Privacy policy

How The Old Cobble Co collects, uses and protects your personal data under UK GDPR, including cookies, your rights and how to contact us.

Last updated: [publish date]

The Old Cobble Co ("we", "us", "our") respects your privacy. This policy explains what personal data we collect when you visit theoldcobble.co.uk, shop with us online or in store, or contact us, and how we use and protect it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

The Old Cobble Co is the data controller for your personal data. Address: 117 West Way, Bournemouth BH9 3DU, United Kingdom Email: info@theoldcobble.co.uk · Phone: +44 1202 528714

What we collect

•       Identity and contact details – name, billing and delivery address, email address and phone number.

•       Order details – products purchased, order value, delivery instructions and returns history.

•       Payment details – processed securely by Shopify Payments and its partners; we do not see or store your full card number.

•       Communications – messages you send us by email, phone or contact form.

•       Technical data – IP address, browser and device type, pages viewed and how you arrived at our site, collected through cookies and similar technologies.

•       Marketing preferences – whether you have opted in to receive our emails.

How and why we use your data

Purpose

Lawful basis

Processing and delivering orders, handling returns and refunds

Performance of a contract

Responding to enquiries and providing customer support

Legitimate interests / contract

Preventing fraud and keeping our site secure

Legitimate interests

Keeping accounting and tax records

Legal obligation

Sending marketing emails

Consent (you can unsubscribe at any time)

Improving our website and product range through analytics

Consent (non-essential cookies) / legitimate interests

Who we share it with

We share your data only where needed to run our business:

•       Shopify – our e-commerce platform, which hosts our store and processes payments.

•       Couriers – Royal Mail, DPD and FedEx, who receive your name, address and contact details to deliver your order.

•       Payment providers – to authorise and process payments and refunds.

•       Professional advisers and authorities – where required by law.

We never sell your personal data. Some providers, such as Shopify, may process data outside the UK; where they do, appropriate safeguards (such as UK adequacy regulations or the International Data Transfer Agreement) are in place.

Cookies

We use essential cookies to make our site and checkout work, and, with your consent, analytics and marketing cookies to understand how the site is used. You can manage your choices through our cookie banner or your browser settings. Blocking essential cookies may stop parts of the site, such as the basket, from working.

How long we keep it

We keep order and transaction records for 6 years to meet UK tax and accounting requirements. Customer service messages are kept for up to 2 years. Marketing data is kept until you unsubscribe or ask us to delete it.

Your rights

Under UK GDPR you have the right to:

•       access the personal data we hold about you;

•       ask us to correct inaccurate data;

•       ask us to delete your data, where we have no legal reason to keep it;

•       restrict or object to how we use it;

•       receive your data in a portable format;

•       withdraw consent at any time, without affecting earlier processing.

To use any of these rights, email info@theoldcobble.co.uk. We will respond within one month.

Security

We use trusted platforms, encrypted connections and restricted access to protect your data. No online service is completely secure, but we take reasonable steps to prevent loss, misuse or unauthorised access.

Complaints

If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The latest version will always be posted on this page with the date it was last updated.