Privacy Policy
Collectables (trading name of Blaydon UK Limited)
Last updated: 23/09/2026.
This policy explains how Collectables collects and uses personal data when you visit collectables.co.uk, shop online or in our stores, contact us, receive marketing, enter a promotion or otherwise interact with us. It also explains your data-protection rights.
1. Who we are
Collectables is the trading name of Blaydon UK Limited (“Collectables”, “we”, “us” or “our”), registered in England and Wales under company number 08618367. Our VAT number is GB173661203 and our registered office is Units A & B, Patterson Street, Blaydon, Gateshead, NE21 5SD.
Blaydon UK Limited is the controller responsible for the personal data described in this policy. For data-protection enquiries, contact support@collectables.co.uk or 0191 499 1589, Monday to Friday, 9am to 5pm.
2. Personal data we collect
- Identity and contact data, including your name, billing and delivery addresses, email address and telephone number.
- Order and transaction data, including products purchased, order value, payment confirmation, delivery status, returns, refunds and purchase history.
- Account and preference data, including sign-in details, wishlists, saved preferences and marketing choices.
- Customer-service data, including correspondence, photographs or videos you send us, complaints and product-fault information. We do not record customer-service telephone calls.
- Technical and usage data, including IP address, browser, device information, online identifiers, approximate location, pages viewed, referring pages and interaction data.
- Marketing and profiling data, including campaign engagement, product interests, browsing behaviour and information used to select or measure advertising.
- Review, competition and promotion data, where you submit a review or take part in a competition, prize draw or promotion
- In-store data, which may include transaction records, returns information and CCTV images where CCTV is operated. Appropriate signs will be displayed where CCTV is in use.
Payment providers process your payment credentials. We do not store complete payment-card details on our own systems.
3. Where personal data comes from
|
Source |
Examples |
|
You |
Information supplied when creating an account, ordering, returning goods, subscribing to marketing, entering a promotion, submitting a review or contacting us. |
|
Automatically |
Cookies, similar technologies, server logs, analytics and device or browsing information generated when you use our website. |
|
Service providers and partners |
Payment confirmation, fraud-prevention results, delivery updates, advertising attribution and information from platforms through which you interact with us. |
|
Stores and customer-service channels |
Information created when we handle an in-store purchase, return, enquiry, complaint or other interaction. |
4. How and why we use personal data
Where we rely on legitimate interests, we consider the expected benefit, necessity of the processing and possible effect on your rights. You may object in certain circumstances; see Section 14.
|
Purpose |
Data used |
Lawful basis |
|
Process, fulfil and deliver orders |
Identity, contact, order, transaction and payment-confirmation data |
Performance of a contract |
|
Provide accounts, wishlists and saved preferences |
Identity, contact, account and preference data |
Performance of a contract; legitimate interests in providing requested account features |
|
Customer service, returns and complaints |
Identity, contact, order and correspondence data |
Performance of a contract; legal obligations; legitimate interests in resolving enquiries and protecting our business |
|
Prevent fraud and protect systems |
Identity, transaction, technical and usage data |
Legal obligations; legitimate interests in preventing fraud and maintaining security |
|
Accounting, tax and legal claims |
Order, transaction and correspondence data |
Legal obligations; legitimate interests in establishing, exercising or defending legal claims |
|
Send marketing and abandoned-basket communications |
Contact, marketing, order, browsing and preference data |
Consent where required; or the electronic-marketing soft opt-in and legitimate interests where lawfully available |
|
Personalise content and measure advertising |
Technical, usage, order and marketing data |
Consent for non-essential cookies or similar technologies; legitimate interests where permitted for subsequent measurement and improvement |
|
Request and manage reviews |
Identity, contact and order data |
Legitimate interests in obtaining customer feedback; consent where required |
|
Run competitions and promotions |
Identity, contact and entry data |
Performance of promotion terms; consent for optional marketing |
|
Improve services and understand performance |
Technical, usage, order and feedback data |
Consent where non-essential cookies are used; legitimate interests for aggregated analysis and service improvement |
|
Use AI-assisted business tools |
Minimum necessary correspondence or content data, normally anonymised or minimised |
Performance of a contract or legitimate interests in efficient customer service and content production, subject to appropriate safeguards |
|
In-store security and loss prevention |
CCTV images and incident information where applicable |
Legitimate interests in protecting customers, staff, premises and property |
5. Marketing communications
We use Omnisend to manage email and related marketing. We may send marketing where you have consented or, where the law permits, under the existing-customer “soft opt-in” for our own similar products. When the soft opt-in applies, you are given a clear opportunity to opt out when your details are collected and in every later message.
Marketing may include newsletters, product recommendations, birthday offers and abandoned-basket reminders. You can unsubscribe using the link in any marketing email or by contacting us. Opting out does not affect order confirmations, delivery updates, safety notices or other service communications.
When you opt out, we retain the minimum information needed on a suppression list so that we can respect your choice.
6. Payments and fraud prevention
Online payments are processed through Shopify and supported providers, which may include PayPal, Klarna, Apple Pay, Google Pay, card schemes and acquiring banks. These organisations may process data as our processors or as independent controllers under their own privacy notices. They may carry out automated fraud and security checks. If a solely automated decision produces a legal or similarly significant effect, applicable safeguards and rights will apply.
Where you choose to pay using Klarna, Klarna will process your data to assess your application, including a soft credit check that does not affect your credit score, in accordance with Klarna's own privacy policy.
Shopify’s privacy information is available at https://www.shopify.com/legal/privacy.
7. Analytics, advertising and social media
Subject to your cookie choices, we may use Google Analytics and advertising services from Google, Meta and TikTok. These services may process online identifiers, IP address, device information, approximate location, browsing activity, ad interactions and conversion information. Although reports available to us may be aggregated, the underlying information can still be personal data.
Where you consent, we may securely hash limited customer information, such as an email address, before sharing it with an advertising platform for services such as enhanced conversions, audience matching or campaign measurement. Hashing reduces direct readability but does not necessarily make the information anonymous.
8. Cookies and similar technologies
Essential cookies support functions such as baskets, checkout, security, account sign-in and saved preferences. They do not require consent where they are strictly necessary.
Analytics, advertising and social-media cookies or similar technologies are intended to be used only after you consent through our cookie controls, unless a legal exemption applies. You can change or withdraw your choices at any time using the cookie-settings link on our website. Withdrawing consent does not affect processing already carried out lawfully.
Our Cookie Policy provides further details, including which cookies and similar technologies we use, who sets them, and how long they last.
9. Who we share personal data with
We work with a number of providers to run our business. Depending on how you interact with us, this may include:
|
Category |
Providers |
What we use them for |
|
Ecommerce and payments |
Shopify / Shopify Payments, PayPal, Klarna |
Running our online store, and processing payments, including Klarna's buy-now-pay-later / instalment options where you choose them at checkout. |
|
Marketing |
Omnisend |
Email marketing, newsletters and abandoned-basket messages. |
|
Reviews |
REVIEWS.io, Lipscore, Trustpilot |
Sending review invitations and collecting and displaying product and service reviews. |
|
Analytics and advertising |
Google, Meta, TikTok |
Website analytics, and advertising measurement and targeting, subject to your cookie choices. |
|
Website features |
Salesfire, Wishlist Plus, ProMap, Shogun |
On-site personalisation and search tools (Salesfire), our wishlist feature (Wishlist Plus, provided by Swym), our store finder (ProMap, provided by Rose Perl Technology), and page layout/building tools (Shogun). |
|
Delivery and fulfilment |
Evri, FedEx, Royal Mail / Click & Drop, Shiptheory |
Delivering orders and managing returns. Shiptheory helps us allocate orders to the right courier and generate shipping labels. |
|
Stock and reporting |
Caliq Sync / Caliq Pro, Windsor AI |
Keeping stock levels synchronised, and internal sales, marketing and performance reporting. |
|
Hosting, security and productivity |
Cloudflare, Microsoft 365 |
Website hosting and security, and internal business communication and productivity tools. |
|
AI tools |
Approved AI-assisted tools, including services supplied by OpenAI and Anthropic |
Helping draft customer communications, summarise information or create marketing content — see Section 10. |
We do not sell personal data. Some recipients act only on our instructions as processors. Others, including certain payment, advertising, social-media and review services, may act as independent controllers and provide their own privacy information.
- Professional advisers, insurers, auditors, regulators, law-enforcement bodies and courts where necessary or legally required.
- A buyer, seller or adviser involved in a proposed sale, restructuring or transfer of all or part of our business, subject to appropriate confidentiality protections.
10. AI-assisted tools
We may use approved AI-assisted tools connected to our store, including the ChatGPT (OpenAI) and Claude (Anthropic) Shopify connectors, to help draft customer communications, summarise information or create marketing content. We aim to remove or minimise identifying details before using these tools and do not use customer information to create marketing images unless there is a clear, lawful and necessary reason.
AI-generated or AI-assisted customer communications are subject to human oversight where appropriate. We require suitable contractual, security and international-transfer protections from providers that process personal data on our behalf. We do not use these tools to make solely automated decisions that produce legal or similarly significant effects on customers.
11. International transfers
Some providers may process personal data outside the United Kingdom. Before making a restricted transfer, we use an applicable lawful mechanism, which may include UK adequacy regulations, the UK–US data bridge, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. We also assess and apply supplementary safeguards where required.
You may contact us for further information about the safeguard used for a particular transfer. We may provide a summary or a suitably redacted copy where necessary to protect commercial or security information.
12. How long we keep personal data
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and reporting requirements. Our usual periods or criteria include:
- Order, payment and tax records: generally six years after the end of the relevant financial year.
- Customer-service, return and complaint records: normally for up to six years after the matter is closed where needed for legal claims, or for a shorter period where appropriate.
- Active account data: while the account remains active, followed by an appropriate period for security, legal and record-keeping purposes.
- Marketing records: while you remain subscribed or while another lawful marketing basis applies. Suppression details are kept as long as needed to respect an opt-out.
- Competition data: for the duration of the competition and a reasonable period afterwards for administration, audit and legal purposes.
- Cookie and analytics data: according to the expiry period stated in our Cookie Policy and provider settings.
- CCTV: footage is retained for no longer than 30 days, unless it is required for an incident, investigation, insurance matter or legal claim, in which case it may be retained for longer where necessary.
We may retain information for longer where required by law, a regulator, an investigation or a legal claim. We securely delete or anonymise it when it is no longer required.
13. Children
Our website and online ordering services are intended for adults aged 18 or over. We do not knowingly collect personal data directly from children for online ordering or marketing. If you believe a child has provided personal data to us, contact support@collectables.co.uk. Competitions and prize draws are open only to the age group stated in their specific terms and, unless stated otherwise, to people aged 18 or over.
14. Your rights
Depending on the circumstances, you may have the right to access your personal data; correct inaccurate information; request erasure; restrict processing; object to processing based on legitimate interests; receive certain information in a portable format; withdraw consent; and ask for safeguards in relation to certain solely automated decisions.
You have an absolute right to object to your personal data being used for direct marketing. These rights are not all absolute and legal exceptions may apply.
To exercise a right, contact support@collectables.co.uk. We may request information reasonably necessary to verify your identity. We normally respond within one month, although the law permits an extension for complex or numerous requests. We do not normally charge a fee, but may do so or refuse a request where the law allows, for example if it is manifestly unfounded or excessive.
You may complain to the Information Commissioner’s Office at https://ico.org.uk or 0303 123 1113. We would appreciate the opportunity to address your concern first, but you are not required to contact us before approaching the ICO.
15. Security
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. Access is limited to people and providers who need the information for authorised purposes. No internet service is completely secure, so please protect your account credentials and contact us if you suspect unauthorised use.
16. Changes to this policy
We may update this policy to reflect changes in our practices, providers or the law. The date at the top shows when it was last updated. Where a change materially affects how we use personal data, we will take reasonable steps to bring it to your attention where required.
17. Contact us
Email: support@collectables.co.uk
Telephone: 0191 499 1589, Monday to Friday, 9am to 5pm
Post: Blaydon UK Limited, Units A & B, Patterson Street, Blaydon, Gateshead, NE21 5SD