Privacy Policy

At The Castel, we are committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains how we collect, use, and protect your information when you visit our website or make a purchase.

1. What Information We Collect

When you visit our website or place an order, we may collect the following types of personal data:

  • Contact information: name, email address, billing and shipping address, phone number

  • Order details: products purchased, order history

  • Payment information: via secure third-party payment processors (we do not store card details)

  • Device data: IP address, browser type, device type, and site usage (collected via cookies)

2. How We Use Your Information

We use your information to:

  • Process and fulfil orders

  • Communicate with you about your order

  • Provide customer support

  • Send promotional emails (only with your consent)

  • Improve our website and shopping experience

  • Prevent fraud and ensure site security

3. Legal Basis for Processing

Under the UK GDPR, we process your personal data based on the following lawful grounds:

  • Performance of a contract – to fulfill your purchase

  • Consent – for marketing communications

  • Legitimate interest – to improve our services and prevent fraud

  • Legal obligation – where necessary for compliance

4. Cookies and Tracking

We use cookies and similar technologies to:

  • Enable site functionality

  • Analyse website traffic

  • Personalise your shopping experience

You can manage your cookie preferences via your browser settings. For more details, see our Cookie Policy.

5. Marketing Communications

We may send you promotional emails about our latest products and offers—but only if you have opted in. You can unsubscribe at any time by clicking the link in the footer of our emails.

6. Data Sharing

We do not sell your personal data. We only share your information with:

  • Trusted third parties who help us operate our business (e.g. payment processors, delivery services)

  • Legal or regulatory authorities, when required by law

All third parties are required to handle your data securely and in accordance with applicable laws.

7. Your Rights Under UK GDPR

You have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate data

  • Request deletion of your data (where applicable)

  • Object to or restrict data processing

  • Withdraw consent at any time (for marketing)

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, contact us at [your contact email].

8. Data Retention

We retain your data only as long as necessary to fulfill the purposes outlined in this policy, including legal, accounting, and reporting requirements.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

10. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at:
Email: thecastelshop@gmail.com

Tiny Earthlings Where Playtime Meets Purpose