Privacy Policy

toeandheelGOLD Ltd
1 Adderley Terrace
Monifieth
Angus
DD5 4DQ
Scotland

This Privacy Policy explains how toeandheelGOLD Ltd collects, uses, stores and protects your personal data when you visit our website or place an order with us. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

toeandheelGOLD Ltd is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact our Data Protection Officer:

Gareth Mitchelson
Email: garethmitchelson@yahoo.co.uk

2. What Data We Collect

When you interact with our website or place an order, we may collect the following personal data:

Name and contact details (email address, phone number, postal address)
Order and transaction information
Payment information (processed securely by our payment processor — we do not store card details)
Delivery address and shipping preferences
Website usage data (via cookies and similar technologies)
Communications you send to us

3. How We Use Your Data

We use your personal data for the following purposes and on the following legal bases under UK GDPR:

To fulfil your order — processing payments, arranging delivery, and managing returns (legal basis: performance of a contract)
To communicate with you — responding to enquiries and providing order updates (legal basis: performance of a contract / legitimate interests)
To comply with legal obligations — such as keeping financial records for tax purposes (legal basis: legal obligation)
To improve our website and services — using anonymised analytics data (legal basis: legitimate interests)
To send marketing communications — only where you have given explicit consent, and you may withdraw this at any time (legal basis: consent)

4. Who We Share Your Data With

We only share your personal data with third parties where necessary to fulfil your order or comply with legal obligations. These include:

Royal Mail / Click & Drop — to arrange delivery of your order
Payment processors (such as Shopify Payments) — to process your payment securely
Shopify Inc. — our e-commerce platform provider, who host and process data on our behalf

We do not sell your personal data to third parties.

5. How Long We Keep Your Data

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy. Order and financial records are kept for 6 years in line with UK tax and accounting requirements. You may request deletion of your data at any time, subject to any legal obligations we have to retain it.

6. Cookies

Our website uses cookies and similar technologies to improve your browsing experience and analyse site usage. You can manage your cookie preferences at any time via the cookie banner on our website. For more information about how Shopify uses cookies, please refer to Shopify's privacy policy.

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access — to request a copy of the data we hold about you
Right to rectification — to request correction of inaccurate data
Right to erasure — to request deletion of your data, where applicable
Right to restrict processing — to request that we limit how we use your data
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time