Privacy policy

Soratchen ("we", "us") runs the online shop at soratchen.co.uk. We are the controller of the personal data described here under the UK GDPR and the Data Protection Act 2018.

• Contact details: name, email address, phone number
• Delivery and billing addresses
• Order details and your messages to us
• Payment confirmation details from our payment provider (we do not store your full card details)
• Technical data such as device, browser and pages viewed, collected through cookies (see our Cookie Policy)

• To take, deliver and support your order (contract).
• To keep business, tax and accounting records (legal obligation).
• To reply to enquiries, prevent fraud and improve our shop (legitimate interests).
• To send marketing emails and use non-essential cookies (your consent, which you can withdraw at any time).

We share data only where needed, with: our shop platform (Shopify), payment providers, delivery carriers, email and customer-service tools we use, professional advisers, and authorities where the law requires. We do not sell your personal data.

Some providers may process data outside the UK, including in the United States (for example, Shopify stores data there). Where they do, we rely on safeguards the law allows, such as UK-approved transfer mechanisms. Shopify may also use data from our shop for its own purposes, such as fraud prevention and improving its services, under its own privacy policy.

We email you marketing only if you have signed up or otherwise agreed, in line with the Privacy and Electronic Communications Regulations (PECR). Every email has an unsubscribe link, or you can contact us at any time.

We keep order and accounting records for as long as the law requires. We keep enquiry messages for as long as needed to deal with them. We keep marketing details until you unsubscribe or ask us to stop. We then delete or anonymise the data.

We take sensible technical and organisational steps to protect your data. No online service can be completely risk-free, so please keep your own passwords and devices secure.

You have the right to:

• access the personal data we hold about you
• have inaccurate data corrected
• ask us to erase your data
• restrict or object to our use of your data
• receive your data in a portable format
• withdraw consent at any time

To use any of these rights, email contact@soratchen.co.uk or write to us at the address above. We aim to reply within one month.

If you are unhappy with how we use your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, phone 0303 123 1113.

Our shop is not aimed at children, and we do not knowingly collect data from anyone under 18.

We may update this policy from time to time. The date at the top shows when it was last changed.

Contact us about your data or this policy.