Privacy policy
Last Updated: August 2026
Classic Cap Company Ltd ("Classic Cap Company", "we", "us" or "our") respects your privacy and is committed to protecting your personal information. This policy explains how we collect, use, store and share your personal information when you visit our website, purchase products from us, contact us, subscribe to marketing communications, interact with our advertising or otherwise use our services, in accordance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.
This policy applies to our online store, our physical store, and other interactions you may have with Classic Cap Company Ltd.
1. Who We Are
Classic Cap Company Ltd is the data controller responsible for your personal information. We are a family-run cap, hat, and accessory retailer based at:
48 Hamlet Court Road
Westcliff-on-Sea
Essex, SS0 7LX
United Kingdom
Company Number: 4809457
Telephone: +44 (0)1702 430798
Email: info@classic-caps.co.uk (or via our website Contact form)
If you have any questions about this Privacy Policy or how we use your personal information, please contact us using the details above.
2. Personal Information We Collect
Depending on how you interact with us, we may collect and process information including:
- Name, billing address, delivery address, email address, and telephone number
- Account and login information
- Products ordered or viewed, and order/transaction information
- Payment-related information (processed securely via our third-party payment gateways; we do not store your raw card details)
- Delivery instructions, and returns, refunds and exchange information
- Correspondence with us and customer service enquiries
- Reviews, feedback or survey responses
- Marketing preferences
- IP address, browser type, operating system, and device information
- Cookie identifiers and similar technologies
- Website activity, interactions and referral information
- Approximate location derived from your device or IP address
- Advertising and marketing interaction data
- Fraud prevention and security information
We do not intentionally request special category personal data such as information concerning your health, ethnicity, religious beliefs, political opinions, trade union membership, genetic information or sexual orientation. Please do not provide this type of information when it is not necessary.
3. How We Collect Your Information
We may collect information directly from you when you place an order, create an account, contact us, visit our physical store, complete a form, subscribe to our newsletter or marketing, enter a promotion or competition, leave a review, request a return, refund or exchange, or communicate with our customer service team.
We may also collect information automatically when you use our website through cookies, pixels and similar technologies, and information may be provided to us by third parties involved in providing our services, such as our ecommerce platform, payment providers, delivery companies, analytics providers, advertising platforms, fraud prevention services and marketing providers.
4. How We Use Your Personal Data
We only use your information when the law allows us to, most commonly to:
Process and fulfil orders — processing purchases, taking and confirming payment, sending order confirmations, picking and dispatching orders, arranging delivery, providing delivery updates, processing returns, exchanges and refunds, communicating with you about an order, and managing product availability and stock issues. Our lawful basis is normally the performance of a contract with you.
Provide customer service — responding to enquiries, resolving problems, providing product information and managing complaints, relying on contractual necessity or our legitimate interests.
Maintain customer accounts — where available, processing information necessary to create, maintain and secure accounts.
Prevent fraud and protect our business — detecting and preventing fraudulent transactions, verifying transactions, protecting accounts, maintaining website and payment security, preventing abuse, investigating suspicious activity, and establishing, exercising or defending legal claims, relying on legitimate interests and, where applicable, legal obligations.
Comply with legal requirements — retaining and processing information where required for tax, accounting, consumer protection, fraud prevention or other legal requirements.
5. Marketing Communications
Where permitted by law, we may use your information to tell you about products, promotions, offers and news that we think may interest you, based upon your consent or our legitimate interests where permitted by applicable law.
You can unsubscribe from marketing communications at any time by clicking the unsubscribe link contained within marketing emails, or by contacting us using the details in this Privacy Policy. Unsubscribing from marketing will not prevent us from sending service communications necessary to fulfil an order or respond to an enquiry. We may retain a limited suppression record after you unsubscribe so that we can ensure we respect your request.
6. Shopify
Our online store is hosted and operated using Shopify. Shopify provides the ecommerce infrastructure that enables us to display and sell our products, process transactions, manage customer accounts, provide checkout functionality and operate other features of our online store.
When you visit or make a purchase through our store, Shopify may collect and process personal information relating to your use of the store and transaction. Shopify may process information on our behalf as a service provider and, for certain services and features, may process information for its own purposes in accordance with its applicable privacy terms. Shopify and its service providers may process information in countries outside the United Kingdom.
