Privacy Policy

Last Updated: October 2026

This Privacy Policy explains how George's Vintage ("we", "us", or "our", operating georgesvintage.com) collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

George's Vintage (based in Oldham, Greater Manchester, United Kingdom) is the data controller responsible for your personal information. You can contact us regarding any privacy or data protection matter at georgesvintagestore@gmail.com.

2. Personal Data We Collect

  • Order & Fulfilment Details: Name, billing address, UK shipping address, email address, and telephone number when you place an order.
  • Payment Information: Payments are processed securely through Shopify Payments, Shop Pay, Apple Pay, Google Pay, or PayPal. We never see or store your full payment card details.
  • Customer Support & Marketing: Your email address and message history when you contact us or opt in to our mailing list for new drop alerts.
  • Device & Browsing Data: IP address, browser type, and essential cookies required to operate our Shopify storefront and shopping cart.

3. How & Why We Use Your Data (Lawful Basis)

  • Contractual Necessity: To process your payment, dispatch your order via Royal Mail or Evri, send tracking updates, and handle returns or refunds.
  • Legitimate Interests: To respond to customer enquiries, prevent fraudulent transactions, and maintain the security of our website.
  • Consent: To send optional email updates about new vintage drops and promotions when you explicitly subscribe (you may unsubscribe at any time via the link in any email).
  • Legal Obligation: To maintain accounting and tax records required under UK law.

4. Sharing Your Personal Data

We never sell your personal data. We share only the minimum necessary information with trusted service providers who help us run our store:

  • Shopify Inc.: Our e-commerce platform and checkout processor.
  • UK Delivery Couriers (Royal Mail & Evri): To deliver your parcel and provide tracking updates.
  • Payment Providers: Shopify Payments, Apple Pay, Google Pay, and PayPal to process transactions securely.

5. Data Retention

We keep order records for up to 6 years to comply with UK tax and accounting regulations. Marketing email subscriptions are retained until you unsubscribe or request deletion.

6. Your UK GDPR Rights

Under UK data protection law, you have the right to:

  • Request access to the personal data we hold about you.
  • Request correction of inaccurate or incomplete personal data.
  • Request erasure of your personal data where there is no legal requirement for us to retain it.
  • Withdraw consent for marketing communications at any time.
  • Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, please email georgesvintagestore@gmail.com.