Privacy policy

BLACKSTUNNERS LTD is the controller responsible for personal information used to operate blackstunnersltd.shop, administer purchases and respond to customer enquiries. This notice explains the purposes of that processing and your choices.

Contacting the controller

Customer-support hours: Monday–Friday, 9:00 AM–5:00 PM UK time (Europe/London, GMT/BST), excluding applicable bank holidays. You can email anytime; enquiries are handled during support hours.

Send privacy requests to our support email with “Privacy request” in the subject. You can also write to the registered office. Give enough information to locate the relevant interaction, without sending payment credentials or unnecessary identity documents.

Information involved

When you order or enquire, relevant information includes your name, email, telephone number, billing and delivery addresses, product choices, order reference, payment status and correspondence. Return enquiries may include photographs, fit details and information about a problem. If you request personalisation, the text or measurements you provide are used to deal with that request. Avoid including another person's sensitive information unnecessarily.

The website and its ecommerce services process technical information needed to serve pages and transactions, such as device and browser information, IP address and session information. Payment providers process credentials submitted through their payment interfaces. Customer support needs order and transaction references, not your complete card number, security code or banking password.

Information normally comes from you, your interactions with the store, payment-status messages and delivery updates. If you contact us through Etsy, we receive information made available through that interaction, such as your message and relevant order details.

Purposes and lawful bases

We use order, contact and delivery information to take steps you request before a purchase, perform the purchase contract, arrange delivery and administer returns. Contract performance is the basis for those activities.

We retain and use information required for accounting, taxation, consumer obligations and lawful requests on the basis of the applicable legal obligation. We use relevant records for security, fraud investigation and handling disputes on the basis of legitimate interests in protecting the business and customers, where those interests are not overridden by your rights. Some related processing may instead be necessary for a contract or legal duty.

Where optional marketing or tracking requires consent, we rely on consent for that purpose. An enquiry, purchase or acceptance of sales terms is not blanket consent to advertising. Necessary order messages continue independently of optional marketing choices.

Recipients and service providers

Shopify provides the ecommerce platform for the store. Payment services process payments and refunds; delivery services receive the details needed to deliver goods; business communications providers support enquiries and order messages. These categories receive information relevant to their role. Professional advisers and public authorities may receive information where necessary for advice, legal duties or claims.

A service provider may act on our instructions for some functions and as an independent controller for its own legal or service purposes. Read Shopify's privacy information for its practices. The privacy information supplied by the payment service you use also applies to its independent processing.

Following a link to Etsy takes you to a separate platform with its own privacy practices. Marketplace and website purchases have separate transaction records.

International processing

A UK delivery address does not mean every technology provider processes information only in the UK. Shopify describes its processing arrangements in its Data Processing Addendum. Where processing involves a restricted international transfer, the applicable safeguards must be in place, such as a recognised adequacy arrangement or appropriate contractual protections. Contact us for details of the arrangements relevant to your information and how to obtain information about safeguards.

Retention

Order and payment-administration records are retained for as long as needed to fulfil the transaction and applicable accounting, tax and legal obligations. Enquiry and return records are retained according to the time needed to resolve the matter and address related complaints or claims. Relevant factors include statutory record requirements, the nature of the transaction, unresolved disputes and applicable limitation periods.

Optional marketing records are used while the relevant permission or other lawful basis continues. A limited suppression record may be retained to honour an unsubscribe request. Technical information should be kept only for the period justified by its purpose; an order-record requirement does not justify keeping every browsing record for the same period.

Your rights and choices

Depending on the circumstances, you may request access, correction, erasure, restriction or portability of your personal information. You may object to processing based on legitimate interests and to direct marketing, and withdraw consent where it is the basis. Withdrawal does not affect processing lawfully carried out beforehand.

Some records must be kept to meet legal duties even if you ask for deletion. We will explain any applicable restriction rather than treating rights as unconditional or ignoring a request. We may ask for proportionate information to confirm identity before releasing personal information. We respond within the statutory period and explain any lawful extension.

If you receive optional marketing, use its unsubscribe mechanism or contact us to object. For device storage and tracking choices, see our Cookies Policy. A privacy request and a browser cookie setting address different aspects of processing.

Security and required information

Provide accurate delivery and contact details so an order can be fulfilled. Without information necessary for the transaction, we may be unable to take payment, deliver or resolve a return. Optional marketing information is separate from these requirements.

Do not send passwords, complete card details or banking codes through customer support. If a payment or security check appears incorrect, contact us with the order reference so we can investigate with the relevant provider. No online service can guarantee absolute security.

Concerns and updates

You may contact us with a concern and complain to the Information Commissioner's Office. Contacting us first is not a condition of approaching the ICO. We may update this notice when processing changes; an update does not itself provide consent for a new use that requires it.