacy contact: [EMAIL]
- Telephone: [PHONE]
2. What data we collect
- Identity and contact data: your name, billing and delivery address, email address and phone number.
- Order and payment data: the items you ordered, your order history and confirmation that payment succeeded. Card details are handled by our payment provider — we do not store full card numbers.
- Technical data: IP address, device and browser type, and cookie data.
- Communications: the messages you send us by email or through a contact form.
- Marketing preferences: whether you have opted in to our emails.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis under UK GDPR |
|---|---|
| Taking payment, delivering your order, managing your account | Performance of a contract |
| Answering enquiries and handling returns | Contract and legitimate interests |
| Sending marketing emails | Consent, or soft opt-in for existing customers |
| Preventing fraud and keeping the site secure | Legitimate interests |
| Analytics used to improve the shop | Consent, given through the cookie banner |
| Keeping tax and accounting records | Legal obligation |
4. Who we share it with
We share data only with the providers who help us run the shop: our payment processor, our delivery and courier partners, our website and hosting platform, our email tool and our analytics provider. Each of them acts on our instructions.
We may also disclose data where the law requires it, for example a court order or a request from a tax authority. We do not sell your personal data.
5. International transfers
Where a provider stores data outside the UK, we rely on an adequacy decision or on appropriate safeguards such as the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
6. How long we keep it
- Order and transaction records: six years, to meet UK tax and accounting rules.
- Account data: while your account is open, then twelve months after you close it.
- Marketing data: until you unsubscribe.
- Support messages: twenty-four months after the enquiry is closed.
7. Your rights
Under UK GDPR you can ask us to give you a copy of your data, correct it, erase it, restrict or stop our processing of it, or send it to another provider. Where we rely on consent, you can withdraw it at any time.
Write to [EMAIL] and we will reply within one month. We may ask you to confirm your identity first.
8. Complaints
If you are unhappy with how we have handled your data, tell us at [EMAIL] and we will look into it. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
9. Cookies
Essential cookies keep your basket and your currency choice working. Analytics and advertising cookies are only set after you accept them in the cookie banner, and you can change that choice at any time from the same banner.
10. Changes to this policy
We update this page when our practices change, and the date at the top always shows the current version. If a change materially affects you, we will say so on this page and, where we hold your address, by email.