Privacy policy

About This Policy

CALVERN processes personal information to operate this clothing and accessories store, fulfil orders and assist customers. This policy explains that processing and your choices. For processing whose purposes and means we determine, we act as the data controller.

Our store is hosted by Shopify. Some processing carried out by Shopify is governed by its own privacy information, as explained below.

Information We Collect

• Contact and delivery information, including your name, email, billing address, delivery address and telephone number where provided.
• Order information, including items, sizes, colours, transactions, returns, refunds and payment status.
• Account information and preferences, where you create or use an account.
• Messages and information you provide when contacting support.
• Device and browsing information, such as IP address, browser type, device identifiers, pages visited and website interactions.
• Payment information processed by payment providers. Information available to us depends on the payment method and may include transaction references and limited payment details.

Where Information Comes From

We receive information directly from you, automatically through your interaction with the website, and from providers involved in payments, fraud prevention, fulfilment and delivery. Where applicable, analytics and marketing services may also supply information, subject to applicable privacy and consent requirements.

Purposes and Lawful Bases

• Contract: taking steps at your request before purchase, processing orders and payments, arranging delivery, managing returns and providing order-related assistance.
• Legal obligations: keeping records and responding to lawful requests where required.
• Legitimate interests: protecting the website, preventing fraud, resolving disputes and improving our services, where these interests are not overridden by your rights.
• Consent: processing for optional cookies or marketing where consent is required. You may withdraw consent without affecting processing that was lawful before withdrawal.

Service Providers and Disclosures

We share relevant information with providers needed to operate the store, including Shopify, hosting, payment processing, fraud prevention, fulfilment, shipping and customer support providers. Analytics, advertising and marketing providers may receive information where those services are used lawfully.

Information may also be disclosed where necessary to comply with law, protect legal rights or manage a business transfer, subject to applicable safeguards. We limit disclosures to what is appropriate for the relevant purpose.

Shopify

Shopify provides the platform supporting our store and processes information to provide its services. Where Shopify processes information for its own purposes, including eligible enhanced features, its own privacy policy applies.

Read the Shopify Consumer Privacy Policy and visit the Shopify Privacy Portal for information about Shopify's processing and related rights.

Cookies, Analytics and Marketing

Cookies and similar technologies support the basket, checkout, security and other website functions. Where enabled, additional technologies may remember preferences, measure performance or support advertising. See our Cookie Policy.

Where consent is legally required, optional technologies must not operate before consent is obtained. Merely visiting the website does not constitute consent. You can unsubscribe from marketing emails using the link provided; necessary order messages may still be sent.

Security and Retention

We use appropriate organisational and technical measures to protect personal information. No system or transmission method can be guaranteed completely secure. Please protect your account credentials and avoid sending sensitive payment details by email.

We retain information only for as long as needed for its purpose, including order fulfilment, account management, support, applicable record-keeping duties and resolving claims. Retention depends on the type of information, the relationship with you and applicable legal requirements. Information is then deleted or anonymised where appropriate.

International Processing

Shopify and other providers may process information outside the United Kingdom. Where UK law requires safeguards for an international transfer, those safeguards must apply. Contact us for information about safeguards relevant to your personal information.

Your Privacy Rights

Depending on the circumstances, you may request access, correction, deletion, restriction of processing or transfer of your information. You may withdraw consent where processing relies on it. Some rights are subject to legal conditions and exceptions.

To exercise your rights, email sac@calvern.com. We may need proportionate information to verify your identity. We normally respond within one month; any lawful extension will be explained.

You may complain to the Information Commissioner's Office. Contacting us first does not limit that right.

Your Right to Object

You can object at any time to processing for direct marketing, including related profiling. You may also object, on grounds relating to your circumstances, to processing based on legitimate interests. We will assess such objections under applicable law.

Children and External Websites

Our store is not directed at children, and we do not knowingly collect children's information for marketing. If you believe a child has provided information inappropriately, please contact us.

External websites have their own privacy practices. Review their policies before providing information; this policy governs our own processing.

Changes and Contact

We may update this policy as our services or legal requirements change. The current version will appear here, with additional notice where legally required.

For privacy enquiries, contact CALVERN at sac@calvern.com.