Privacy notice

This notice explains how the University, as the data controller for this online store, collects and uses your personal information when you visit or place an order. We are committed to protecting your privacy and to handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information we collect

Depending on how you use the store, we may collect:

• your name, email address, delivery and billing address, and contact number;
• details of your orders and any correspondence with us;
• account sign-in details, where you create an account; and
• technical information such as your IP address, device and browser type, and pages visited.

How we use your information

We use your information to:

• process and deliver your orders and take payment;
• manage your account and respond to your enquiries;
• keep you informed about the status of an order;
• prevent and detect fraud, and keep the store secure; and
• meet our legal and regulatory obligations.

We will only send you marketing messages where you have asked us to, and you can opt out at any time.

Our lawful basis

We rely on different lawful bases depending on the purpose: performance of our contract with you (to fulfil your order), our legitimate interests (to run and secure the store), your consent (for optional marketing), and compliance with legal obligations (such as tax and accounting).

Sharing your information

We share your information only where necessary — for example with our payment provider, delivery partners, and service providers who support the store — and only so far as they need it to carry out their role. We may also disclose information where required by law. We do not sell your personal data.

Cookies

The store uses cookies and similar technologies to make it work properly and to understand how it is used. You can control or refuse cookies through your browser settings, although some features of the store may not work as intended if you do.

How long we keep your information

We keep your personal data only for as long as necessary for the purposes described here, and for any period required by law — for example to meet accounting and tax obligations — after which it is securely deleted or anonymised.

Keeping your information secure

We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. All transactions take place over an encrypted connection.

Your rights

Under UK data protection law you have the right to access your personal data, to have inaccurate data corrected, to have data erased in certain circumstances, to restrict or object to processing, and to data portability. To exercise any of these rights, please contact us.

Other websites

The store may link to other websites. This notice applies only to this store, so we encourage you to read the privacy notice of any other site you visit.

Contact and complaints

If you have a question about how we use your data, or wish to make a complaint, please contact us or your institution's data protection officer. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection, at ico.org.uk.