Privacy Policy
This Privacy Policy explains how MOORE & SON (HOLYWELL) LIMITED(“we”, “us”), the data controller, collects, uses and protects your personal data when you visit https://mooreholywell.shop or buy from us. We comply with the UK GDPR and EU GDPR, and with the California Consumer Privacy Act (CCPA/CPRA) for California residents.
Data controller
MOORE & SON (HOLYWELL) LIMITED, Abbots Hey Ffordd Y Graig, Lixwm, Holywell, United Kingdom, CH8 8LY. Privacy contact: support@mooreholywell.shop.
What data we collect
- Identity and contact data: name, email, phone, billing and shipping address.
- Order data: items purchased, order value, order history.
- Payment data: processed by our payment providers; we receive confirmation and the last digits of your card, but not your full card number.
- Technical data: IP address, device and browser type, and cookie data (see our Cookie Policy).
- Communications: messages you send us via forms, email or phone.
How and why we use your data (legal bases)
- To perform our contract with you: process and deliver orders, handle returns and provide support.
- Legitimate interests: to run, secure and improve our store and prevent fraud.
- Consent: for non-essential cookies and any marketing emails; you may withdraw consent at any time.
- Legal obligation: to keep tax and accounting records.
Who we share data with
We share data only with processors who help us run the store, under contract:
- Stripe and PayPal — payment processing.
- Shipping carriers — to deliver your order and provide tracking.
- Email provider (e.g. Resend) — to send order and support emails.
- Analytics and bot protection (e.g. Cloudflare) — where you have consented.
We do not sell your personal data for money.
International transfers
We are based in the United Kingdom and some processors are in the United States or elsewhere. Where data is transferred outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
How long we keep data
We keep order and tax records for as long as required by law (generally up to 7 years), and other data only as long as needed for the purpose collected.
Your rights (GDPR)
If you are in the UK or EEA, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to processing;
- data portability;
- withdraw consent at any time;
- complain to your data protection authority (in the UK, the ICO).
To exercise any right, email support@mooreholywell.shop. We respond within 30 days.
Your rights (California — CCPA/CPRA)
California residents have the right to know what personal information we collect and how it is used, to request deletion, to correct inaccurate information, and to opt out of the “sale” or “sharing” of personal information, without discrimination.
Do Not Sell or Share My Personal Information. We do not sell your personal information for money. To opt out of any sharing for cross-context behavioural advertising, you can decline non-essential cookies in our cookie banner, email us at support@mooreholywell.shop, or enable the Global Privacy Control (GPC) signal in your browser, which we treat as a valid opt-out request.
Cookies
We use cookies as described in our Cookie Policy. You can accept, reject, or manage non-essential cookies at any time via the cookie banner.
Data security and breaches
We use HTTPS encryption and work only with reputable processors. In the event of a personal data breach that is likely to affect your rights, we will notify the relevant authority and, where required, you, without undue delay.
Children
Our store is not directed at children and we do not knowingly collect their data.
Changes and contact
We may update this policy; the date above shows the current version. Privacy questions: support@mooreholywell.shop · Abbots Hey Ffordd Y Graig, Lixwm, Holywell, United Kingdom, CH8 8LY.