Privacy Policy

This Privacy Policy explains how Mr Shaw's House Ltd ("we", "us", "our") collects, uses and protects your personal data when you visit our website, buy clothing, book event tickets, make a private-hire enquiry or sign up to our newsletter. We are committed to handling your information responsibly and in line with UK data protection law.

Who we are

Mr Shaw's House Ltd is the data controller responsible for your personal data. We are a limited company trading as a live-music venue, bar and clothing house at 49 Sadler Gate, Derby, DE1 3NQ, United Kingdom.

If you have any questions about this policy or how we use your data, you can contact us at hello@mrshawshouse.co.uk.

What personal data we collect

Depending on how you interact with us, we may collect the following:

• Contact and identity details — your name and email address.
• Order and delivery details — your billing address, delivery address and the details of the clothing items you order.
• Ticket details — the event tickets you buy and the email address to which your digital tickets are delivered.
• Enquiry messages — the information you provide in a private-hire enquiry or other message to us, including the contents of that message.
• Newsletter email — the email address you give us if you sign up for marketing updates.
• Limited payment data — card payments are processed securely by our payment provider, Stripe. We do not see or store your full card number; we receive only limited information needed to confirm and manage your payment (for example, that a payment succeeded).
• Technical and usage data — information collected automatically when you use our website, such as your IP address, device and browser type, and how you use the site, including data gathered through cookies. Please see our Cookie Policy for more detail.

How we use your data and our lawful bases

Under UK GDPR we must have a lawful basis for using your personal data. The bases we rely on are:

• Performance of a contract — to process and fulfil your clothing orders and event ticket purchases, to deliver your goods and digital tickets, to take payment and to deal with related customer service.
• Legitimate interests — to run and improve our business, to respond to private-hire and other enquiries, to keep our website secure and to help prevent and detect fraud. We only rely on this basis where your interests and rights do not override ours.
• Consent — to send you marketing emails (our newsletter) and to set non-essential cookies, such as analytics cookies. You can withdraw your consent at any time.
• Legal obligation — to meet our legal duties, including keeping tax and accounting records.

Who we share your data with

We do not sell your personal data. We share it only where necessary, and where we use other companies to process data on our behalf they act as our processors under appropriate agreements. We may share data with:

• Stripe (Stripe Payments Europe) to process your card payments securely.
• Delivery couriers to dispatch and deliver your clothing orders.
• Our email and newsletter system to send order confirmations, digital tickets and (where you have consented) marketing updates.
• Hosting and IT providers who host our website and support our systems.
• Authorities, regulators or other third parties where we are required to do so by law, or to establish, exercise or defend legal claims.

Marketing and the newsletter

If you sign up to our newsletter we will send you marketing updates using the email address you provide, on the basis of your consent. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email, or by contacting us at hello@mrshawshouse.co.uk. Unsubscribing from marketing does not stop service messages such as order confirmations or ticket delivery, which we send as part of fulfilling your purchase.

Cookies

We use cookies and similar technologies on our website. Essential cookies are needed to make the site work, and non-essential cookies, such as analytics, are only set after you give consent through our cookie banner. You can find full details, including how to manage your preferences, in our Cookie Policy.

How long we keep your data

We keep your personal data only for as long as we need it for the purposes set out in this policy.

• Order, ticket and tax records — we retain these for the period required by UK tax and accounting law (generally at least six years from the end of the relevant financial year).
• Enquiry and customer service records — kept for 24 months and then deleted or anonymised.
• Newsletter data — kept until you unsubscribe or ask us to remove it.

When we no longer need your data, we will securely delete or anonymise it.

Your rights

Under UK GDPR you have a number of rights in relation to your personal data:

• Access — to ask for a copy of the personal data we hold about you.
• Rectification — to ask us to correct data that is inaccurate or incomplete.
• Erasure — to ask us to delete your data in certain circumstances.
• Restriction — to ask us to limit how we use your data.
• Portability — to receive certain data in a portable format, or have it transferred to another provider.
• Objection — to object to processing based on our legitimate interests, and to object to direct marketing at any time.
• Withdraw consent — where we rely on your consent, to withdraw it at any time without affecting processing carried out before withdrawal.

To exercise any of these rights, please contact us at hello@mrshawshouse.co.uk. We will respond within the timescales set by law.

If you are unhappy with how we have handled your data, you have the right to complain to the ICO, the UK regulator, at ico.org.uk. We would, however, appreciate the chance to address your concerns first.

Keeping your data secure

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. Card payments are handled by Stripe over secure, encrypted connections, and we do not store full card numbers on our systems. While no method of transmission over the internet is completely secure, we work to protect your information and to limit access to those who need it.

International transfers

We aim to keep your personal data within the UK. Where any of our providers process data outside the UK, we make sure appropriate safeguards are in place so that your data continues to receive a level of protection consistent with UK data protection law.

Changes to this policy

We may update this Privacy Policy from time to time, for example to reflect changes in how we operate or in the law. Any updated version will be published on this page, so please check back periodically.

Contact us

If you have any questions about this Privacy Policy or about how we handle your personal data, please contact us at hello@mrshawshouse.co.uk or write to us at Mr Shaw's House Ltd, 49 Sadler Gate, Derby, DE1 3NQ, United Kingdom. You can also read our related policies: our Cookie Policy, Terms & Conditions and Delivery & Returns policy.