Privacy Policy
Last updated: 16 October 2026
This policy explains how Daniel James London uses your personal data when you visit danieljameslondon.com, create an account, buy from us, or contact us. We sell to customers in the United Kingdom only.
1. Who we are
Daniel James London is a business based in the United Kingdom. Daniel James London is the controller of your personal data, which means we decide how and why it is used.
- Email: enquiries@danieljameslondon.com
- ICO registration number: [ICO REGISTRATION NUMBER]
2. The personal data we collect
Information you give us - Contact details: name, email address, delivery and billing address, and mobile number if you give it to us. - Order details: what you bought, prices, delivery method, returns and refunds. We see payment confirmation only; we never see or store your full card details. - Account details: your login email and saved addresses, if you create an account. - Wishlist: items you save to your wishlist. - Messages: anything you include when you contact us. - Marketing preferences: whether you have signed up for, or unsubscribed from, our emails or texts.
Information collected automatically - Device and usage data: IP address, browser and device type, pages viewed, items added to your basket, and how you arrived at the site. This is collected through cookies and similar technologies; see our Cookie Policy. Non-essential cookies are only used if you agree to them.
Information from others - Payment and fraud-screening results from our payment providers. - Delivery status updates from our couriers.
3. How we use your data and our lawful basis
| What we do | Lawful basis under UK GDPR |
|---|---|
| Take, process and deliver your order, handle returns and refunds, and send order and delivery updates | Performance of a contract with you |
| Run your account and wishlist | Performance of a contract with you |
| Answer your questions and complaints | Performance of a contract, or our legitimate interest in providing good customer service |
| Keep tax and accounting records | Legal obligation |
| Prevent fraud and keep the site and your account secure | Our legitimate interests in protecting our business and customers |
| Send marketing emails and texts (see section 4) | Your consent, or the "soft opt-in" for existing customers (our legitimate interests, as permitted by PECR) |
| Use analytics, personalisation and marketing cookies | Your consent, given through our cookie banner |
| Understand how the site is used and improve it, using data that does not rely on non-essential cookies | Our legitimate interests in running and improving our shop |
| Establish, exercise or defend legal claims | Our legitimate interests |
Where we rely on legitimate interests, we have weighed them against your rights. You can object at any time (see section 9).
4. Marketing emails and texts
We will only send you marketing emails or texts: - if you have opted in, for example by ticking a box at checkout or signing up to our newsletter; or - if you have bought from us, or started to, and we gave you the chance to opt out at that point. In that case we only tell you about our own similar products, and every message gives you a simple way to opt out (the "soft opt-in").
You can unsubscribe at any time by using the link in any email, by following the opt-out instructions in any text message, or by emailing enquiries@danieljameslondon.com. Unsubscribing does not affect order and service messages, which we need to send. We never sell your details or pass them to other companies for their own marketing.
5. Who we share your data with
We share personal data only where needed, with these service providers:
| Provider | What they do | Their role |
|---|---|---|
| Shopify (Shopify International Ltd and its group) | Hosts our online shop, checkout, customer accounts, site analytics, email and SMS messaging (Shopify Messaging), and automation (Shopify Flow) | Processor |
| Shopify Payments and its payment partners (e.g. Stripe), plus any other payment methods shown at checkout, such as PayPal, Apple Pay or Google Pay | Take payments and screen for fraud | Payment providers act partly as independent controllers under their own privacy policies |
| Royal Mail (via Click & Drop) and UPS | Deliver your order. We share your name, address, email or phone number for delivery updates, and parcel details | Processor, or independent controller for their own legal and operational purposes |
| Consentmo | Displays our cookie banner and records your cookie choices | Processor |
| Hulk Apps (Advanced Wishlist) | Stores your wishlist | Processor |
| BF Size Charts | Shows size charts on product pages. It may process basic device data, but not customer details | Processor |
| Booster Page Speed Optimizer | Speeds up page loading. It processes technical device data | Processor |
| Intuit (QuickBooks Online) | Our accounting and bookkeeping | Processor |
| Report Pundit | Produces sales reports from our store data | Processor |
| Our accountant and professional advisers | Accounting, tax and legal advice | Independent controllers |
We may also share data: - if the law requires it, for example with HMRC or the police; - to protect our rights or prevent fraud; or - if the business is sold, with the new owner, who would have to use it in line with this policy.
We do not sell your personal data.
6. Transfers outside the UK
Some of our providers, including Shopify, Intuit and some app providers, store or access data outside the UK, for example in the EU, Canada or the United States. When that happens, we make sure the data is protected by one of the following: - UK adequacy regulations, including the UK–US "Data Bridge" for certified US companies; - the ICO's International Data Transfer Agreement; or - the UK Addendum to the EU Standard Contractual Clauses.
You can ask us for more details.
7. How long we keep your data
| Data | How long |
|---|---|
| Orders, invoices and payment records | 6 years from the end of the tax year they relate to (HMRC rules) |
| Customer account and wishlist | Until you close your account, plus up to 12 months |
| Customer service messages | Up to 2 years after the matter is resolved |
| Marketing list | Until you unsubscribe. We remove inactive contacts after 24 months with no opens, clicks or purchases. We keep a minimal "do not contact" record so that we respect your opt-out |
| Cookie consent records | Up to 12 months; individual cookies as listed in our Cookie Policy |
We then delete or anonymise the data.
8. How we keep your data secure
- Payments: handled by PCI-DSS-compliant providers. We never see your full card details.
- Encryption: our site uses TLS (HTTPS).
- Access: our admin accounts are protected by strong passwords and two-factor authentication, and only people who need access have it.
No system is completely secure. If a breach affects you and is likely to put you at high risk, we will tell you and the ICO where required.
9. Your rights
Under UK data protection law you have the right to: - be told how your data is used (this policy); - access a copy of your data; - have inaccurate data corrected; - have your data erased in certain circumstances; - restrict how we use your data in certain circumstances; - data portability, which means getting data you gave us in a reusable format; - object to our use of your data based on legitimate interests; - object to direct marketing at any time. We will always stop; - withdraw consent at any time, where we rely on consent. This does not affect anything we did before you withdrew; - not be subject to decisions based solely on automated processing that have legal or similarly significant effects. We do not make such decisions.
To use any of these rights, email enquiries@danieljameslondon.com. We may ask you to confirm your identity. We will reply within one month. This can be extended by up to two further months for complex requests, and we will tell you if so. There is normally no charge.
10. Complaints
If you have a concern, please contact us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: - Online: ico.org.uk/make-a-complaint - Telephone: 0303 123 1113 - Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
11. Children
Our shop is not intended for anyone under 18, and we do not knowingly collect children's data. If you think a child has given us their data, contact us and we will delete it.
12. Links to other sites
Our site may link to social media and other websites. Those sites have their own privacy policies, and we are not responsible for them.
13. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. If we make significant changes, we will tell you by email or on the site where appropriate.