Privacy Policy

Introduction
Welcome to the Shadow Spirits Privacy Policy.
At Shadow Spirits Ltd (“Shadow Spirits”, “we”, “us”, “our”), we are committed to protecting your personal information and respecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you visit our website or interact with us, as well as your privacy rights and how the law protects you.
This website is not intended for children, and we do not knowingly collect data relating to children.
1. Important Information and Who We Are
Purpose of This Policy
This policy provides information on how we handle your personal data, including when you purchase a product, create an account, or join the Shadow Spirits Society Loyalty Programme. It should be read alongside any other privacy notices we may provide.
This policy supplements other notices and is not intended to override them.
Controller
Shadow Spirits Ltd is the controller responsible for your personal data.
Contact Details
If you have any questions about this policy or your personal data, please contact us:
  • Post:
    Shadow Spirits Ltd
    United 20
    Hirwaun Industrial Estate
    Aberdare, Rhondda Cynon Taff, United Kingdom
Changes to This Policy
We review this policy regularly.
Please keep us updated if your personal information changes.
Third-Party Links
Our website may include links to third-party websites, plugins, and applications. Clicking on these may allow others to collect or share your data. We are not responsible for their privacy policies and encourage you to read theirs when you leave our site.
2. The Data We Collect About You
We collect personal data, meaning information that can identify you. This may include:
  • Identity Data (e.g., name, username, date of birth, gender)
  • Contact Data (e.g., billing/delivery address, email, phone numbers)
  • Financial Data (e.g., payment details)
  • Transaction Data (e.g., purchases and payments)
  • Technical Data (e.g., IP address, browser type, device information)
  • Profile Data (e.g., username, order history, preferences)
  • Usage Data (e.g., website activity)
  • Marketing and Communications Data (e.g., marketing preferences)
  • Review Data (e.g., customer feedback and reviews)
We may also collect Aggregated Data (e.g., statistical or demographic data) which is not personal unless it can identify you.
We do not collect special categories of personal data (e.g., health information) or data relating to criminal convictions.
If You Fail to Provide Personal Data
If you do not provide necessary personal data, we may be unable to fulfill your purchase or other services.
3. How We Collect Your Personal Data
We collect personal data through:
  • Direct Interactions — when you purchase products, create an account, join our loyalty programme, enter promotions, or contact us.
  • Automated Technologies — such as cookies, server logs, and analytics tools.
  • Third Parties — including payment processors, website support services (e.g., Shopify), analytics providers (e.g., Google), and publicly available sources.
4. How We Use Your Personal Data
We use your personal data only when permitted by law. The most common legal bases are:
  • To fulfill a contract with you
  • For our legitimate business interests (balanced against your rights)
  • To comply with legal obligations
  • Based on your consent (for example, for marketing communications)
How We Use It
Purpose
Data Used
Legal Basis
Register you as a customer
Identity, Contact
Contract
Process and deliver your order
Identity, Contact, Financial, Transaction, Marketing and Communications
Contract; Legitimate Interests (debt recovery)
Manage our relationship
Identity, Contact, Profile, Marketing and Communications
Contract; Legal Obligation; Legitimate Interests
Administer competitions and surveys
Identity, Contact, Profile, Usage, Marketing and Communications
Contract; Legitimate Interests
Administer and protect our website
Identity, Contact, Technical
Legitimate Interests; Legal Obligation
Deliver marketing and content
Identity, Contact, Profile, Usage, Marketing and Communications, Technical
Legitimate Interests
Improve our services and website
Technical, Usage
Legitimate Interests
Loyalty Programme management
Identity, Contact, Technical, Usage, Profile, Marketing and Communications
Contract; Legitimate Interests
Marketing Communications
You will receive marketing from us if you have:
  • Requested information or purchased goods
  • Not opted out of marketing communications
We will get your explicit consent before sharing your information with third parties for their own marketing.
Opt-Out: You can opt out at any time by contacting us.
Cookies
We use cookies to improve your experience. You can set your browser to refuse cookies. For details, see our Cookie Policy.
5. Disclosures of Your Personal Data
We may share your data with:
  • Service providers (e.g., payment processors, delivery partners)
  • Professional advisors (e.g., lawyers, accountants)
  • Government bodies (e.g., HMRC)
  • Affiliates within our corporate group
  • Third parties during a business sale, merger, or restructure
  • With your consent
All third parties are required to respect the security and confidentiality of your data.
6. International Transfers
If we transfer your data outside the UK, we ensure it receives an equivalent level of protection, either through adequacy decisions or approved contractual terms.
Contact us for details on specific safeguards in place.
7. Data Security
We have implemented security measures to prevent unauthorized access, loss, or misuse of your data.
Only authorised personnel can access your data, and they are subject to confidentiality obligations.
We also have procedures in place to handle any suspected data breaches.
8. Data Retention
We retain your personal data only as long as necessary to:
  • Fulfill the purposes we collected it for
  • Comply with legal, regulatory, tax, accounting, or reporting obligations
  • Resolve disputes or enforce agreements
Retention periods depend on the type of data and the purpose of its collection.
9. Your Legal Rights
Under UK data protection law, you may have rights to:
  • Request access to your personal data
  • Request correction of your data
  • Request erasure (deletion) of your data
  • Object to or restrict processing
  • Request transfer of your data
  • Withdraw consent at any time (where consent is the basis for processing)
To exercise your rights, please contact us at info@shadowspirits.co.uk.
Last updated: 30th May 2025