Legal
Privacy Policy
What personal data we collect, why, who we share it with, and your rights under UK and EU data protection law.
Last updated 1 November 2026
This policy explains what personal data we collect when you visit calveruni.shop or buy from us, why we use it, who we share it with and what your rights are.
Who is responsible for your data
The data controller is the owner of CALVERUNI, a sole trader business, 106 Spencer Road, Shelton, Stoke-on-Trent, ST4 2BE, United Kingdom. Email: support@calveruni.shop. Telephone: +44 7857 719669. We have not appointed a data protection officer, as we are not required to.
What we collect and why
| Data | Why we use it | Legal basis |
|---|---|---|
| Name, email, billing and delivery address, phone number (optional), order details | To take, deliver and support your order, send order and dispatch emails, and handle returns | Performance of a contract (UK GDPR / GDPR Art. 6(1)(b)) |
| Payment details | Taken directly by our payment providers; we receive only confirmation and limited details (for example the last four digits of a card) | Performance of a contract |
| Order and invoice records | To keep accounts as required by tax law | Legal obligation (Art. 6(1)(c)) |
| Messages and withdrawal notices you send us | To answer you and to keep a record of your request | Contract / legitimate interests (Art. 6(1)(b), (f)) |
| Technical data: IP address, browser, device, the country you choose for delivery | To run the shop securely, show prices in your currency and prevent fraud | Legitimate interests (Art. 6(1)(f)) |
We do not sell your personal data, we do not use it for advertising profiles, and we do not send marketing emails.
Who we share it with
- Payment providers (Stripe and PayPal, when used at checkout) to take payment and prevent fraud. They act as independent controllers for some purposes; see their own privacy notices.
- Delivery carriers and customs to deliver your parcel and clear it through customs.
- Our website host (Hostinger), which stores the shop and its database.
- Authorities where the law requires it.
International transfers
We are based in the United Kingdom. If you are in the EU, your data is transferred to the UK, which benefits from an EU adequacy decision. Some providers (for example payment providers) may process data in the United States or elsewhere; where they do, transfers are protected by adequacy regulations or standard contractual clauses (including the UK Addendum).
How long we keep it
- Order and invoice records: 6 years after the end of the tax year, as required by UK tax law.
- Messages and withdrawal notices: 3 years after our last contact.
- Customer accounts (if you create one): until you ask us to delete it.
- Server logs: up to 30 days.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its use, and to receive it in a portable format. To use these rights, email support@calveruni.shop. We will reply within one month.
You also have the right to complain to a supervisory authority. In the UK this is the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). If you live in the EU, you can complain to the data protection authority in your country.
Cookies
We use only the cookies needed to run the shop. See our Cookie Policy.
Children
Our shop is not intended for children and we do not knowingly collect data from anyone under 18.
Changes
We will post any changes to this policy on this page and update the date at the top.