Privacy Policy
PRIVACY POLICY
Last Updated: 14/09/2026
INTRODUCTION
This Privacy Policy explains how Sidders Official Merch Store ("we", "us", "our") collects, uses, shares and protects your personal information when you visit our website, place an order, or otherwise interact with us.
We process personal information in accordance with applicable UK data protection law, including the UK GDPR and Data Protection Act 2018.
1. INFORMATION WE COLLECT
When you purchase a product from our store, we may collect:
• Full name
• Billing address
• Shipping address
• Email address
• Telephone number (where provided)
• Payment and transaction information
• Order history
• Products purchased
• Communications with us
• Customer feedback and reviews
When you use our website, we may also collect certain technical information, including:
• IP address
• Browser and device information
• Operating system
• Pages visited
• Website usage information
• Cookie and similar technology data
2. HOW WE USE YOUR INFORMATION
We may use your personal information to:
• Process and fulfil your orders
• Deliver products to you
• Process payments
• Communicate with you about your orders
• Provide customer service
• Prevent fraud, misuse and security incidents
• Improve our products, website and customer experience
• Obtain genuine feedback about products you have purchased and your experience with us
• Invite customers to provide product ratings and reviews
• Verify that reviews relate to genuine purchases
• Publish reviews where appropriate and where you have agreed to publication
• Comply with our legal obligations
• Establish, exercise or defend legal claims
• Send marketing communications where permitted by law
3. POST-PURCHASE FEEDBACK AND REVIEWS
We have a legitimate interest in understanding customers' experiences with our products and services, identifying issues, improving our products and customer experience, and collecting genuine reviews from verified customers.
Following a purchase, we may therefore contact you, or use a service provider acting on our behalf to contact you, to request genuine feedback about your purchase or experience.
For this purpose, we may provide a feedback or review service provider with limited information reasonably necessary to contact you and identify the relevant purchase. This may include:
• Your first name
• Your telephone number and/or email address
• Limited order information
• The product you purchased
Where a third-party provider contacts you on our behalf, they must only use your information for the authorised purpose and in accordance with our instructions and applicable data protection requirements.
Feedback requests made under this process are intended to obtain genuine customer feedback and are not intended to be disguised promotional communications.
You are not required to provide feedback. You may decline a request, end a telephone call, or ask not to receive further feedback or review requests.
Where we rely on legitimate interests for this processing, you have the right to object to the processing of your personal information. Please contact us using the details at the end of this policy if you wish to object.
4. PUBLICATION OF REVIEWS
Providing feedback does not automatically mean that your personal information or feedback will be published.
Where appropriate, we or our review service provider may ask whether you are happy for your rating or feedback to be published as a verified review.
Where publication permission is requested, we will explain what information is intended to be displayed publicly.
We will not publicly display your telephone number, email address, postal address, payment information or private order information as part of a review.
Published reviews may include limited information such as your first name, star rating, review content, product purchased, review date and an appropriate verified-purchase indicator.
5. LEGAL BASES FOR PROCESSING
Under UK GDPR, we process personal information using one or more lawful bases depending on the particular activity.
These may include:
PERFORMANCE OF A CONTRACT
We process information where necessary to process, fulfil and administer your order.
LEGAL OBLIGATION
We process information where necessary to comply with obligations imposed on us by law.
LEGITIMATE INTERESTS
We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.
Our legitimate interests may include:
• Operating and improving our business
• Improving our products and customer experience
• Understanding genuine customer experiences
• Obtaining genuine post-purchase feedback
• Collecting and verifying genuine customer reviews
• Preventing fraud and misuse
• Protecting our business and customers
CONSENT
Where consent is the appropriate lawful basis, including for certain marketing activities, you may withdraw your consent at any time.
6. MARKETING COMMUNICATIONS
Where required, we will only send marketing communications where you have provided consent or where another lawful basis and applicable electronic marketing rules permit us to do so.
Marketing communications may include:
• New products
• Promotions
• Special offers
• Company updates
You can unsubscribe from marketing emails at any time using the unsubscribe link contained in the email.
