Privacy Policy

Effective Date: 2025

This Privacy Policy explains how The Isolate Shop ("we", "us", or "our") collects, uses, and protects your personal data when you visit or make a purchase from The Isolate Shop (“our website”).

We are committed to safeguarding your privacy and complying with all applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR).

1. Who We Are

Data Controller: The Isolate Shop
Contact Email: info@theisolateshop.com

2. What Data We Collect

We may collect and process the following types of personal data:

• Identity Data – full name, username, title.

• Contact Data – billing address, delivery address, email address, phone number.

• Financial Data – limited payment information (note: card details are processed securely by third-party payment processors).

• Transaction Data – order history and purchase details.

• Technical Data – IP address, browser type, operating system, device type, referral source.

• Usage Data – information about how you use our website, including page interaction and session duration.

• Marketing & Communications Data – your preferences in receiving marketing emails or newsletters.

We do not collect or store any special categories of personal data (e.g. health data, biometric data).

3. How We Use Your Data

We use your personal data to:

• Process and deliver your orders

• Communicate with you about your order

• Provide customer support

• Improve and personalise your website experience

• Send you updates, promotions, and marketing (only if you opt in)

• Meet legal obligations (e.g., tax, fraud prevention)

We rely on the following legal bases:

• Contract – to fulfil our obligations to you.

• Legal obligation – for tax and compliance purposes.

• Consent – for marketing communications.

• Legitimate interest – to manage and improve our business.

4. How We Share Your Data

We never sell your personal data. However, we may share your data with trusted third parties, including:

• Royal Mail and other delivery services (for shipping)

• Payment processors (e.g., Stripe, PayPal)

• Professional service providers (e.g., hosting, IT, legal, accounting)

• Regulators or legal authorities when required by law

All third parties are required to respect the security of your personal data and treat it in accordance with the law.

5. Data Retention

We retain your data only for as long as necessary to fulfill the purposes we collected it for, including legal, tax, and accounting obligations.

• Order information: kept for 6 years (HMRC requirement)

• Marketing data: until you unsubscribe or withdraw consent

6. Your Rights

Under the UK GDPR, you have the right to:

• Access your personal data

• Correct inaccurate or incomplete data

• Request deletion ("right to be forgotten")

• Object to processing

• Restrict processing

• Data portability

• Withdraw consent at any time (for marketing)

• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, contact us at info@theisolateshop.com

7. Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. These include encrypted connections (SSL), secure payment gateways, and access controls.

8. Cookies

Our website uses cookies to improve your browsing experience and analyse traffic. You can manage cookie preferences through your browser settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. All updates will be posted on this page with the revised effective date. We encourage you to review it regularly.