GDPR Policy

1. Who we are

The data controller is Angs Collection LTD (Company No. 17062256), East Lane Business Park, 10 Courtenay Road, Wembley, HA9 7ND, United Kingdom. You can reach us at info@angs.store.

2. What data we collect

• Account data: name, email, password (hashed), order history.
• Order & delivery data: billing and shipping address, phone number, items purchased.
• Payment data: handled by our payment provider (Shopify Payments / Stripe). We do not store card numbers.
• Communications: emails you send us, support requests, marketing preferences.
• Technical data: IP address, browser/device info, pages visited, cookies (see Section 7).

3. Why we use it (lawful bases)

• Contract: to process orders, take payment, deliver products, and handle returns.
• Legitimate interests: to prevent fraud, improve the site, and respond to enquiries.
• Legal obligation: to keep tax, accounting, and consumer-rights records.
• Consent: for marketing emails and non-essential cookies — you can withdraw at any time.

4. How long we keep it

Order and tax records are retained for 6 years to meet HMRC requirements. Account data is kept while your account is active and deleted on request. Marketing data is kept until you unsubscribe.

5. Who we share it with

We share only what is needed with trusted processors:

• Shopify Inc. — storefront, checkout and order management.
• Payment providers (e.g. Shopify Payments, Stripe, PayPal) — to take payment securely.
• Shipping carriers (e.g. Royal Mail, DPD, Evri) — to deliver your order.
• Email & analytics providers — for transactional emails and aggregate site analytics.

We never sell your personal data.

6. International transfers

Some processors are based outside the UK/EEA. Where this is the case we rely on UK/EU Standard Contractual Clauses or equivalent safeguards.

7. Cookies

We use essential cookies to run the basket and checkout, and optional cookies for analytics and marketing. You can manage non-essential cookies via the cookie banner or your browser settings.

8. Your rights

Under the UK GDPR you have the right to:

• access a copy of your data;
• rectify inaccurate data;
• erase your data (the "right to be forgotten");
• restrict or object to processing;
• data portability;
• withdraw consent at any time;
• complain to the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email info@angs.store. We aim to respond within 30 days.

9. Changes to this policy

We may update this policy from time to time. Significant changes will be highlighted on this page or notified by email.