Spiral Seven Ltd (“Spiral Seven”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal information we collect when you visit or buy from www.spiralseven.com (the “Site”), how we use and share it, how long we keep it, and the rights you have under UK data protection law. We are the “data controller” responsible for your personal information.

Who we are

  • Data controller: Spiral Seven Ltd (company no. 15536370)
  • Address: 26A Westgate Arcade, Halifax, West Yorkshire, HX1 1DJ
  • Email: sales@spiralseven.com
  • Telephone: 01422 362022

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). The supervisory authority for data protection in the UK is the Information Commissioner’s Office (ICO).

1. Information we collect

Information you give us — when you place an order, create an account, sign up to our marketing, leave a review, contact us or otherwise interact with us, you may provide: your name, billing and delivery address, email address, telephone number, order and payment details, marketing preferences, and the content of any messages you send us.

Information we collect automatically — when you use the Site we automatically collect certain “device information”, including your IP address, browser type and version, time zone, operating system, the pages and products you view, referring website or search terms, and how you interact with the Site. We collect this using cookies and similar technologies (such as log files, tags, web beacons and pixels). Please see our Cookie Policy for details.

Information from third parties — we may receive information about you from our payment providers, fraud-prevention services, delivery carriers, and the advertising and analytics platforms we use.

We do not knowingly collect special category data (such as health or ethnicity) and we ask that you do not provide it to us.

2. How we use your information and our lawful bases

Under data protection law we must have a lawful basis for using your personal data. We use your information for the following purposes:

  • To process and fulfil your orders — including taking payment, arranging delivery, managing returns and exchanges, and sending order confirmations and updates. Lawful basis: performance of our contract with you.
  • To manage your account and provide customer service — responding to your enquiries and keeping records of our dealings with you. Lawful basis: contract and our legitimate interests in running our business.
  • To prevent fraud and keep the Site secure — screening orders for risk and protecting against misuse. Lawful basis: our legitimate interests and compliance with our legal obligations.
  • To send you marketing — emails, SMS and other updates about our products, offers and news, where you have asked to receive them or are an existing customer who has not opted out. Lawful basis: your consent, or our legitimate interests in marketing to existing customers. You can opt out at any time.
  • To improve the Site and our marketing — using analytics and advertising tools to understand how customers use the Site and to measure and improve our campaigns. Lawful basis: your consent (for non-essential cookies) and our legitimate interests.
  • To meet our legal and accounting obligations — for example keeping records of sales for tax purposes. Lawful basis: compliance with our legal obligations.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and we will always handle your data fairly.

3. Marketing

We will only send you marketing where you have consented or where the law otherwise allows. You can withdraw your consent or unsubscribe at any time — click the unsubscribe link in any marketing email, reply STOP to any marketing SMS, or email sales@spiralseven.com. Opting out of marketing will not affect order-related messages we need to send you (for example dispatch and delivery confirmations).

4. Cookies

We use cookies and similar technologies to operate the Site, remember your preferences, analyse usage and deliver relevant advertising. You can control non-essential cookies at any time. For full details and how to manage your choices, please read our Cookie Policy.

5. Who we share your information with

We never sell your personal data. We share it only with trusted parties who help us run our business, and only as needed:

  • Shopify — our e-commerce platform, which hosts the Site and processes orders on our behalf.
  • Payment providers — including Shopify Payments, PayPal, Apple Pay, Google Pay and Klarna, to process payments securely. We do not store full card details ourselves.
  • Klarna — where you choose a Klarna payment option, we share contact and order details so Klarna can assess eligibility and provide its service (see the Klarna section below).
  • Delivery carriers — such as Royal Mail and our other couriers, to deliver your order and handle returns.
  • Email and SMS marketing provider — Klaviyo, which manages our marketing communications.
  • Reviews provider — Reviews.io, which collects and displays customer reviews.
  • Advertising and analytics partners — such as Google and Meta (Facebook and Instagram), to measure and improve our marketing and to show you relevant ads, subject to your cookie choices.
  • Professional advisers and authorities — we may disclose information where required to comply with the law, respond to a lawful request, enforce our terms, or protect our rights.

These parties are only permitted to use your data for the purposes we specify and in line with their own legal obligations.

6. International transfers

Some of our service providers are based outside the UK, including in the United States and the European Economic Area. Where we transfer your data outside the UK, we make sure it is protected by appropriate safeguards — such as a UK adequacy decision, the UK International Data Transfer Agreement, or equivalent contractual protections approved for use under UK law.

7. How long we keep your information

We keep your personal data only for as long as we need it. Order and transaction records are generally retained for six years to meet our legal and accounting (HMRC) obligations. Account information is kept while your account remains active. Marketing data is kept until you unsubscribe or ask us to delete it. After these periods we securely delete or anonymise your information.

8. Keeping your information secure

We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. Payment transactions are encrypted, and access to personal data is limited to those who need it. While no online transmission is ever completely secure, we work to protect your information and will notify you and the ICO of any serious data breach where the law requires.

9. Your rights

Under UK data protection law you have the right to:

  • be informed about how we use your data (this policy);
  • access the personal data we hold about you;
  • have inaccurate or incomplete data corrected;
  • have your data erased in certain circumstances (the ‘right to be forgotten’);
  • restrict or object to our processing of your data;
  • data portability (receive your data in a portable format);
  • withdraw consent at any time where we rely on it; and
  • object to direct marketing at any time.

To exercise any of these rights, please contact us at sales@spiralseven.com. We will respond within one month. If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113 — though we would always appreciate the chance to put things right first.

10. Children

The Site is intended for adults and we do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational or regulatory reasons. The latest version will always be available on this page.

12. How to contact us

For any questions about this Privacy Policy or to exercise your rights, contact us at sales@spiralseven.com, by telephone on 01422 362022, or by post to: Spiral Seven Ltd, 26A Westgate Arcade, Halifax, West Yorkshire, HX1 1DJ.

Klarna

In order to offer you Klarna’s payment options, we will pass certain of your personal information — such as contact and order details — to Klarna, so that Klarna can assess whether you qualify for its payment options and tailor them to you. General information on Klarna can be found here. Your personal data is handled by Klarna in accordance with applicable data protection law and Klarna’s privacy notice.