Privacy Policy

1. Who is responsible for your data

The data controller is I953 LTD, 27 Old Gloucester Street, London, United Kingdom, WC1N 3AX (company number 10822076).

For anything covered by this policy, write to privacy@richnotgaudy.com.

2. What we collect

Only what an order or an enquiry actually requires:

• Contact and delivery details you type in — name, email, address, phone.
• Order history, so support and returns can be handled without interrogating you.
• A cart identifier stored in a cookie, so your bag survives a page refresh.
• Basic technical data your browser sends with every request, such as IP address.

3. What we do not collect

We do not store card numbers. Payment details are handled by our payment provider and never reach our systems.

We do not build advertising profiles and we do not sell or rent personal data to anyone.

4. Cookies

The cart cookie is strictly necessary: without it the site cannot remember what you put in your bag between pages. It holds an opaque cart identifier, not your name or your order.

Any analytics or marketing cookies are optional and are only set if you agree to them.

5. How long we keep it

Order records are kept for six years, which is the period UK tax law requires.

Support correspondence is kept for two years. Cart cookies expire after 30 days.

6. Who else sees it

Only the suppliers needed to complete your order:

• The payment provider, to take payment.
• The carrier, to deliver the parcel.
• Our hosting and email providers, as processors under contract.

7. Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, object to processing, or ask for it in a portable format.

Email privacy@richnotgaudy.com and we will respond within one month. If we get it wrong you can complain to the Information Commissioner's Office.