Privacy Policy

Privacy Policy

This Privacy Policy explains how Edith York collects, uses, shares and protects your personal data when you visit our website or place an order. We are committed to handling your data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

This policy was last updated in August 2026.

Who is responsible for your data

The data controller is Takeover Enterprises LLC, registered in the State of Wyoming, United States, with its registered office at 30 N Gould St Ste R, Sheridan, WY 82801, United States. If you have any questions about this policy or wish to exercise your rights, please contact us at info@edithyork.uk.

What data we collect

• Your name;
• your delivery and billing address;
• your email address and telephone number;
• your order details and purchase history;
• payment information, which is processed securely by our payment provider (we do not store full card details);
• technical and browsing data, including cookies, device information and how you use our website.

How we use your data and our legal basis

• To process and deliver your orders — legal basis: performance of a contract with you.
• To handle payments, refunds and returns — legal basis: performance of a contract and compliance with a legal obligation.
• To meet legal and accounting obligations (for example, retaining transaction records for tax) — legal basis: legal obligation.
• To respond to your enquiries and provide customer support — legal basis: legitimate interests in running our business and helping our customers.
• To improve and secure our website and prevent fraud — legal basis: legitimate interests.
• To send marketing communications — legal basis: consent (which you may withdraw at any time).
• To set non-essential cookies and similar technologies — legal basis: consent.

Who we share your data with

We share your data only with trusted processors who help us operate our business, and only to the extent necessary. These include:

• Shopify, which hosts our online store and processes order data;
• our delivery partners, Royal Mail and Evri, to fulfil and deliver your orders;
• our payment providers, including PayPal and our card payment processor, to take payment securely.

We do not sell your personal data to third parties.

International transfers

Some of our processors may store or process data outside the United Kingdom. Where this happens, we ensure appropriate safeguards are in place, such as an adequacy decision recognised by the UK or the use of standard contractual clauses (the UK International Data Transfer Agreement or Addendum), so that your data receives an equivalent level of protection.

How long we keep your data

We keep your personal data only for as long as necessary for the purposes described above. Order and transaction records are generally retained for at least six years to comply with tax and accounting law. Marketing data is kept until you withdraw your consent. Browsing and cookie data is kept for shorter periods, as set out in our cookie information.

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data ("right to be forgotten");
• restrict how we process your data;
• data portability;
• object to processing based on our legitimate interests, and to direct marketing at any time;
• withdraw consent at any time, where our processing is based on consent.

To exercise any of these rights, contact us at info@edithyork.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk, although we would welcome the chance to resolve your concern first.

Cookies and PECR

We use cookies and similar technologies on our website. Essential cookies are necessary for the site to function (for example, to keep items in your basket and process orders) and do not require your consent. Non-essential cookies, such as those used for analytics and marketing, are only set with your consent, in line with PECR. You can manage or withdraw your consent at any time through our cookie settings or your browser controls.

Contact

For any privacy matter, or to exercise your rights, please email us at info@edithyork.uk.