Privacy Policy

Last updated: April 2026

At The Glaistig Group, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, theglaistiggroup.shop (the "Site"), place an order, or otherwise interact with us. It also describes your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. By using our Site or providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

This Site is operated by The Glaistig Group Ltd, a company registered in the United Kingdom. We are the "data controller" responsible for your personal information.

Registered Office:
International House, 38 Thistle Street
Edinburgh, EH2 1EN
United Kingdom

Contact:
Email: info@theglaistiggroup.shop
Telephone: +44 7346 569891

2. Information We Collect

We collect personal information that you provide to us directly, information we collect automatically when you use our Site, and information from third parties. The types of data we collect include:

Information You Provide

— Contact details: name, email address, telephone number, shipping and billing addresses
— Account information: username, password (encrypted), account preferences
— Order information: products purchased, order history, gift messages
— Payment information: payment card details are processed directly by our secure payment providers; we do not store full card numbers on our servers
— Communications: messages you send us through our contact form, email, or social media
— Marketing preferences: your consent to receive newsletters or promotional communications

Information We Collect Automatically

— Device information: IP address, browser type and version, device type, operating system
— Usage data: pages visited, time spent on the Site, click patterns, referring URLs
— Location data: approximate location based on IP address
— Cookies and similar technologies: see our Cookies section below

Information from Third Parties

— Payment processors: transaction confirmation and fraud prevention data
— Shipping carriers: delivery status and tracking information
— Social media platforms: if you engage with us via social media
— Analytics providers: aggregated data about how our Site is used

3. How We Use Your Information

We use your personal information for the following purposes, based on the legal grounds described:

To Fulfil Your Orders (Contractual Necessity)

We use your contact, payment, and shipping details to process and deliver your orders, send order confirmations, provide tracking updates, handle returns and refunds, and respond to customer service enquiries.

To Manage Your Account (Contractual Necessity)

If you create an account with us, we use your information to provide access, store your preferences, and maintain your order history.

To Communicate With You (Legitimate Interest or Consent)

We may contact you with important updates about your orders, changes to our services, or responses to enquiries. With your consent, we may send you marketing communications, newsletters, and promotional offers.

To Improve Our Site and Services (Legitimate Interest)

We analyse usage data to understand how our Site is being used, to identify issues, to improve functionality, and to develop new products and features.

To Comply With Legal Obligations

We may use your information to comply with applicable laws, regulations, tax obligations, and legal requests.

To Prevent Fraud and Protect Our Business (Legitimate Interest)

We use your information to detect and prevent fraud, protect our Site and customers, and enforce our Terms of Service.

4. Legal Basis for Processing

Under UK GDPR, we must have a lawful basis to process your personal data. The bases we rely on are:

— Performance of a contract: processing necessary to fulfil our contract with you (for example, delivering your order).
— Consent: where you have given us explicit permission (for example, subscribing to our newsletter). You may withdraw consent at any time.
— Legitimate interest: where processing is necessary for our legitimate business interests and does not override your rights (for example, fraud prevention).
— Legal obligation: where processing is required by law (for example, tax records).

5. Sharing Your Information

We do not sell your personal information. We may share your data with trusted third parties only as necessary to provide our services:

— Payment processors: to process your transactions securely.
— Shipping carriers: to deliver your orders.
— IT and hosting providers: to operate our Site and store data.
— Marketing and analytics providers: to help us understand our audience and communicate with customers (with your consent where required).
— Professional advisors: such as accountants, lawyers, and auditors when necessary.
— Government or regulatory authorities: when required by law or to protect our legal rights.

All third parties we work with are required to respect the security of your personal information and to treat it in accordance with applicable data protection laws.

6. International Data Transfers

Some of our trusted service providers may be located outside the United Kingdom or the European Economic Area (EEA). When we transfer your personal data internationally, we ensure appropriate safeguards are in place, such as:

— Transfers to countries deemed by the UK to provide an adequate level of protection
— Standard contractual clauses approved by the UK Information Commissioner's Office
— Other legally approved mechanisms that protect your rights

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, including:

— Order and transaction data: retained for at least 6 years to comply with UK tax and accounting laws.
— Account information: retained while your account is active and for a reasonable period after closure.
— Marketing data: retained until you withdraw your consent or request deletion.
— Website analytics data: retained for up to 26 months in anonymised form.

When your data is no longer required, we securely delete or anonymise it.

8. Your Rights

Under UK GDPR, you have the following rights in relation to your personal information:

— Right of access: to request a copy of the personal data we hold about you.
— Right to rectification: to request correction of inaccurate or incomplete data.
— Right to erasure ("right to be forgotten"): to request deletion of your data in certain circumstances.
— Right to restrict processing: to request that we limit how we use your data.
— Right to data portability: to request your data in a structured, machine-readable format.
— Right to object: to object to certain processing, including direct marketing.
— Right to withdraw consent: where our processing is based on consent.
— Right to lodge a complaint: with the UK Information Commissioner's Office (ICO).

To exercise any of these rights, please contact us at info@theglaistiggroup.shop. We will respond within one month of receiving your request. In some cases, we may need to verify your identity before processing your request.

9. Cookies and Tracking Technologies

Our Site uses cookies and similar technologies to improve your browsing experience. Cookies are small text files stored on your device that help us remember your preferences, analyse site traffic, and personalise content.

Types of Cookies We Use

— Essential cookies: necessary for the Site to function (for example, keeping items in your shopping bag). These cannot be disabled.
— Performance cookies: help us understand how visitors use our Site, so we can improve it.
— Functional cookies: remember your preferences to provide a more personalised experience.
— Marketing cookies: used to deliver relevant advertising and measure campaign effectiveness.

Managing Cookies

You can control cookies through your browser settings at any time. You can also manage your preferences through our cookie consent banner when you first visit our Site. Please note that disabling certain cookies may affect the functionality of our Site.

10. Marketing Communications

With your consent, we may send you marketing communications about our new collections, offers, events, and brand updates. You can unsubscribe at any time by clicking the "unsubscribe" link at the bottom of any marketing email, updating your account preferences, or contacting us directly.

Please note that even if you opt out of marketing communications, we will still send you essential transactional messages related to your orders and account.

11. Data Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. These measures include:

— Secure server infrastructure and encryption (SSL/TLS)
— Secure payment processing by trusted providers
— Access controls and authentication procedures
— Regular security reviews and staff training

However, no method of transmission over the internet or method of electronic storage is entirely secure. While we do our best to protect your data, we cannot guarantee absolute security.

12. Children's Privacy

Our Site is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately, and we will take steps to delete it.

13. Third-Party Links

Our Site may contain links to third-party websites, plug-ins, and applications. Clicking on these links or enabling these connections may allow third parties to collect or share data about you. We do not control these third-party sites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every site you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or our services. Any updates will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your information.

If we make significant changes, we will notify you by email or through a prominent notice on our Site.

15. How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

The Glaistig Group Ltd
International House, 38 Thistle Street
Edinburgh, EH2 1EN
United Kingdom

Email: info@theglaistiggroup.shop
Telephone: +44 7346 569891
Website: theglaistiggroup.shop

16. Complaints

If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
United Kingdom

Website: ico.org.uk
Helpline: 0303 123 1113

We would, however, appreciate the chance to address your concerns before you approach the ICO, so please contact us first.

By using our Site, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described.