Privacy policy
PRIVACY POLICY
Last updated: March 25, 2026
1. Who We Are
This website is operated by Alley Market UK ("we", "us", "our").
We are the data controller of your personal information under applicable data protection laws in the United Kingdom.
Contact details:
Email: support@alleymarket.uk
Address: 123 Ibsley Gardens, SW15 4NQ, Wandsworth, London
2. Personal Information We Collect
We may collect and process the following categories of personal data:
- Contact details: name, billing/shipping address, email, phone number
- Order information: products purchased, transactions, returns
- Account data: login details, preferences
- Communications: messages sent to customer support
- Technical data: IP address, browser, device information
- Usage data: how you interact with our website
3. How We Collect Your Data
We collect data:
- Directly from you (e.g. when placing an order)
- Automatically (via cookies and tracking technologies)
- From service providers (e.g. Shopify, payment processors)
4. Legal Bases for Processing (UK GDPR)
We process your personal data based on:
- Contract – to process and deliver your orders
- Legal obligation – for accounting and tax purposes
- Legitimate interests – to improve services, prevent fraud
- Consent – for marketing communications and non-essential cookies
5. How We Use Your Data
We use your data to:
- Process and deliver orders
- Manage your account
- Provide customer support
- Improve our website and services
- Prevent fraud and ensure security
- Send marketing communications (only where permitted by law)
6. Marketing Communications
We may send you marketing emails if:
- You have given consent, or
- You purchased from us and did not opt out (soft opt-in, where applicable)
You can unsubscribe at any time via the link in our emails.
7. Payments
We do not store your payment card details.
Payments are processed securely by third-party providers (e.g. Shopify Payments, PayPal), who handle your data in accordance with their own privacy policies.
8. Cookies
We use cookies and similar technologies to:
- Ensure website functionality
- Analyse traffic
- Personalise content and advertising
You can manage your cookie preferences through our cookie banner.
For more details, see our Cookie Policy.
9. Sharing Your Data
We may share your personal data with:
- Shopify (our ecommerce platform)
- Payment providers
- Delivery companies
- IT and analytics providers
- Marketing partners (only where lawful)
We require all third parties to respect your data and process it securely.
10. International Transfers
Your data may be transferred outside the UK.
Where this happens, we ensure appropriate safeguards are in place, such as:
- UK International Data Transfer Agreement (IDTA)
- Standard Contractual Clauses
11. Data Retention
We retain your data only as long as necessary:
- Orders & financial records: up to 6 years (legal requirement)
- Account data: until account deletion
- Marketing data: until you withdraw consent
12. Your Rights
Under UK data protection law, you have the right to:
- Access your personal data
- Request correction
- Request deletion
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent at any time
To exercise your rights, contact us using the details above.
13. Complaints
If you are not satisfied, you can contact us first.
You also have the right to lodge a complaint with the
Information Commissioner's Office (ICO).
14. Children
Our services are not intended for children under the age of 13, and we do not knowingly collect their personal data.
15. Third-Party Links
Our website may contain links to other websites.
We are not responsible for their privacy practices.
16. Changes to This Policy
We may update this Privacy Policy from time to time.
Updates will be posted on this page with a revised date.
17. Shopify
Our store is hosted by Shopify, which processes personal data on our behalf.
For more information, see Shopify’s Privacy Policy.