A genuine request for feedback about a previous purchase will not be used to disguise advertising, cross-selling or promotional communications.
7. DISCLOSURE OF PERSONAL INFORMATION
We may share personal information with trusted service providers where reasonably necessary to operate our business and provide our services.
These may include providers involved in:
• Shopify/e-commerce services
• Payment processing
• Order fulfilment and delivery
• Website hosting and infrastructure
• Customer support
• Analytics
• Email and communications
• Post-purchase customer feedback and review collection
• Review verification, hosting and display
Where a service provider processes personal information on our behalf, we require appropriate data protection and confidentiality safeguards.
We do not sell our customer database or personal information to third parties.
8. REVIEW AND FEEDBACK SERVICE PROVIDERS
We may use specialist third-party providers to assist us in obtaining genuine customer feedback and collecting, verifying and displaying customer reviews.
Where such a provider acts as our data processor, it may only process customer information in accordance with our documented instructions and for authorised purposes.
Depending on the service being provided, limited customer and order information may also be processed by technology providers supporting telephone, email, messaging, hosting, database or review-platform functionality.
We seek to ensure appropriate contractual and data protection safeguards are in place when these services are used.
9. SHOPIFY
Our store is hosted using Shopify.
Shopify provides the e-commerce technology that enables us to operate our online store.
Personal information may therefore be processed through Shopify's systems and services.
Shopify processes personal information in accordance with its own applicable privacy terms and policies.
10. PAYMENTS
Payments are processed using Shopify Payments and/or other approved payment providers.
We do not intentionally store full payment-card details on our own servers.
Payment providers maintain their own security and data protection arrangements.
11. INTERNATIONAL DATA TRANSFERS
Some of our service providers or their supporting providers may process personal information outside the United Kingdom.
Where personal information is subject to a restricted international transfer, we take steps to ensure that an appropriate lawful transfer mechanism and safeguards are used where required by UK data protection law.
12. DATA SECURITY
We take appropriate technical and organisational measures designed to protect personal information against:
• Unauthorised access
• Unlawful disclosure
• Accidental loss
• Misuse
• Alteration
• Destruction
We also seek to limit access to personal information to people and service providers who reasonably require it for authorised purposes.
No method of internet transmission or electronic storage can be guaranteed to be completely secure.
13. DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to comply with applicable legal, accounting, dispute-resolution and regulatory requirements.
Information provided to service providers specifically for customer feedback or review outreach should only be retained for as long as reasonably necessary to carry out that activity, subject to any information that must legitimately be retained for purposes such as recording customer objections, demonstrating review authenticity or publication permission, resolving disputes, or complying with legal obligations.
When personal information is no longer required, it will be deleted, anonymised or otherwise appropriately disposed of.
14. YOUR DATA PROTECTION RIGHTS
Depending on the circumstances, UK data protection law may give you rights including the right to:
• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of your information
• Request restriction of processing
• Object to processing based on legitimate interests
• Object to direct marketing
• Request data portability where applicable
• Withdraw consent where processing relies on consent
• Make a complaint to the Information Commissioner's Office (ICO)
These rights are subject to the conditions and exemptions provided by applicable law.
15. COOKIES
Our website uses cookies and similar technologies for purposes including:
• Maintaining shopping-cart functionality
• Remembering preferences
• Website functionality and performance
• Analytics
• Marketing activities
Where consent is legally required before placing a non-essential cookie or similar technology, we will request that consent.
Please refer to our cookie settings or cookie information for further details.
16. CHILDREN'S PRIVACY
Our website is not intended for children under the age of 13.
We do not knowingly seek to collect personal information from children contrary to applicable law. If we become aware that information has been collected improperly, we will take appropriate steps to address it.
17. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our business, services, technology or legal obligations.
Where a change materially affects how we use personal information that we have already collected, we will take appropriate steps to bring that change to affected individuals' attention where required by law.
The current version of this Privacy Policy will be made available on our website.
18. CONTACT US
If you have questions about this Privacy Policy, how we use your personal information, or wish to exercise your data protection rights, please contact us through the contact details provided on our website.
You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator.