Privacy Policy
Privacy Policy
Last Updated: June 2026
Introduction
Keighley Kustom Keyrings ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and make purchases.
Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our site. By accessing and using this website, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy.
---
1. Information We Collect (What You're Actually Giving Us)
1.1 Information You Provide Directly
Order Information:
- Name, email address, postal address
- Phone number
- Payment information (processed securely via Shopify Payments; we do not store full card details)
- Order history and product preferences
Contact Form Information:
- Name, email address, phone number (optional)
- Message content
- Any other information you voluntarily provide
Newsletter Signup:
- Email address
- Name (optional)
Customer Reviews & Testimonials:
- Name and review content (if you submit a review)
1.2 Information Collected Automatically
Website Usage:
- IP address
- Browser type and version
- Pages visited and time spent
- Referring website
- Device type (mobile, desktop, tablet)
- General location (country/city level, not precise)
Cookies & Tracking:
- We use cookies to remember your preferences, shopping cart, and login status
- Analytics cookies help us understand how you use our site (via Google Analytics)
- Third-party advertising cookies may track your activity across websites
---
2. Legal Basis for Processing (GDPR)
We process your personal data on the following legal bases:
- Contract Performance: Processing your order and delivering products (order information, payment details)
- Legal Obligation: Compliance with tax, accounting, and fraud prevention laws
- Legitimate Interest: Improving our website, marketing communications (where you've consented), fraud detection
- Consent: Newsletter signup, optional surveys, marketing emails (you can withdraw this at any time)
---
3. How We Use Your Information (The Actual Stuff We Do With It)
We use collected information for:
- Order Fulfilment: Shipping your order, processing payments, customer service
- Communication: Responding to inquiries, order updates, delivery confirmations
- Marketing: Sending promotional emails (only if you've opted in), Instagram updates, new product announcements
- Analytics: Understanding website traffic, user behaviour, and improving user experience
- Legal Compliance: Fraud prevention, tax reporting, legal obligations
- Customer Service: Resolving disputes, handling returns/refunds
- Product Improvement: Gathering feedback, testing new features
---
4. Who We Share Your Data With (Spoiler: Not Many People)
4.1 Third-Party Service Providers
We may share your data with:
Payment Processing:
- Shopify Payments (processes your payment information securely)
Email & Marketing:
- Email service provider for newsletter delivery (data stored securely, GDPR-compliant)
Shipping & Logistics:
- Royal Mail, UPS, or other courier services (delivery address only)
Analytics:
- Google Analytics (anonymised website usage data)
4.2 Legal Requirements
We may disclose your information if required by law (court order, police investigation, tax authorities, fraud prevention).
4.3 Business Transfer
If our business is sold or merged, your information may be transferred to the new owner. You'll be notified of any such change.
4.4 Your Consent
We will never share your data for marketing purposes with third parties without your explicit consent.
---
5. Data Retention (How Long We Keep Your Stuff)
We retain your personal data for:
- Order Data: Minimum 6 years (for tax and accounting purposes, as per UK law)
- Newsletter Subscribers: Until you unsubscribe or request deletion
- Marketing/Promotional Data: As long as you remain subscribed
- Website Analytics:** Automatically deleted after 26 months (Google Analytics default)
- Customer Inquiries: Retained for 2 years after final communication, then deleted
You can request deletion of your data at any time (subject to legal obligations).
---
6. Your Rights Under GDPR (Yes, These Are Actually Yours)
You have the following rights regarding your personal data. We're not making this up—it's literally written into UK/EU law.
6.1 Right to Access
You can request a copy of all personal data we hold about you. We'll provide this within 30 days of your request.
6.2 Right to Rectification
You can request corrections to inaccurate or incomplete data.
6.3 Right to Erasure ("Right to be Forgotten")
You can request deletion of your data, except where we're legally required to retain it (e.g., for tax purposes).
6.4 Right to Restrict Processing
You can ask us to limit how we use your data (e.g., pause marketing communications while you consider).
6.5 Right to Data Portability
You can request a copy of your data in a structured, machine-readable format to transfer elsewhere.
6.6 Right to Object
You can object to marketing communications and certain processing activities.
6.7 Right to Withdraw Consent
If processing is based on your consent (e.g., newsletter signup), you can withdraw it at any time. Unsubscribe links are included in all marketing emails.
To exercise these rights, email us at keighleykustomkeyrings@gmail.com with "GDPR Request" in the subject line.
