What we collect
- Contact details: name, email address, telephone number
- Delivery and billing addresses
- Order history and correspondence with our research team
- Technical data: IP address, browser type, pages viewed
We never see or store your card details or banking credentials. Payments are authorised inside your own bank via our open banking provider.
Why we process it
- To fulfil your order and provide delivery updates (contract)
- To meet accounting and record-keeping duties (legal obligation)
- To prevent fraud and verify age eligibility (legitimate interests)
- To send research updates where you have opted in (consent)
Retention and your rights
Order records are kept for seven years to satisfy HMRC requirements. Marketing consents are deleted as soon as you withdraw them.
You may request access, rectification, erasure, restriction or portability of your data, and you may object to processing based on legitimate interests. Email our team and we will respond within one calendar month. You also have the right to complain to the Information Commissioner's Office.