Privacy Policy

Privacy Policy

Last updated: 8 September 2025

This Privacy Policy explains how The Cowboys Shop (“we”, “us”, “our”) collects, uses, shares and protects your personal information when you visit our website, place an order or contact us. We comply with the UK General Data Protection Regulation (UK GDPR) and applicable data protection laws. By using this site, you agree to this Policy.

1. Who we are & how to contact us

The data controller is The Cowboys Shop. If you have questions or would like to exercise your privacy rights, contact us at contact@the-cowboys-shop.com.

2. Personal data we collect

  • Information you provide: name, billing and delivery addresses, email, phone, account details, order and return details, messages to customer service, marketing preferences.
  • Payment information: processed by our payment providers (e.g., Shopify Payments, PayPal, card processors). We do not store full card numbers or security codes.
  • Device & usage data: IP address, device/browser type, pages viewed, time stamps, approximate location, referring URLs, cookies and similar technologies.
  • Information from partners: delivery updates from carriers, fraud-prevention signals, analytics and advertising partners (subject to your cookie choices).

3. How we use your data & legal bases

  • To operate the site and provide our services (create your account, process and deliver orders, handle returns, customer support). Legal basis: performance of a contract.
  • To maintain security, prevent fraud, and keep records. Legal basis: legitimate interests and/or legal obligation.
  • To send service messages (order updates, policy changes). Legal basis: performance of a contract/legal obligation.
  • To send marketing communications (only if you opt in or as permitted for existing customers). You can unsubscribe at any time. Legal basis: consent and/or legitimate interests (soft opt-in where permitted).
  • Analytics and personalised advertising via cookies/pixels where enabled (e.g., to measure performance and show relevant products). Legal basis: consent.
  • To comply with law (tax, accounting, reporting, consumer rights). Legal basis: legal obligation.

4. Cookies & similar technologies

We use cookies, pixels and local storage to run the site, remember your preferences, measure performance and, if you consent, deliver personalised advertising.

  • Strictly necessary: required for cart, checkout, security.
  • Analytics: help us understand site usage and improve performance.
  • Marketing: used to show relevant ads and measure campaigns.

5. Sharing your data

We share personal data only as needed to run our business:

  • Platform & hosting (e.g., Shopify) to operate the store.
  • Payment providers to process payments securely.
  • Fulfilment partners & carriers to prepare and deliver orders.
  • Customer support & marketing tools (email service providers, helpdesk, review apps) to communicate with you.
  • Analytics/advertising partners (only if you consent to relevant cookies).
  • Professional advisers and authorities (accountants, regulators) where required by law.

Service providers act under contract and must protect your data and use it only for our instructions.

6. International transfers

Your data may be processed outside the UK/EEA (for example, by Shopify or global service providers). Where this occurs, we use lawful safeguards such as adequacy decisions or the UK/EU Standard Contractual Clauses. Contact us if you would like more information.

7. Data retention

  • Orders and invoices: kept for up to 6 years (or longer if required) for tax and accounting.
  • Customer accounts: kept while active. We may deactivate accounts that remain inactive for a prolonged period.
  • Marketing data: kept until you unsubscribe or we delete it after a period of inactivity.
  • Cookies: retained according to their individual lifetimes (see Cookie Policy).

8. Security

We implement technical and organisational measures appropriate to the risk (encryption in transit, access controls, backups). No system is 100% secure; please protect your account credentials and contact us if you suspect misuse.

9. Your rights

Under data protection law, you may have the right to access, rectify, erase, restrict or object to processing, and to data portability. Where we process data based on consent, you can withdraw it at any time. To exercise your rights, email contact@the-cowboys-shop.com.

10. Children

Our site is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided data to us, please contact us so we can delete it.

11. Third-party links

Our site may contain links to third-party websites. We are not responsible for their content or privacy practices. Please review their privacy notices.

12. Changes to this Policy

We may update this Policy from time to time. The version posted on this page is the current version. Significant changes will be highlighted where appropriate.

13. Contact

Questions about this Policy or your data? Email us at contact@the-cowboys-shop.com.