Privacy policy

Introduction

This Privacy Policy explains how shopgossamerx.shop collects, uses, stores and shares personal information when you visit our website, purchase products, contact us or otherwise interact with our services.

We are committed to handling personal information responsibly and in accordance with applicable United Kingdom data protection and privacy legislation, including the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations where applicable, and relevant amendments introduced by the Data (Use and Access) Act 2025.

For privacy enquiries or data-protection complaints, contact:

Email: info@shopgossamerx.shop

1. Personal Information We May Collect

Depending on how you use our website, we may collect information including:

Contact Information

This may include:

  • Name;
  • Email address;
  • Telephone number;
  • Billing information; and
  • Delivery information.

Order Information

This may include:

  • Products ordered;
  • Order number;
  • Transaction date;
  • Purchase value;
  • Returns;
  • Refunds;
  • Delivery status; and
  • Customer-service history.

Payment Information

Payments may be handled by Shopify-supported payment providers and other payment-processing services.

We may receive transaction-related information necessary to confirm and administer a purchase.

We do not ask customers to send complete payment-card numbers or security codes to us through ordinary email.

Technical and Device Information

When you use our website, information may automatically be collected such as:

  • IP address;
  • Browser type;
  • Device type;
  • Operating system;
  • Approximate location derived from technical information;
  • Referring website;
  • Pages viewed;
  • Date and time of visits; and
  • Website interaction data.

Communications

If you contact us, we may retain information contained in your message and our response.

Marketing Information

Where applicable, we may maintain information about:

  • Marketing preferences;
  • Newsletter subscriptions;
  • Consent records; and
  • Engagement with marketing communications.

2. How We Collect Information

Personal information may be collected:

  • Directly from you;
  • Through checkout;
  • Through customer accounts;
  • Through customer-support communications;
  • Through cookies and similar technologies;
  • Automatically when you use our website;
  • From payment, fulfilment, delivery and fraud-prevention providers; or
  • From other service providers where permitted by law.

3. Why We Use Personal Information

We may process personal information to:

  • Provide our website and services;
  • Process and fulfil orders;
  • Collect and confirm payments;
  • Arrange delivery;
  • Process cancellations, returns and refunds;
  • Respond to customer enquiries;
  • Maintain customer accounts;
  • Prevent fraud and unauthorised transactions;
  • Protect website and account security;
  • Maintain business and transaction records;
  • Comply with legal and regulatory obligations;
  • Establish, exercise or defend legal claims;
  • Improve our website and customer experience;
  • Analyse website performance;
  • Manage marketing communications; and
  • Perform other purposes compatible with the reason the information was collected where permitted by law.

4. Lawful Bases

Depending on the processing activity, we may rely on one or more lawful bases permitted under applicable data-protection legislation.

These may include:

Contract

Processing may be necessary to take steps at your request before entering into a contract or to perform a contract with you.

For example, we need customer and delivery information to process and deliver an order.

Legal Obligation

We may process information where necessary to comply with legal requirements, including accounting, tax, consumer protection, fraud-prevention or regulatory obligations.

Legitimate Interests

Where permitted, we may process information where necessary for legitimate business interests, provided those interests are not overridden by your rights and interests.

Examples may include security, fraud prevention, service improvement and management of business operations.

Consent

Where consent is required, we may process information on the basis of your consent.

You may withdraw consent at any time where processing depends on consent, without affecting the lawfulness of processing carried out before withdrawal.

5. Shopify

Our online store is hosted using Shopify's ecommerce services.

Shopify may process information relating to visitors and customers in connection with providing its technology, commerce, security, payment-related and related services.

Shopify's processing may be subject to its own applicable privacy terms and notices.

6. Service Providers

We may share relevant information with service providers necessary to operate our business, such as:

  • Ecommerce-platform providers;
  • Payment processors;
  • Fraud-prevention providers;
  • Warehousing and fulfilment providers;
  • Shipping and courier companies;
  • Customer-service systems;
  • Website-hosting and infrastructure providers;
  • Analytics providers;
  • Marketing providers where permitted;
  • Professional advisers; and
  • IT and security providers.

We aim to limit disclosures to information reasonably necessary for the relevant service.

