Privacy Policy

Last updated: 20th March 2026

1. Introduction

This privacy policy explains how we collect, use, store and protect your personal data when you visit our website and use our services. We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: iShop Ltd, Crown House, 27 Old Gloucester Street, London, WC1N 3AX, 03493920

2. Information We Collect

We may collect and process the following categories of personal data:
  • Identity data: name, title, date of birth
  • Contact data: email address, telephone number, postal address
  • Technical data: IP address, browser type and version, operating system, time zone setting
  • Usage data: information about how you use our website and services
  • Marketing data: your preferences for receiving communications from us

3. How We Use Your Information

We process your personal data on the following lawful bases under Article 6 of the UK GDPR:
  • Consent: where you have given clear consent for us to process your data for a specific purpose
  • Contract: where processing is necessary to perform a contract with you or to take steps before entering a contract
  • Legal obligation: where processing is necessary to comply with a legal obligation
  • Legitimate interests: where processing is necessary for our legitimate interests, provided these are not overridden by your rights

4. Cookies

Our website uses cookies to distinguish you from other users. This helps us provide you with a good experience and allows us to improve our site. You can set your browser to refuse all or some cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, some parts of our website may become inaccessible or not function properly.

5. Data Sharing

We may share your personal data with the following parties where necessary:
  • Service providers who assist in operating our website and delivering our services
  • Professional advisers including lawyers, auditors and insurers
  • HM Revenue & Customs, regulators and other authorities where required by law

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.

6. International Transfers

Where we transfer your personal data outside the UK, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards, such as UK adequacy regulations, standard contractual clauses, or binding corporate rules.

7. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. To determine the appropriate retention period, we consider the amount, nature and sensitivity of the data, the purposes for which we process it, and whether we can achieve those purposes through other means.

8. Your Legal Rights

Under UK data protection law, you have the following rights:
  • Right of access: to request a copy of the personal data we hold about you
  • Right to rectification: to request correction of incomplete or inaccurate data
  • Right to erasure: to request deletion of your personal data in certain circumstances
  • Right to restrict processing: to request that we limit how we use your data
  • Right to data portability: to request transfer of your data to another party
  • Right to object: to object to our processing of your personal data
  • Right to withdraw consent: where we rely on consent, you may withdraw it at any time

You will not have to pay a fee to exercise any of these rights. We may need to request specific information from you to confirm your identity. Please contact us if you wish to exercise any of these rights.

9. Complaints

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

10. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at:

Email: info@ishop.co.uk

Trading Address: iShop Ltd, H1 Peek Business Centre, Woodside, Bishop's Stortford, CM23 5RG

Phone: 0800 368 8095