Where Shopify Network Intelligence and associated Enhanced Services are enabled, Shopify may use information about interactions with our store together with information from interactions with Shopify and other merchants to provide services such as analytics, personalisation, advertising measurement, fraud prevention and other enhanced features.
You can find further information about how Shopify processes consumer personal information in the Shopify Consumer Privacy Policy and exercise applicable privacy choices through the Shopify Privacy Portal.
7. Payments
When you make a purchase, payment information may be processed by Shopify and/or third-party payment providers. Depending upon the payment method you choose, this may include payment card processors, digital wallet providers, banks and other financial institutions.
Payment providers may receive information necessary to authorise and process your payment, including your name, billing information, transaction details and payment credentials. We do not ordinarily receive or retain your complete payment card number. Payment providers may process personal information in accordance with their own privacy policies and legal obligations.
8. Delivery and Fulfilment
Where an order requires delivery, we may provide relevant personal information — your name, delivery address, email address, telephone number, delivery instructions, and information necessary to identify your parcel — to postal operators, couriers (Royal Mail, EVRi, etc.), fulfilment companies and delivery service providers, for the purpose of fulfilling our contract with you and successfully delivering your order.
9. Cookies and Similar Technologies
Our website uses cookies and similar technologies — small pieces of information stored on or accessed from your device — for purposes including operating the website, remembering shopping basket contents, maintaining customer sessions, processing checkout, security and fraud prevention, remembering preferences, measuring website performance, understanding how customers use our website, analytics, advertising, measuring advertising effectiveness, and personalising content and advertising.
Some cookies are strictly necessary for our website and ecommerce services to function. Other cookies, including certain analytics, advertising and personalisation cookies, will be used in accordance with applicable consent requirements. Where required, you can accept, reject or manage non-essential cookies using the cookie consent controls provided on our website. Changing your cookie preferences may affect some website functionality.
10. Analytics
We may use analytics services to understand how visitors use our website. These services may collect information including pages viewed, products viewed, approximate location, device type, browser, referral source, interactions with the website, and purchases and conversions.
Analytics providers may include Shopify analytics and third-party services such as Google Analytics or equivalent platforms. Where required by applicable law, non-essential analytics technologies will only operate after appropriate consent has been obtained.
11. Advertising
We may advertise our products through third-party advertising platforms and social media services, which may include services provided by organisations such as Google, Meta (including Facebook and Instagram), Microsoft, TikTok, Pinterest or other advertising networks.
Subject to your cookie and privacy preferences and applicable law, these services may receive information concerning your interaction with our website, used to measure advertising effectiveness, attribute purchases to advertising campaigns, create audiences, prevent repeatedly displaying irrelevant advertisements, display more relevant advertising, and find audiences with similar interests.
Where consent is legally required for advertising technologies, these technologies will only be used after appropriate consent has been obtained. You can withdraw or change your consent through our cookie/privacy controls where available.
12. Social Media
We may operate accounts and pages on social media platforms. If you interact with us through a social media service, the provider of that service may process information about your interaction in accordance with its own privacy policy. Our website may also contain social media links, integrations or functionality provided by third-party platforms.
13. Email and SMS Services
We may use third-party providers to deliver transactional communications and, where appropriate, marketing communications. These providers may process your name, email address, telephone number, communication preferences, purchase history and engagement information where necessary to provide their services. Marketing communications will be sent in accordance with applicable privacy and electronic communications laws.
14. Reviews and User-Generated Content
If our website allows you to submit a review, testimonial, photograph or other content, information you choose to make public may be displayed on our website or through the review platform. Third-party review providers may process your information according to their own privacy policies. Please avoid including unnecessary personal information in publicly visible reviews.
15. Customer Support and Communications
We may use third-party communication and customer service tools including email systems, live chat services, telephone systems, helpdesk platforms or customer relationship management systems. Information you provide through these channels may be stored by the relevant service provider on our behalf.
16. Fraud Prevention and Security Services
We and our service providers may use automated systems to identify potentially fraudulent or suspicious transactions, considering information such as IP address, device information, billing and delivery addresses, transaction information, order history, payment information and patterns of activity. A transaction identified as potentially fraudulent may be reviewed, delayed, declined or subject to additional verification.
17. Automated Processing and Personalisation
Some services used by our store may automatically analyse information to provide functionality, recommendations, fraud detection, marketing measurement or personalised experiences, such as recommending products, identifying potentially fraudulent transactions, selecting advertising audiences or personalising marketing. Where automated decision-making produces legal or similarly significant effects, we will comply with applicable data protection requirements.
