Cookie Policy
Last updated: February 2026
- Who We Are
Refined Rarity Limited (“we”, “us”, “our”) is a company registered in England and Wales (Company No. 16259483) with its registered office at 15a Shenfield Road, Brentwood, United Kingdom, CM15 8AG. We operate the website www.refinedrarity.co.uk, which sells vintage goods.
If you have questions about this notice or how we handle your personal data, contact:
Info@refinedrarity.co.uk
We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR).
- What Personal Data We Collect
We collect and process personal data when you:
- Browse our website
- Place an order or create an account
- Subscribe to our newsletter
- Contact us or leave a comment
- Interact with us on social media
The information we collect may include:
- Name, email address, telephone number
- Billing and delivery addresses
- Payment details (processed securely by payment partners)
- Order history
- Account login details
- Marketing preferences and communications
- IP address, browser type, and device information (via cookies or analytics tools)
We do not store full payment-card details. All payments are handled securely by third parties such takepayments.com
- How We Use Your Data
Purpose | Example | Lawful Basis (UK GDPR Article 6) |
To process and fulfil orders | Delivering goods, processing payments | Contract performance |
To manage your account | Creating or updating user profiles | Contract performance |
To respond to enquiries or complaints | Customer support emails or messages | Legitimate interests |
To send marketing communications | Newsletters, offers (with consent) | Consent |
To analyse website performance | Analytics and usage data | Legitimate interests |
To meet legal obligations | Tax, accounting, and fraud prevention | Legal obligation |
- Sharing Your Data
We share data only with trusted third parties that help us operate our business, including:
- Payment processors (e.g. Takepayments.com)
- Delivery and courier partners (e.g. Royal Mail, DHL)
- Website hosting and maintenance providers
- Email marketing platforms
- Analytics and advertising providers (e.g. Google Analytics)
All third parties are bound by data-processing agreements requiring them to safeguard your data and use it only for authorised purposes.We never sell or rent your personal information.
- International Data Transfers
Where our service providers transfer data outside the UK (for example, to the EU or US), we ensure appropriate safeguards are in place, such as adequacy decisions or the UK International Data Transfer Agreement (IDTA).
- Data Retention
We retain personal data only as long as necessary for the purposes collected:
- Order and transaction data – 6 years (for legal and tax compliance)
- Marketing data – until you withdraw consent
- Account data – while your account remains active
- Comments and reviews – until deleted or removed at your request
- Data Security
We use SSL encryption, secure servers, firewalls, and limited employee access to protect your data. While no online service can be completely secure, we apply appropriate technical and organisational measures to prevent unauthorised access, alteration, or disclosure.
- Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate or incomplete information
- Erase your data (“right to be forgotten”)
- Restrict or object to processing
- Data portability – receive your data in a reusable format
- Withdraw consent at any time for marketing
To exercise any of these rights, contact info@refinedrarity.co.uk. If you are unhappy with how we handle your data, you may lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk / 0303 123 1113.
- Marketing Communications
We will only send marketing emails if you have opted in. You can unsubscribe at any time using the link in our messages or by contacting us directly. We do not use automated decision-making or profiling for marketing purposes.
- Comments and Media
When visitors leave comments, we collect the data shown in the comment form along with the visitor’s IP address and browser user agent string to help detect spam. If you upload images, please avoid including embedded location data (EXIF GPS). Visitors to the website may download and extract such data.
Comments may be checked through an automated spam-detection service.
- Embedded Content
Articles may include embedded content (e.g. videos, images, articles). Embedded content from other websites behaves as if the visitor has visited the other website, which may collect data and use cookies according to its own privacy policy.
- Children’s Privacy
Our website is not intended for children under 16. We do not knowingly collect personal information from minors.
