Privacy Policy
Last updated: 11th July 2025
1. Who We Are
This website, welsh-tartan.com, is operated by Tartan Centre (Wales) Ltd, trading as Wales Tartan Centres.
We are committed to protecting your privacy and ensuring your personal data is handled securely and in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
Contact details:
- Email: [email protected]
- Address: Unit 13, Cwmdu Industrial Estate, Swansea, SA5 8JF (Wales, UK)
2. What Personal Data We Collect
We may collect and process the following types of personal data:
a. When you create an account:
- Email address
- Password (securely encrypted)
b. When you place an order:
- First & Last Name
- Email address
- Telephone Number
- Shipping Address
- Billing Address
- Payment status (note: payment info is handled securely by our payment provider; we do not store your card details or any other payment information)
c. When you contact us:
- First & Last Name
- Email address
- Your message
- Telephone Number (optional)
d. When you subscribe to our newsletter:
- Email address
- First & Last Name
e. Automatically collected (for functionality only):
- IP address
- Session data (e.g. basket contents, login status)
3. How We Use Your Data
We use your personal data to:
- Process and fulfil your orders
- Respond to enquiries and provide customer support
- Manage your user account
- Send order confirmations and service emails
- Send marketing emails (only if you've subscribed)
- Comply with legal and tax obligations
- Prevent fraud and ensure the security of our website
We do not sell, rent, or share your personal data with third parties for advertising.
4. Legal Bases for Processing
We process your personal data under the following lawful bases:
- Contractual necessity – to process your orders and provide customer support
- Consent – for sending marketing emails (newsletter)
- Legal obligation – for tax, accounting, and compliance purposes
- Legitimate interest – to improve our services and ensure website security
5. Newsletter and Marketing Emails
You can subscribe to our newsletter:
- At the bottom of our website
- When placing an order (optional checkbox)
We only send newsletters if you've actively opted in. These may include updates, product news, and exclusive offers.
You can unsubscribe at any time by:
- Clicking the "Unsubscribe" link in any marketing email
- Contacting us directly at [email protected]
We use a secure third-party email provider to manage our mailing list, and your data will only be used for email communications related to Wales Tartan Centres.
6. Cookies
We only use essential and functional cookies to:
- Keep you logged into your account
- Remember your basket contents
- Securely process forms and orders
We do not use tracking cookies, Google Analytics, Facebook pixels, or any third-party marketing cookies.
You can manage or disable cookies in your browser settings. Disabling essential cookies may impact site performance.
7. Data Sharing and Third Parties
We only share your data with trusted third parties when necessary:
- Payment processors (e.g. Stripe) – for secure transactions
- Delivery partners – to fulfil your order
- Email service providers – for newsletter delivery (only if you've subscribed)
- Accounting/legal services – for regulatory compliance
All third parties are required to comply with UK data protection laws.
8. Data Retention
We keep your data only as long as necessary:
- Order/account data – retained for 6 years for tax and legal reasons
- Contact form messages – kept for 12 months
- Newsletter subscriptions – until you unsubscribe
- Cookies – expire based on browser settings or automatically
9. Your Rights
Under the UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (unless required to retain it by law)
- Withdraw consent for marketing at any time
- Object to or restrict certain types of data processing
Complain to the UK Information Commissioner's Office (ICO):
To exercise any of these rights, contact us at [email protected].
10. Data Security
We use industry-standard security measures to protect your data:
- HTTPS (SSL) encryption
- Password-protected admin systems
- Access restrictions for sensitive data
- Secure third-party processors
Despite our best efforts, no online platform can guarantee 100% security, but we take all reasonable steps to safeguard your data.
11. International Data Transfers
We do not knowingly transfer personal data outside the UK or EEA unless a third-party service provider (e.g. newsletter service) securely stores it under approved data protection frameworks (e.g. Standard Contractual Clauses).
12. Changes to This Policy
We may update this Privacy Policy to reflect legal, technical, or business changes. We will notify users where required and post the updated version with a new date.