TNV Privacy Policy

PRIVACY POLICY

Data controller: Top Notch Vintage  Address: Somerton, UK. Contact for privacy queries: via Contact Form at the bottom of this page.

This policy explains what personal data we collect when you use topnotchvintage.co.uk, why we collect it, who we share it with, and what rights you have over it. It is written to comply with the UK GDPR and the Data Protection Act 2018.

1. WHAT INFORMATION WE COLLECT

Information you give us directly, for example when you place an order, create an account, contact us, or sign up to our mailing list:

  • Name
  • Delivery and billing address
  • Email address
  • Phone number
  • Order history and any details you include in special instructions or correspondence

Information about someone else, if you're sending a gift directly to a third party (their name, address, and phone number, used only to deliver and confirm that order).

Information collected automatically, when you browse the site:

  • IP address (used to determine your approximate location so prices display in your local currency, and stored briefly in a session cookie)
  • Pages viewed, time on site, and general browsing behaviour, via Google Analytics

What we don't collect: we never see or store your full card details. Payments are processed securely by Shopify Payments and/or PayPal, and card data is handled entirely by them under their own security standards (PCI-DSS compliant).

2. HOW AND WHY WE USE YOUR INFORMATION

Purpose What we use Legal basis
Processing and fulfilling your order Name, address, email, phone, order details Performance of a contract with you
Delivering a gift to someone else Recipient's name, address, phone Performance of a contract with you
Responding to enquiries Email address, message content Legitimate interest (customer service)
Sending order confirmations and updates Email, phone Performance of a contract with you
Sending marketing emails (new stock, offers) Email address, via Klaviyo/Mailchimp or similar Your consent (opt-in at checkout or sign-up) — you can withdraw this at any time
Currency conversion for display purposes IP address (approximate location) Legitimate interest (site functionality)
Understanding site usage and improving the shop Browsing behaviour, via Google Analytics Consent (via cookie banner) / legitimate interest for aggregated, non-identifying analysis
Preventing fraud and enforcing our Terms Order and account information Legitimate interest / legal obligation

We do not sell your personal data. We do not share identifiable information with advertisers — only aggregated, non-identifying statistics (for example, "X visitors viewed our new arrivals this month").

3. COOKIES AND TRACKING TOOLS

We use the following on this site:

  • Essential cookies — required for the site and checkout to function (e.g. keeping items in your basket, remembering your currency selection). These can't be switched off, as the site won't work properly without them.
  • Email marketing tracking (Klaviyo/Mailchimp or similar) — if you're subscribed to our emails, we may track opens and clicks to understand what content is useful to you. You can unsubscribe at any time via the link in any marketing email.

You can control non-essential cookies through the cookie banner shown when you first visit the site, or through your browser settings. Blocking essential cookies may prevent parts of the site (like checkout) from working.

4. WHO WE SHARE YOUR DATA WITH

We share personal data only with the third parties needed to run our shop and deliver your order:

  • Shopify Inc. — our e-commerce platform, which hosts the site and processes orders on our behalf
  • Shopify Payments and/or PayPal — to process payment securely
  • Royal Mail / our courier(s) — to deliver your order, using your name and address
  • Google Analytics — for anonymised website usage statistics
  • Klaviyo/Mailchimp or MailerLite — to send marketing emails you've opted into

Some of these providers may store or process data outside the UK/EEA (for example, in the United States). Where this happens, they do so under approved safeguards such as the UK's International Data Transfer Agreement or the EU-US Data Privacy Framework, as required by UK GDPR.

We never use or share your personal data for purposes unrelated to those listed above without asking for your consent first.

5. HOW LONG WE KEEP YOUR DATA

We keep order and customer data for as long as necessary to fulfil orders, meet our legal obligations (including tax and accounting records, generally 6 years), and handle any disputes. Marketing email data is kept until you unsubscribe or ask us to delete it. Enquiry correspondence is generally kept for [insert, e.g. 2 years] unless you ask us to delete it sooner.

6. CHILDREN'S PRIVACY

Our site is not directed at children, and we do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

7. YOUR RIGHTS

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Erase your data ("right to be forgotten"), where applicable
  • Restrict or object to certain processing
  • Data portability — receive your data in a portable format
  • Withdraw consent at any time for anything based on consent (e.g. marketing emails)
  • Complain to the ICO (Information Commissioner's Office) if you believe we've mishandled your data — ico.org.uk

To exercise any of these rights, contact us at sales@topnotchvintage.co.uk. We may ask you to verify your identity first, and we'll respond within one month as required by law.

8. DATA SECURITY

We use appropriate technical and organisational measures to protect the personal data we hold, including secure hosting via Shopify and restricted access to customer information. No online system is 100% secure, but we take reasonable steps to protect your data against loss, misuse, or unauthorised access.

9. CHANGES TO THIS POLICY

We may update this policy from time to time to reflect changes in our practices or the law. The current version will always be available on this page.

10. CONTACT US

Questions about this policy, or requests relating to your personal data, should be sent via the form below.

Last updated: August 2026.