18. Sharing Your Personal Information
We do not sell your personal data. We do not sell your personal information in the ordinary meaning of selling customer lists for money. We only share data with essential third parties to run our business, including:
- Shopify and ecommerce service providers
- Payment processors, banks and financial institutions
- Delivery companies and couriers (Royal Mail, EVRi, etc.)
- IT and hosting providers, including our website infrastructure/marketing providers (e.g., Turner Digital Marketing)
- Email and communications providers, and customer service platforms
- Analytics, advertising and marketing platforms, and social media platforms
- Fraud prevention and security providers, and review platforms
- Professional advisers, accountants and insurers
- Government bodies, regulators and law enforcement agencies where required
We only provide information reasonably necessary for the relevant purpose and expect service providers processing information on our behalf to protect it appropriately.
19. Disclosure Required by Law
We may disclose personal information where we reasonably believe disclosure is required by law, by a court order, by a regulator or government authority, to prevent or investigate fraud or crime, to protect our legal rights, or to protect the rights, property or safety of customers or others.
20. International Transfers
Some of the organisations providing services to us operate internationally. As a result, your personal information may be processed outside the United Kingdom. Where personal information is transferred internationally, we take appropriate steps where required to ensure the transfer complies with applicable UK data protection law. Depending on the destination and circumstances, safeguards may include UK adequacy regulations, approved contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum, or another lawful transfer mechanism. You may contact us if you would like further information about safeguards relevant to your personal information.
21. How Long We Keep Your Information
We retain your data only as long as necessary to fulfil orders and comply with financial accounting laws (typically 6 years for UK tax purposes), and more generally only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, regulatory, accounting and reporting requirements.
Marketing information may be retained until you withdraw your consent, object to marketing, or we determine it is no longer necessary. We may retain limited information after a deletion or marketing opt-out request where necessary to demonstrate compliance, prevent fraud, resolve disputes or ensure your preferences continue to be respected.
22. How We Protect Your Information
We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction. Our service providers also maintain their own security measures. However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
23. Your Data Protection Rights
Under UK data protection laws, depending on the circumstances, you have the right to:
- Access — ask for information about the personal data we hold about you and request a copy
- Rectification — ask us to correct inaccurate or incomplete information
- Erasure — in certain circumstances, ask us to delete your personal information
- Restriction — in certain circumstances, ask us to restrict how your information is processed
- Data portability — in certain circumstances, ask us to provide information in a structured, commonly used and machine-readable format
- Object — object to certain processing based upon legitimate interests, including direct marketing — if you ask us to stop using your information for direct marketing, we will do so
- Rights relating to automated decision-making — where decisions are made solely through automated processing that have legal or similarly significant effects
- Withdraw consent — where processing is based on your consent, at any time; withdrawal does not affect processing that was lawful before consent was withdrawn
Some rights are subject to exemptions and limitations under applicable law. We may need to verify your identity before responding to certain requests. You can also unsubscribe from our marketing newsletters at any time by clicking the link at the bottom of the email or contacting us directly.
24. Children's Privacy
Our website and services are intended for general retail customers and are not designed specifically to collect personal information from children. Although we sell products that may be suitable for children, purchases should be made by an adult where required. If we become aware that personal information relating to a child has been collected in circumstances where we should not hold it, we will take appropriate steps.
25. Third-Party Websites
Our website may contain links to websites operated by other organisations. We are not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy policy of any external website you visit.
26. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or legal requirements. The latest version will always be published on our website and the "Last updated" date will be amended accordingly. Where a change materially affects how we use personal information, we will take additional steps to inform affected individuals where required.
27. Complaints
If you have concerns about how we use your personal information, please contact us first so that we can investigate. You also have the right to make a complaint to the UK's data protection regulator, the Information Commissioner's Office (ICO). Further information about your rights and how to make a complaint is available from the ICO.
28. Contact Us
For questions about this Privacy Policy, requests concerning your personal information or other privacy enquiries, contact:
Classic Cap Company Ltd
48 Hamlet Court Road
Westcliff-on-Sea
Essex, SS0 7LX
United Kingdom
Company Number: 4809457
Telephone: +44 (0)1702 430798
Email: info@classic-caps.co.uk