7. Legal and Regulatory Disclosures

We may disclose personal information where reasonably necessary to:

  • Comply with a legal obligation;
  • Respond to a lawful request from a court or regulator;
  • Enforce our contractual rights;
  • Investigate fraud or security incidents;
  • Protect customers, our business or third parties; or
  • Establish, exercise or defend legal claims.

8. Business Transactions

If all or part of our business or assets are reorganised, transferred, merged or sold, relevant personal information may form part of that transaction where permitted by law.

Appropriate privacy protections will continue to apply.

9. International Data Transfers

Some technology, payment, logistics or other service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we will use measures required by applicable UK data-protection legislation where those requirements apply.

Depending on the destination and circumstances, these may include recognised adequacy arrangements, approved contractual protections or other lawful transfer mechanisms.

10. Cookies and Similar Technologies

Our website may use cookies, pixels, local storage and similar technologies.

These technologies may be used for purposes including:

  • Operating the website;
  • Remembering preferences;
  • Maintaining sessions;
  • Shopping-cart functionality;
  • Security;
  • Fraud prevention;
  • Analytics;
  • Measuring website performance; and
  • Advertising or marketing where permitted.

Where applicable law requires consent for non-essential technologies, we will seek the appropriate choice or consent before using those technologies.

Necessary technologies may be used where permitted without consent.

11. Marketing

Where permitted by law, we may send customers information about products, services or promotions.

Customers may unsubscribe from marketing emails by:

Unsubscribing from marketing does not prevent us from sending necessary transactional communications relating to orders, payments, deliveries, account security, returns or customer service.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate legal, accounting, operational, fraud-prevention and dispute-resolution requirements.

Retention periods may vary according to:

  • The type of information;
  • The purpose for which it was collected;
  • The status of the customer relationship;
  • Applicable statutory requirements;
  • Limitation periods;
  • Security considerations; and
  • The need to establish, exercise or defend legal claims.

When information is no longer required, we will take reasonable steps to delete, anonymise or otherwise dispose of it appropriately.

13. Security

We take reasonable administrative, organisational and technical measures intended to protect personal information against:

  • Unauthorised access;
  • Unlawful disclosure;
  • Accidental loss;
  • Misuse;
  • Destruction; and
  • Alteration.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

Customers should protect account passwords and should not share sensitive login credentials.

14. Your Data-Protection Rights

Depending on the circumstances and applicable law, you may have rights including:

  • The right to be informed;
  • The right to request access to personal information;
  • The right to request correction of inaccurate information;
  • The right to request erasure in applicable circumstances;
  • The right to request restriction of processing;
  • The right to object to certain processing;
  • The right to data portability where applicable;
  • Rights relating to certain automated decisions; and
  • The right to withdraw consent where processing is based on consent.

These rights are not absolute and may be subject to legal conditions or exceptions.

The ICO identifies access, rectification, erasure, restriction, objection and portability among the rights that privacy notices should explain.

15. Exercising Your Rights

To make a privacy request, contact:

info@shopgossamerx.shop

Please describe the request clearly.

We may request reasonable information to verify identity before providing personal information or acting on a request.

We will handle valid requests in accordance with applicable legal requirements.

16. Data-Protection Complaints

If you believe that we have handled your personal information improperly, contact us at:

info@shopgossamerx.shop

We will review the complaint and respond in accordance with applicable data-protection requirements.

The Data (Use and Access) Act 2025 introduced specific requirements for organisations to operate a data-protection complaints process, including acknowledging complaints and responding without undue delay.

You may also have the right to complain to the United Kingdom Information Commissioner's Office.

17. Children's Privacy

Our general online retail services are not intentionally designed to collect unnecessary personal information from children.

Where our services are likely to be accessed by children, we will take account of applicable legal requirements concerning children's personal information.

18. Third-Party Websites

Our website may contain links to external websites.

We are not responsible for the privacy practices of independent third-party websites.

Customers should review the privacy information provided by those third parties.

19. Changes to This Privacy Policy

We may update this Privacy Policy where necessary to reflect:

  • Legal changes;
  • Regulatory guidance;
  • Changes to our services;
  • Changes to technology;
  • Changes to service providers; or
  • Changes to our data-processing practices.

The latest version will be published on shopgossamerx.shop.

20. Contact

For privacy questions, rights requests or complaints:

shopgossamerx.shop
Email: info@shopgossamerx.shop