Privacy policy

Privacy Policy

Who we are

Stash Shop is operated by Marx Corporate, 20 Church Street, Ballymena, BT43 6DE, United Kingdom. We are the data controller for the personal information described in this policy. You can contact us at info@stashshop.co.uk or on 028 2563 0808.

This policy explains how we collect, use, share and protect your personal information when you visit or make a purchase from stashshop.co.uk.

Information we collect

When you browse the site, we automatically collect device information: your IP address, browser type, time zone, referring pages, and how you interact with the site, collected through cookies, log files and similar technologies.

When you place or attempt to place an order, we collect order information: your name, billing and delivery address, email address, phone number, payment details, and the sizes, names, numbers or other personalisation you supply for decorated items.

Why we use it, and our lawful basis

To fulfil your order — processing payment, arranging decoration and delivery, sending confirmations and dispatch notifications. Lawful basis: performance of a contract with you.

To communicate with you about your order, including delays and delivery arrangements. Lawful basis: performance of a contract.

To screen orders for fraud and protect the security of our site. Lawful basis: our legitimate interests in preventing fraud and misuse.

To improve our site and understand how customers use it. Lawful basis: consent, given through our cookie banner.

To send marketing about our products. Lawful basis: consent, or our legitimate interests where you are an existing customer. You can withdraw consent or unsubscribe at any time using the link in any marketing email.

To meet our legal obligations, including tax and accounting records. Lawful basis: legal obligation.

Who we share it with

Shopify Inc., which hosts our store and processes orders on our behalf. See shopify.com/legal/privacy.

Payment providers, who process your payment details. We do not store full card numbers.

Delivery carriers, who receive your name, delivery address and contact details in order to deliver your order.

Suppliers and decorators, where an item is manufactured or decorated to your specification and your personalisation details are needed to produce it.

Your club, school or organisation co-ordinator, who may receive basic order information — typically name, item and size — to help them manage distribution and administration for their group. We do not share your payment details or full contact details for this purpose.

Analytics providers, including Google Analytics, where you have consented to analytics cookies. See policies.google.com/privacy.

We may also disclose personal information where we are required to do so by law, or to establish, exercise or defend legal claims.

We do not sell your personal information.

International transfers

Some of our providers, including Shopify, process personal information outside the United Kingdom. Where this happens, we rely on UK adequacy regulations or on approved safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, so that your information receives an equivalent level of protection.

How long we keep it

We keep order and transaction records for six years from the end of the financial year in which the order was placed, to meet our tax and accounting obligations.

We keep marketing contact details until you unsubscribe or ask us to remove them.

We keep analytics data for no longer than 26 months.

Where information is no longer needed for any of these purposes, we delete or anonymise it.

Your rights

Under UK data protection law you have the right to:

- ask for a copy of the personal information we hold about you
- ask us to correct information that is inaccurate or incomplete
- ask us to delete your information, where we no longer have a reason to keep it
- ask us to restrict how we use your information
- object to our using your information for direct marketing, or where we rely on legitimate interests
- ask us to transfer your information to you or another provider in a portable format
- withdraw your consent at any time, where we rely on consent

To exercise any of these rights, email info@stashshop.co.uk. We will respond within one month. Exercising these rights is free of charge.

Some rights are limited. For example, we cannot delete transaction records we are legally required to retain, and we cannot recall personalisation details already sent to a supplier for an item in production.

Complaints

If you are unhappy with how we have handled your personal information, please contact us first so we can try to put it right.

You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection: ico.org.uk, or 0303 123 1113.

Cookies

We use cookies that are necessary for the site to function, and — with your consent — cookies for analytics and marketing. You can manage your preferences through the cookie banner on our site, or through your browser settings. Disabling necessary cookies may prevent parts of the site from working.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. The date at the top shows when it was last revised.

Contact us

Marx Corporate (trading as Stash Shop)
20 Church Street, Ballymena, BT43 6DE, United Kingdom
info@stashshop.co.uk
028 2563 0808