Legal

Privacy Policy

What we collect, why, how long we keep it, and the rights you have over it.

Last reviewed 2026-08-10 · Stroid UK Shop · London N22 8QW

Last updated 30 July 2026.

This policy explains what personal data Stroid UK Shop collects when you use stroidukshop.co.uk, why we collect it, how long we keep it, and the rights you have over it. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who is responsible for your data

Stroid UK Shop is the data controller for the personal data described in this policy.

If you have any question about how your data is handled, email us first — we would rather resolve it directly than have you go to the regulator.

What we collect and why

DataWhy we need itLawful basis
Name, delivery address, email, phoneTo process and deliver your order and to contact you about itPerformance of a contract
Order historyTo handle refunds, replacements and support queriesPerformance of a contract
Payment confirmation (not card numbers)To confirm your order is paidPerformance of a contract
IP address, browser and device dataSecurity, fraud prevention and keeping the site workingLegitimate interests
Marketing email addressTo send offers, only if you opt inConsent
Support messages you send usTo answer you and improve our serviceLegitimate interests

Payment data

We never see or store your full card number. Card details are entered directly with our payment provider, who is responsible for processing them securely. We receive only a confirmation that payment succeeded or failed, plus the last four digits for reference.

Who we share data with

We share the minimum necessary with:

  • Delivery partners — name and address, so your order can be delivered.
  • Payment providers — to take payment and process refunds.
  • Our hosting provider — which stores the site and its database on our behalf.

We do not sell your personal data, and we do not share it with advertisers or data brokers. We will disclose data if we are legally required to, for example under a court order.

International transfers

Some of our providers process data outside the UK. Where that happens, the transfer is covered by UK adequacy regulations or by International Data Transfer Agreements, which oblige the recipient to protect your data to UK standards.

How long we keep it

  • Order and transaction records: six years, to meet HMRC record-keeping requirements.
  • Account data: until you ask us to close your account.
  • Marketing consent: until you unsubscribe, which you can do from any email we send.
  • Support correspondence: two years from the last message.
  • Server and security logs: typically 30 days.

Cookies

The site uses cookies that are strictly necessary for it to work — keeping you logged in, remembering your basket, and securing checkout. These cannot be switched off without breaking the site. Any analytics or marketing cookies are only set if you agree to them, and you can change your mind at any time by clearing cookies in your browser.

Your rights

Under UK GDPR you can ask us to:

  • Access a copy of the personal data we hold about you
  • Correct anything inaccurate or incomplete
  • Erase your data, where we have no continuing legal reason to keep it
  • Restrict or object to how we use it
  • Port it to another provider in a machine-readable format
  • Withdraw consent at any time, where consent was the basis for using it

Email info@stroidukshop.co.uk to exercise any of these. We respond within one month, as the law requires. There is no charge.

Complaints

If you are not satisfied with how we have handled your data, you can complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to put things right first.

Children

This site is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

If we change how we handle personal data we will update this page and change the date at the top. Material changes affecting your rights will be communicated to account holders by email.