Privacy policy

Last updated: 5 August 2026

The Official Castle Combe Collection ("we", "us", "our") is the data controller for personal information collected through our online store. We are committed to protecting your personal data and handling it in line with the UK GDPR and the Data Protection Act 2018. This policy explains what we collect, why, and your rights.

Who we are

The Official Castle Combe Collection. For any privacy question or to exercise your rights, contact us at castlecombeshop@gmail.com.

Information we collect

Information you give us: name, billing and delivery address, email address, phone number (if provided), and order details when you place an order or contact us. Payment details are collected and processed directly by our payment providers; we do not store your full card details. We also collect device and browser information, IP address, and how you use the site, via cookies and similar technologies.

How we use your information and our lawful bases

To process and fulfil your orders, take payment and arrange delivery (performance of a contract). To communicate with you about your order and respond to enquiries (contract and legitimate interests). To send marketing emails where you have opted in (consent — you can withdraw at any time via the unsubscribe link). To prevent fraud, ensure security and keep proper business records (legitimate interests and legal obligation). To improve our website and services through analytics (consent via cookies).

Who we share it with

We share personal data only as needed to run the shop, including with our e-commerce platform (Shopify), our print and fulfilment partner (Printful), payment processors, delivery couriers, and the email and marketing tools we use. These providers process data on our behalf under appropriate agreements. Some providers may process data outside the UK; where they do, we rely on appropriate safeguards such as UK-approved standard contractual clauses or adequacy decisions. We do not sell your personal data. We may disclose information if required by law.

How long we keep it

We keep order and transaction records for as long as necessary to fulfil the order and to meet our legal and tax obligations (generally six years for financial records). Marketing data is kept until you unsubscribe or ask us to delete it.

Your rights

Under UK data protection law you have the right to access your data, have inaccurate data corrected, have your data erased, restrict or object to processing, data portability, and to withdraw consent at any time. To exercise any of these, email castlecombeshop@gmail.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we would appreciate the chance to help first.

Cookies

We use cookies and similar technologies as described in our Cookie Policy.

Changes

We may update this policy from time to time; the "last updated" date shows the latest version.