Privacy Policy
Who we are
Legacy Silverware is the data controller for personal data collected through legacysilver.co.uk. That means we decide how and why your data is used and are responsible for it under UK data protection law (the UK GDPR and the Data Protection Act 2018).
- Legal entity: Trading as Legacy Silverware
- Registered address: Nimrod Works, 33 Trinity Street, Sheffield, S3 7AJ,
- Privacy contact: info@legacysilver.co.uk
Legacy Silverware also operates legacytableware.co.uk. customer records may be shared between the two sites so we can manage orders and accounts across both.
What we collect
We collect only what we need to sell, make and deliver your order and to run the site.
| Type | Examples | Where it comes from |
|---|---|---|
| Identity and contact | Name, email, phone, billing and delivery address | You, at checkout, on account sign-up or via our contact form |
| Order details | Products bought, order value, engraving or personalisation text, delivery notes | You, when you order |
| Account details | Login email, hashed password, order history | You, if you create an account |
| Payment | Confirmation that payment succeeded, last four card digits, payment method type | Our payment providers. We never see or store your full card number |
| Communications | Emails and messages you send us, enquiries about commissions | You |
| Technical and usage | IP address, browser and device type, pages viewed, how you reached the site | Your device, via cookies and similar technology (see Cookies) |
| Marketing preferences | Whether you’ve opted in to emails | You |
We don’t knowingly collect special category data (such as health or religious beliefs). Please don’t include it in personalisation text or messages.
How we use it and why we’re allowed to
UK law requires a lawful basis for each use of your data. Ours are:
| What we do | Lawful basis |
|---|---|
| Take payment, make, personalise and deliver your order; handle returns | Contract |
| Manage your account | Contract |
| Reply to enquiries and commission requests | Legitimate interests (responding to people who contact us); contract if it leads to an order |
| Keep financial and tax records | Legal obligation |
| Prevent fraud and keep the site secure | Legitimate interests |
| Understand how the site is used so we can improve it (analytics) | Consent, given through our cookie banner |
| Show you our ads on other sites (remarketing) | Consent, given through our cookie banner |
| Send marketing emails | Consent; or, for existing customers, soft opt-in for similar products, with an unsubscribe link in every email |
Where we rely on consent, you can withdraw it at any time. Where we rely on legitimate interests, we’ve weighed them against your rights, and you can object.
Cookies
We use strictly necessary cookies to run the shop. Analytics and advertising cookies are only set if you accept them in our cookie banner. You can change your choice at any time via [the cookie settings link in the footer].
| Category | What it does | Examples | Needs consent? |
|---|---|---|---|
| Strictly necessary | Basket, checkout, login, security | WooCommerce session and cart cookies, WordPress login cookies, [cookie banner preference cookie] | No |
| Analytics | Counts visits and shows how the site is used | Google Analytics 4 (_ga, ga*) | Yes |
| Advertising | Measures ads and shows you our products on other sites | Google Ads, Meta Pixel | Yes |
| Payment | Fraud prevention during checkout | [Stripe, PayPal] | No, when part of a payment you’ve asked for |
You can also block or delete cookies in your browser settings. Blocking necessary cookies will stop the basket and checkout working.
Who we share it with
We never sell your data. We share it only with companies that help us run the business, and only what each needs. They act on our instructions under contract.
| Who | Why |
|---|---|
| Stripe / PayPal / Klarna | Processing payments |
| Royal Mail / DPD | Delivering your order (name, address, phone, email for tracking) |
| WP Engine | Hosting the website and its database |
| Unit Digital | Website development, maintenance and support |
| Google (Analytics, Ads) | Analytics and advertising, only with your consent |
| Meta | Advertising, only with your consent |
| Mailchimp | Sending marketing emails, only if you’ve opted in |
| [ccountant | Bookkeeping and tax |
We may also share data where the law requires it, for example with HMRC or the police, or to protect our legal rights.
International transfers
Some of our providers (for example [Google, Meta, Stripe, PayPal, Mailchimp]) may process data outside the UK, including in the US. When that happens we rely on UK adequacy regulations (such as the UK Extension to the EU-US Data Privacy Framework) or the ICO’s International Data Transfer Agreement or Addendum, so your data stays protected to UK standards.
How long we keep it
| Data | Kept for |
|---|---|
| Orders, invoices and payment records | 6 years from the end of the financial year they relate to (HMRC requirement) |
| Customer accounts | Until you close your account, or after 3 years of inactivity |
| Enquiries and messages that don’t lead to an order | 2 years |
| Marketing list | Until you unsubscribe |
| Analytics data | [4 months (set in Google Analytics) |
After that we delete or anonymise it.
Security
The site runs over HTTPS, account passwords are stored hashed, and card payments are handled entirely by PCI-DSS-compliant payment providers. Access to customer data is limited to staff and suppliers who need it. No system is completely secure, but if a breach puts your data at risk we’ll tell you and, where required, the ICO.
Your rights
Under UK data protection law you have the right to:
- Access a copy of the data we hold about you
- Rectify anything inaccurate or incomplete
- Erase your data, where we no longer have a reason to keep it
- Restrict how we use it while a concern is looked into
- Port data you gave us to another provider in a common format
- Object to uses based on legitimate interests, and to direct marketing at any time
- Withdraw consent wherever we rely on it
To use any of these, email info@legacysilver.co.uk. It’s free, and we’ll reply within one month. We may ask you to confirm your identity first.
If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Marketing emails
We only send marketing emails if you’ve opted in, or if you’ve bought from us and didn’t opt out of hearing about similar products. Every email has an unsubscribe link, or you can email us.
Children
The site isn’t aimed at children and we don’t knowingly collect data from anyone under 16.
Changes to this policy
We’ll update this page when how we use data changes, and change the date below.
Last updated: 28_10_26
Contact us
Legacy Silver, Nimrod Works, 33 Trinity Street, Sheffield, S3 7AJ, Email: info@legacysilver.co.uk · Phone: 01629 640965Nimrod Works, 33 Trinity Street, Sheffield, S3 7AJ