The short version
We collect only what we need to take your order, deliver it and support you afterwards. We do not sell your data to anyone. We never see your full card details. You can ask us at any time what we hold about you, ask us to correct it, or ask us to delete it.
1. Who we are
Affinity Collection operates affinitycollection.com and is the data controller for personal information collected through the site. For anything privacy-related, contact contact@affinitycollection.com.
2. What we collect and why
When you place an order
We collect your name, email address, phone number, delivery address and details of what you bought. We use this to process and deliver your order, send order confirmations and dispatch updates, handle returns and refunds, and meet our legal record-keeping obligations. The legal basis is performance of our contract with you.
When you pay
Card payments are handled by our payment provider over encrypted connections. We receive confirmation that payment succeeded and, for reference, the last digits of the card used — never your full card number, expiry date or security code.
When you join our newsletter
We store the email address you give us and use it to send occasional news about new arrivals. The legal basis is your consent, which you can withdraw at any time using the unsubscribe link in any email or by contacting us.
When you contact us
We keep the correspondence so we can resolve your query and refer back to it if you contact us again. The legal basis is our legitimate interest in providing customer service.
When you browse
Like nearly every website, our servers record technical information such as IP address, browser type and pages visited, used in aggregate to keep the site secure and understand how it is used.
3. Cookies
We use a small number of cookies that are essential for the site to work — mainly a session cookie that remembers what is in your bag while you browse. These essential cookies do not track you across other websites. If we introduce analytics or marketing cookies in future, we will ask for your consent first and update this policy.
4. Who we share data with
- Delivery carriers — your name, address and phone number, so your parcel can reach you and you can receive tracking updates.
- Payment providers — the details needed to process your payment securely.
- IT service providers — the companies that host our website and email, under contracts that require them to protect your data.
- Authorities — only where the law requires it.
We do not sell, rent or trade your personal information with anyone, for any purpose.
5. How long we keep data
Order records are kept for six years to meet tax and accounting obligations. Newsletter addresses are kept until you unsubscribe. Customer service correspondence is kept for up to two years after the matter is closed. Data that is no longer needed is deleted or anonymised.
6. How we protect data
The site is served over encrypted HTTPS connections, access to order data is restricted to those who need it, and our payment flow is designed so that card data never touches our servers.
7. Your rights
Under UK data protection law (UK GDPR and the Data Protection Act 2018) you have the right to access a copy of your data, have inaccurate data corrected, have your data deleted where there is no lawful reason to keep it, object to or restrict certain processing, receive your data in a portable format, and withdraw consent at any time.
To exercise any of these rights, email contact@affinitycollection.com. We respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
8. Children
The site is intended for adults. We do not knowingly collect personal data from anyone under 16.
9. Changes to this policy
If we change how we handle personal data, we will update this page and highlight significant changes on the site.