Privacy Policy
Privacy Policy
Last updated: 27th November, 2025
This Privacy Policy explains how Archive by Natalie Limited (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit our website or make a purchase.
We are committed to safeguarding your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable laws.
1. Who We Are
Archive by Natalie Limited
Company Number: 14385317
Registered Address: 49 Pembridge Road, London, W11 3HG, United Kingdom
We are the data controller responsible for your personal information.
If you have any questions about this policy or your data, you can contact us via the details on our website.
2. Information We Collect
We collect the following categories of personal data:
A. Information You Provide
-
Name
-
Email address
-
Billing and shipping address
-
Phone number
-
Payment information (processed securely by our payment provider; we do not store card details)
-
Order history
-
Customer support messages
-
Account details if you create an account (username, email)
B. Information Collected Automatically
When you visit our website:
-
IP address
-
Device type
-
Browser type
-
Pages viewed
-
Session duration
-
Cookies and tracking data
-
Shopping behaviour (e.g., items added to cart)
C. Information from Third Parties
-
Payment providers (fraud prevention, payment confirmation)
-
Delivery partners (tracking information)
-
Analytics providers (Google Analytics, Meta Pixel, Shopify analytics)
3. How We Use Your Information
We use your personal data for the following purposes:
To process your orders
-
Confirming your purchase
-
Taking payment
-
Shipping your order
-
Providing tracking updates
To manage your customer experience
-
Responding to enquiries
-
Handling returns, refunds or complaints
-
Providing account access (if applicable)
To comply with legal obligations
-
Preventing fraud
-
Ensuring appropriate tax documentation
-
Meeting UK regulatory requirements
For business operations
-
Analytics and website performance
-
Improving our products
-
Understanding customer behaviour
-
Internal reporting and security
Marketing (only with your consent)
-
Email newsletters
-
Product updates
-
Promotional offers
You can opt out at any time.
4. Legal Basis for Processing
We process your information based on the following lawful grounds:
-
Contractual necessity — to fulfil your order
-
Legal obligation — tax, fraud prevention, record keeping
-
Legitimate interests — improving our website, preventing abuse
-
Consent — for marketing and cookies (where required)
5. How We Share Your Data
We do not sell your personal data.
We only share information with trusted third-party partners necessary for operating our business:
-
Payment processors (Shopify Payments, PayPal, etc.)
-
Delivery and shipping companies (Royal Mail, couriers)
-
Email service providers
-
IT and website hosting providers
-
Analytics tools (Shopify, Google Analytics)
-
Fraud prevention and security partners
All third parties are required to keep your data secure and use it only for the purpose agreed.
6. Data Retention
We retain your data only for as long as necessary:
-
Order records: 6 years (legal requirement)
-
Customer service messages: up to 24 months
-
Marketing information: until you unsubscribe
-
Website analytics: typically between 14–26 months, depending on provider settings
After this period, data is securely deleted or anonymised.
7. Cookies & Tracking Technologies
Our site uses cookies to:
-
Enable essential website functions
-
Track cart activity and checkout
-
Improve website performance
-
Provide personalised experiences
-
Deliver targeted advertising (if consented)
You can manage or disable cookies through your browser settings.
A detailed Cookies Policy can be added if needed.
8. Your Rights Under UK GDPR
You have the right to:
-
Access your personal data
-
Correct inaccurate information
-
Delete your data (in certain circumstances)
-
Restrict processing
-
Object to processing based on legitimate interests
-
Opt out of marketing at any time
-
Request data portability
-
Withdraw consent where processing is based on consent
To exercise any of these rights, contact us via the details on our website.
9. Security Measures
We take appropriate measures to protect your personal data, including:
-
Encrypted website connection (HTTPS)
-
Secure payment processing via PCI-compliant providers
-
Restricted access to personal information
-
Regular review of our security practices
However, no online system can guarantee 100% security.
10. International Transfers
Most of our data processing occurs within the UK or EEA.
If third-party services (e.g., Shopify, email providers) transfer data outside the UK, they do so under legally approved safeguards such as:
-
Adequacy regulations
-
Standard contractual clauses (SCCs)
11. Updates to This Policy
We may update this Privacy Policy from time to time.
Any changes will be posted here with a new “Last updated” date.
Continued use of our website indicates acceptance of the updated policy.
12. Contact Us
If you have questions, concerns, or requests regarding your personal data:
Archive by Natalie Limited
Registered Address: 49 Pembridge Road, London, W11 3HG, United Kingdom
Email: info@archivebynatalie.com