top of page

Privacy Policy

Introduction

This policy explains how Ramble Rope Company collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Ramble Rope Company is the data controller responsible for your personal data. This website is hosted and operated on the Wix platform, which provides secure infrastructure and processes certain data on our behalf as a data processor.

If you have any questions about how we handle your data, please contact us directly using the details at the bottom of this page.

What data we collect and why

When you place an order, we collect your name, delivery address, email address, and payment details. This is necessary to fulfil your contract with us and process your purchase. Payment information is handled securely by Wix Payments and is never stored directly by us.

When you sign up to our newsletter, we collect your email address. We use this to send you updates about new products, collections, and occasional news from the workshop. We will only do this with your explicit consent, and you can unsubscribe at any time using the link in any email we send.

When you visit our website, we and Wix collect certain technical data automatically, including your IP address, browser type, pages visited, and time spent on the site. This is used for analytics and to improve the website experience. See the Cookies section below for more detail.

When you contact us, we retain the content of your message and your contact details in order to respond to your enquiry and maintain a record of our correspondence.

Our lawful basis for processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

  • Contract - processing your order and managing your purchase

  • Consent - sending marketing emails and placing non-essential cookies

  • Legitimate interests - fraud prevention, website security, and improving our service

  • Legal obligation - retaining transaction records as required by HMRC

Who we share your data with

We do not sell or rent your personal data to any third party. We share data only where necessary to operate our business:

  • Wix - our website platform and hosting provider, acting as a data processor on our behalf. Wix is certified under appropriate data protection frameworks and processes data in accordance with UK GDPR.

  • Payment processors - to handle transactions securely

  • Postal and courier services - to deliver your order

  • Email marketing platforms - to manage newsletter subscriptions, only where you have given consent

All third parties are required to handle your data securely and in accordance with applicable data protection law.

Cookies

Our website uses cookies, small text files placed on your device, to help the site function and to understand how it is used. Wix also places cookies as part of its platform operation.

Essential cookies are required for the website to work and cannot be switched off. They do not collect personal data.

Analytics cookies help us understand how visitors use the site, which pages are most visited, how long people stay, and where they arrive from. We use this information to improve the website. These cookies are only placed with your consent, which you can manage via the cookie banner on your first visit.

You can also control and delete cookies at any time through your browser settings. For more information, visit www.aboutcookies.org.

How long we keep your data

We retain personal data only for as long as necessary for the purpose it was collected:

  • Order and transaction records - 7 years, as required by HMRC

  • Customer correspondence - up to 3 years after last contact

  • Newsletter subscriptions - until you unsubscribe or withdraw consent

  • Analytics data - in aggregated, anonymised form only, with no fixed retention period

Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Access - Request a copy of the data we hold about you

  • Rectification - Ask us to correct inaccurate or incomplete data

  • Erasure - Request deletion of your data where we have no legal reason to retain it

  • Objection - Object to processing based on legitimate interests

  • Restriction - Ask us to limit how we use your data in certain circumstances

  • Portability - Receive your data in a structured, commonly used format

To exercise any of these rights, please contact us using the details below. We will respond within one calendar month.

How we protect your data

This website is hosted on Wix, which provides SSL encryption, secure data storage, and regular security updates as standard. We access customer data only when necessary and limit access to authorised personnel only.

While we take all reasonable steps to protect your data, no method of transmission over the internet is entirely secure. If you have any concerns about the security of your data, please contact us immediately.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The most current version will always be available on this page, with the date of last update shown at the top. We encourage you to review it periodically.

Contact us about your data. If you have any questions about this policy or wish to exercise your rights, please get in touch at info@starshop.online. We aim to respond to all data-related enquiries within one working day.

bottom of page