Privacy policy

Last updated: 29 October 2025

Cold Culture Club (“we”, “us”, “our”) operates this website and online store (the “Services”). We use Shopify to power our shop and payments. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our site, make a purchase, contact us, or otherwise use the Services. If there is any conflict between this Privacy Policy and our Terms of Service regarding personal information, this Privacy Policy will apply.

By using the Services you confirm that you have read and understood this Privacy Policy.

1. Who we are and how to contact us

Data controller: Cold Culture Club
Address: 1 Hazel Place, Hambleton, ENG, FY6 9FW, United Kingdom
Email: ColdCultureClub@gmail.com

2. What we collect

“Personal information” means information that identifies you or can reasonably be linked to you. The information we collect depends on how you interact with us.

Contact and account details: name, email address, phone number, billing and delivery addresses, account credentials, preferences.
Orders and transactions: items viewed, added to basket or wishlist, purchased, returned or exchanged, order numbers and delivery status.
Payments: payment method, payment confirmation and limited card details processed by our payment providers. We do not store full card numbers.
Communications: messages you send to customer support, reviews or survey responses.
Device and usage data: IP address, device identifiers, browser type, pages viewed, referring pages, timestamps, and cookie data.
Marketing preferences and inferences: your choices for marketing and reasonable inferences about your product interests.

Sources of personal information

Directly from you when you browse, buy, create an account, or contact us.
Automatically through cookies, pixels, and similar technologies.
From service providers and partners such as Shopify, payment processors, fulfilment and shipping providers, analytics and advertising partners, where permitted by law.

We do not intentionally collect special category data through the Services.

3. How and why we use your information, and our lawful bases

We process personal information only where we have a lawful basis under UK GDPR and EU GDPR.

Provide and operate the Services such as processing orders and payments, shipping, returns, account management and site functionality.
- Lawful bases: Contract, Legitimate interests.
Customer support and service communications such as order updates or responses to your enquiries.
- Lawful bases: Contract, Legitimate interests.
Personalisation and analytics to remember preferences, recommend products, understand performance and improve our site and products.
- Lawful bases: Legitimate interests. Consent where required for certain cookies.
Marketing and advertising including email or SMS marketing with your consent, and on-site or off-site advertising and measurement.
- Lawful bases: Consent for email or SMS where required. Legitimate interests for some advertising activities, subject to your choices.
Security and fraud prevention including account authentication, fraud detection and prevention, system monitoring and abuse prevention.
- Lawful bases: Legitimate interests, Legal obligation.
Legal compliance including tax and accounting, responding to lawful requests, handling disputes and enforcing terms.
- Lawful bases: Legal obligation.

You can withdraw consent at any time, for example by using the unsubscribe link in our emails or by updating cookie choices. Withdrawal does not affect processing carried out before the withdrawal.

4. Cookies and similar technologies

We and our partners use cookies, pixels and similar technologies to run the site, remember your choices, analyse performance and deliver or measure advertising. You can manage non-essential cookies through our cookie banner or your browser and device settings. Some site features will not work without certain cookies. For more details, see our Cookie settings or policy if provided.

5. How we share information

We share personal information only when necessary for the purposes described above and subject to appropriate safeguards.

Shopify provides our store platform, hosting, checkout, payments, analytics and enhanced features that may combine data across merchants to improve the platform and protect the ecosystem. For some activities Shopify acts as an independent controller. Refer to Shopify’s privacy pages, including the Consumer Privacy Policy and Privacy Portal, to learn how Shopify processes data and to exercise rights with Shopify where applicable.
Service providers including hosting and IT, payment processors, fraud prevention, fulfilment and shipping, customer support, email and SMS platforms, analytics and advertising measurement.
Advertising and marketing partners to deliver and measure ads, where permitted by law and your preferences.
Business transfers such as a merger, acquisition or restructuring.
Legal and safety to comply with laws, enforce terms, protect rights and prevent fraud or abuse.
With your direction or consent for example social logins, reviews or competitions.

We do not sell personal information. In some regions targeted advertising may be treated as “sharing”. You can control this through cookie settings and platform preferences.

6. International transfers

We and many of our providers, including Shopify, may process your data outside the UK and the EEA. Where we transfer personal information internationally we use appropriate safeguards such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, or we transfer to countries recognised as adequate by the UK or EU.

7. Retention

We keep personal information only as long as necessary for the purposes described in this Policy. Typical examples include:

orders and records kept for tax and accounting for up to six years in the UK;
customer service records kept while your account is active and for a reasonable period after;
analytics data kept for a shorter period where possible.
When information is no longer needed we will delete or anonymise it.

8. Security

We use appropriate technical and organisational measures to protect personal information. No method of transmission or storage is completely secure. Please keep your account credentials confidential and contact us if you suspect unauthorised activity.

9. Your rights

Depending on your location, you may have the following rights, subject to legal limits and verification:

Access or know what personal information we hold about you.
Rectify inaccurate or incomplete information.
Erase personal information in certain circumstances.
Portability to receive your data in a portable format and have it sent to another controller where feasible.
Object to certain processing, including direct marketing, or request restriction.
Withdraw consent where we rely on consent.

To exercise your rights contact us at ColdCultureClub@gmail.com. You can also manage marketing preferences by using the unsubscribe link in our emails. We will not discriminate against you for exercising your rights.

If you are in the UK or EEA you also have the right to complain to your local data protection authority. In the UK the supervisory authority is the Information Commissioner’s Office.

For information that Shopify processes as an independent controller, please use Shopify’s privacy pages to exercise your rights with Shopify.

10. Children

The Services are not intended for children under the age of majority in your jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will delete it where required.

11. Third-party websites and features

Our Services may contain links to third-party websites, plug-ins or features. We are not responsible for their privacy or security practices. Review their policies before providing personal information.

12. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date and will take additional steps where required by law.