Last updated: 06 June 2026
Rose & Castle is committed to protecting your personal information. This policy explains what data we collect, how we use it, and your rights under UK data protection law.
Who we are
Rose & Castle is an online retailer based in Newcastle upon Tyne, United Kingdom. Contact: [email protected].
What data we collect
When you place an order or create an account, we may collect your name and email address, billing and delivery address, payment information (processed securely by our payment provider — we never store card details), order history, and IP address and browser information for security purposes.
How we use your data
We use your information to process and fulfil orders, send order confirmations and shipping updates, respond to enquiries, meet our legal obligations, and improve our website. We only send marketing emails with your explicit consent. You can unsubscribe at any time.
Legal basis for processing
We process your data under UK GDPR on the following bases: contract performance (to fulfil your order), legal obligation (to comply with law), legitimate interests (to operate our business), and consent (for marketing).
How we share your data
We do not sell your personal data. We may share it with payment processors, delivery partners (Royal Mail and couriers), and IT service providers who host our website — all under appropriate data processing agreements.
How long we keep your data
We retain order records for 7 years to comply with UK tax law. Account data is kept while your account is active. You may request deletion of your account at any time.
Cookies
Our website uses essential cookies for the shopping cart and session management. We do not use advertising or tracking cookies without your consent.
Your rights
Under UK GDPR you have the right to access, correct, or delete your personal data, object to or restrict processing, and request data portability. Email [email protected] to exercise any of these rights. We will respond within 30 days.
Complaints
You have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.