Privacy

Who is responsible

TBC LTD is the data controller for this shop. Registered office TBC, TBC, United Kingdom. Reach us at hello@thebigandy.com.

What we collect

• Order details. Your name, delivery address, billing address, email and what you bought. We need these to fulfil the contract.
• Payment. Handled by our payment provider. We never see or store your full card number.
• Emails you opt into. Only if you tick the box. Never because you bought something.
• Basic analytics. Aggregate traffic figures. We do not build advertising profiles of individual shoppers.

Why we are allowed to hold it

Order and delivery data is processed to perform our contract with you. Accounting records are kept because tax law requires it. Marketing email is sent on your consent, which you can withdraw at any time. Fraud checking is done on our legitimate interest in not being defrauded.

Who else sees it

Only the people who have to: our payment provider, our delivery carrier, our accountant, and the platform hosting the shop. Every one of them is bound to use it only for that job.

We do not sell your data, and we never will. Given what we sell, that is not a marketing line, it is the entire point.

How long we keep it

Order and tax records for six full financial years, because HMRC requires it. Marketing consent until you withdraw it. Analytics in aggregate only.

Your rights

Under UK GDPR you can ask for a copy of what we hold, ask us to correct it, ask us to delete it, object to how we use it, or ask for it in a portable format. Email us and we will respond within one month. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.

Deletion has one limit worth being straight about: we cannot delete an invoice we are legally required to keep. Everything outside that, we can.

Cookies

Cookies that are strictly necessary to run the bag and the checkout are set without asking, because the law permits that. Anything else is only set if you agree to it.