Who we are
The data controller is [The Strandology Co legal entity name], [company number], registered at [registered address], United Kingdom. ICO registration number: [ICO reference]. Contact: customerservice@strandology.com.
What we collect
- Identity and contact: name, email, phone, delivery address.
- Order data: items purchased, order history, returns and correspondence.
- Account data: login credentials (passwords are stored hashed by our authentication provider), favourites and saved basket.
- Technical data: strictly necessary device storage for your basket, sign-in session and consent choice.
- Payment data: when online payment is enabled, card details will be handled directly by our payment provider; we will not see or store full card numbers.
Why we use it, and our lawful basis
- To process and deliver your order and handle returns — performance of a contract.
- To keep accounting and tax records — legal obligation.
- To respond to enquiries and prevent fraud — legitimate interests.
- To send marketing, only if you opt in — consent, which you may withdraw at any time.
- Optional cookies — consent, via our cookie preferences.
Who we share it with
Hosting and database providers; couriers (e.g. DHL and UK carriers) to deliver your order; email delivery providers; our payment provider once enabled; and professional advisers. We do not sell your data.
International transfers
Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or the International Data Transfer Agreement / Addendum. [Owner to confirm provider list.]
How long we keep it
Order and financial records: 6 years from the end of the financial year, as required by HMRC. Account data: until you delete your account. Enquiries: up to 2 years.
Your rights
You have the right to access, rectify, erase, restrict or object to processing of your data, to data portability, and to withdraw consent. Email customerservice@strandology.com. We respond within one month.
You may complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113), though we would appreciate the chance to resolve your concern first.