---
7. Cookies & Tracking Technologies
7.1 Types of Cookies We Use (A.K.A. Our Digital Digestive Biscuits)
**Essential Cookies (The Non-Negotiables):**
- Shopping cart functionality
- Login/authentication
- Security features
- These are necessary and cannot be disabled
- Think of them as the structural biscuit holding everything together
**Performance Cookies (The Metrics Ones):**
- Google Analytics (measures site traffic and user behaviour)
- Helps us improve the website
- Anonymised data only
- We promise not to judge your browsing habits
**Marketing Cookies (The Ones We'd Like to Show You):**
- Third-party cookies for targeted advertising
- You can opt-out or disable these
- No hard feelings if you do.
7.2 Managing Cookies (It's Your Browser, Your Rules)
You can control cookies through your browser settings:
- Chrome, Firefox, Safari, Edge all allow you to manage cookie preferences
- You can delete cookies from your device
- Disabling cookies may affect website functionality
Most browsers have a "Do Not Track" feature; however, websites (including ours) are not legally required to respond to these signals.
---
8. Children's Privacy
Our website is not intended for children under 13. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided us with data, we will delete it immediately and notify the parent/guardian.
For users aged 13–16, parental consent may be required under GDPR. If you're under 16 and have purchased from us, please inform us and we can discuss consent with your parent/guardian.
---
9. International Data Transfers
Our website is hosted and operated in the UK. If you're accessing from outside the UK/EU, your data may be transferred outside the EEA. By using our site, you consent to this transfer. We ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses with cloud providers).
---
10. Security of Your Data (We Take This Seriously)
We take data security seriously:
- Payment information is encrypted (SSL/TLS)
- Shopify handles payment processing securely (PCI DSS compliant)
- Staff access is restricted and password-protected
- Regular security monitoring
**However:** No online transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. Use of our site is at your own risk.
---
11. Third-Party Links & Services
Our website may contain links to third-party websites (Instagram, Shopify, payment providers, etc.). We're not responsible for their privacy practices. Review their privacy policies before providing your information.
---
12. Changes to This Policy (We'll Tell You If Things Change)
We may update this Privacy Policy to reflect legal changes, new practices, or other reasons. We'll notify you of material changes by:
- Posting the updated policy on this page
- Updating the "Last Updated" date
- Sending email notification if the changes significantly affect your rights
Continued use of our site after changes constitutes acceptance of the updated policy.
---
13. Data Protection Officer & Complaints
We do not have a dedicated Data Protection Officer (not required for businesses under 250 employees processing limited data). However, you can contact us with any privacy concerns.
**If you believe we've violated your GDPR rights, you also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):**
📧 ico.org.uk
📞 0303 123 1113
---
14. Contact Us (We Actually Reply)
For any privacy-related questions, data access requests, or concerns (and we mean it—we won't ignore you):
Email: keighleykustomkeyrings@gmail.com
Subject Line: "Privacy Request" or "GDPR Request" (helps us prioritise)
**Mailing Address:**
Keighley Kustom Keyrings
Keighley, Yorkshire
United Kingdom
We'll respond within 30 days of receiving your request. Probably faster—we're not ones for dragging our feet.
---
15. Specific Services & Data Processing
15.1 Shopify
Our website is hosted on Shopify. Shopify processes order and payment data as a data processor on our behalf. Shopify's privacy policy is available at shopify.com/legal/privacy.
15.2 Email Service Provider
We use an email service provider to send newsletters and promotional emails. Your email address is stored securely with GDPR-compliant safeguards. You can unsubscribe at any time via the link in any email.
15.3 Google Analytics
We use Google Analytics to understand website usage. Google collects anonymised data about how you interact with our site. You can opt-out by installing the Google Analytics Opt-Out Browser Add-on.
---
16. Legitimate Interest Assessment
For processing based on "legitimate interest," we've assessed:
- **Purpose:** Improving website, marketing, fraud prevention
- **Necessity:** These activities are necessary to run our business
- **Balance:** Your privacy rights are balanced against our business needs
- **Data Minimisation:** We only collect data necessary for these purposes
---
Summary (TLDR)
**In Plain English:** We collect your information to process your order and provide customer service. We don't sell your data to third parties. We'll only contact you for marketing if you've opted in. You have the right to access, correct, or delete your data at any time. GDPR says you're protected—we're just making sure we get it right. 🔒
---
This Privacy Policy is effective as of June 2026. Last updated: June 2026.