Privacy Policy

1. Introduction

Shrexxonthronan ("we", "our", "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or use our services.

We comply with UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and other applicable data protection laws.

2. Data Controller Information

The data controller responsible for your personal data is:

• Company Name: Shrexxonthronan
• Address: Widdrington Station, Ulgham, Morpeth NE61 5ND, United Kingdom
• Email: partnership@shrexxonthronan.world

3. Information We Collect

3.1 Information You Provide

We collect information you voluntarily provide when you:

• Place an order (name, email address, phone number, delivery address)
• Contact us via email or contact form
• Submit enquiries through our contact form
• Communicate with our support team regarding orders

3.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent on our website
• Referring website information
• Cookie data (see our Cookie Policy)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfil your orders and provide our services
• Consent: Processing based on your explicit consent (e.g., marketing communications)
• Legitimate Interests: Processing for our legitimate business interests, such as improving our services
• Legal Obligation: Processing required to comply with applicable laws

5. Purpose of Data Processing

We use your personal data for the following purposes:

• Processing and fulfilling your orders
• Communicating with you about your orders and enquiries
• Providing customer support
• Sending marketing communications (with your consent)
• Improving our website and services
• Complying with legal and regulatory requirements
• Preventing fraud and ensuring website security

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Order Data: Retained for 7 years for tax and accounting purposes
• Contact Enquiries: Retained for 2 years after the last communication
• Marketing Preferences: Retained until you withdraw consent
• Website Analytics: Retained for 26 months

7. Data Sharing

We may share your personal data with:

• Service Providers: Payment processors, delivery companies, and hosting providers who assist us in operating our business
• Legal Authorities: When required by law or to protect our legal rights

We do not sell your personal data to third parties. All third-party service providers are required to maintain confidentiality and comply with data protection laws.

8. International Data Transfers

Your data may be transferred to and processed in countries outside the UK. When such transfers occur, we ensure appropriate safeguards are in place, including UK International Data Transfer Agreement safeguards or other lawful transfer mechanisms.

9. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing at any time

To exercise any of these rights, please contact us at partnership@shrexxonthronan.world.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption for all data transmissions
• Secure storage of personal data
• Regular security assessments
• Access controls limiting data access to authorised personnel
• Staff training on data protection

11. Children's Privacy

Our website and services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Marketing Communications

We will only send direct marketing communications by email where we have your consent or another lawful basis under PECR and UK GDPR. You can unsubscribe at any time by using the unsubscribe option in the message or by contacting us.

14. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: https://ico.org.uk
• Phone: 0303 123 1113