Privacy Notice

Introduction

This Privacy Notice explains how Pewter World collects, uses, stores and shares personal information when you visit www.pewterworld.co.uk, create an account, place an order or contact us.

Pewter World is the data controller responsible for the personal information described in this notice.

Pewter World is operated by Andy Clarke, trading as Pewter World.

Our business and contact address is:

Pewter World
Mannington Road
Roebuck Park
Hellingly
BN27 4DQ
United Kingdom

Email: help@pewterworld.co.uk

We process personal information in accordance with applicable UK data-protection law, including the UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025.

Personal Information We Collect

Information You Provide

We may collect personal information when you:

• Create or update an account.
• Place an order.
• Request engraving or personalisation.
• Contact us about a product or order.
• Submit a product question or review.
• Subscribe to marketing communications.
• Enter a promotion, survey or competition.
• Request a return, refund or replacement.

This information may include:

• Your name.
• Billing and delivery addresses.
• Email address.
• Telephone number, where provided.
• Account and login information.
• Order and purchase history.
• Delivery instructions.
• Engraving and personalisation details.
• Messages, enquiries and correspondence.
• Reviews or other content you submit.
• Marketing preferences.
• Information relating to returns, refunds, complaints or payment disputes.

Please avoid including unnecessary sensitive or private information in engraving messages, reviews or enquiries.

Payment Information

Payments are processed securely by Stripe and the payment methods made available through Stripe.

We do not directly receive or store your complete payment-card number or security code. We may receive limited payment information, such as:

• Payment status.
• Payment method.
• Transaction reference.
• Card type and partial card details.
• Information needed to prevent fraud or process refunds.

Stripe processes payment information in accordance with its own privacy notice.

Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address.
• Browser type and version.
• Device type and operating system.
• Approximate location derived from an IP address.
• Pages viewed and links selected.
• Referral source.
• Dates and times of visits.
• Shopping-cart and checkout activity.
• Cookie identifiers.
• Website performance and error information.

Non-essential analytics, advertising and tracking technologies will only be used where an appropriate lawful basis applies and any required cookie permission has been obtained.

How We Use Personal Information

We use personal information for the following purposes.

Processing and Fulfilling Orders

We use customer, order, payment, personalisation and delivery information to:

• Process and confirm orders.
• Take and verify payment.
• Arrange engraving or personalisation.
• Send orders to suppliers or fulfilment partners.
• Arrange delivery.
• Provide dispatch and delivery updates.
• Process returns, refunds and replacements.
• Respond to order-related enquiries.

Our lawful basis is that processing is necessary to perform our contract with you or take steps at your request before entering into a contract.

Customer Accounts and Support

We use account and contact information to:

• Create and maintain customer accounts.
• Respond to enquiries.
• Provide customer service.
• Maintain order records.
• Resolve complaints and disputes.

Our lawful basis is performance of our contract and our legitimate interest in providing customer service and administering our business.

Legal and Accounting Requirements

We use and retain relevant transaction and customer information to:

• Maintain tax and accounting records.
• Meet consumer-protection obligations.
• Respond to lawful requests from public authorities.
• Establish, exercise or defend legal claims.
• Meet other legal or regulatory requirements.

Our lawful basis is compliance with a legal obligation and, where applicable, our legitimate interest in protecting our legal rights.

Fraud Prevention and Website Security

We may use account, transaction, device and technical information to:

• Detect and prevent fraud.
• Protect customer accounts.
• Secure our website and systems.
• Investigate suspicious or unlawful activity.
• Prevent misuse and malicious attacks.

Our lawful basis is our legitimate interest in protecting our customers, website and business. Payment providers may conduct their own security and fraud checks.

Website Operation and Improvement

We may use technical and website-usage information to:

• Operate essential website functions.
• Diagnose technical problems.
• Measure website performance.
• Improve navigation and usability.
• Understand how customers use our website.

Essential processing is based on our legitimate interest in operating a secure and functional website.

Where analytics cookies or similar technologies require permission, our lawful basis is consent.

Marketing

We may send marketing messages where:

• You have provided consent; or
• Applicable law allows us to contact an existing customer about similar products and we offered a clear opportunity to opt out.

You can unsubscribe at any time by using the link in a marketing email or contacting help@pewterworld.co.uk.

Withdrawing consent or opting out of marketing will not affect essential order, account or customer-service communications.

Who We Share Personal Information With

We only share personal information where necessary for the purposes described in this notice.

Recipients may include:

• Stripe and available payment providers.
• Royal Mail and other delivery companies.
• Product suppliers, manufacturers and dropshipping or fulfilment partners.
• Engraving and personalisation providers.
• Website-hosting and technical-support providers.
• Email and communication providers.
• Fraud-prevention and website-security providers.
• Analytics and performance providers, where permitted.
• Google services used for analytics, advertising or website security.
• Meta services, where advertising or measurement cookies are permitted.
• Microsoft Clarity, where analytics permission has been provided.
• Professional advisers, including accountants, insurers or legal advisers.
• Government authorities, regulators, courts or law-enforcement bodies where disclosure is legally required.

Suppliers and fulfilment partners receive only the information reasonably required to prepare and deliver the relevant order.

We do not sell or rent personal information.

Parcel-Forwarding Services

If you independently choose to use a parcel-forwarding company, you provide that company’s UK address during checkout.

We may share the information needed to deliver your order to that address. Any further personal information you give directly to the forwarding company is governed by its own privacy notice.

International Transfers

Some service providers may process personal information outside the United Kingdom.

Where information is transferred internationally, we require an appropriate safeguard where necessary. This may include:

• A UK adequacy regulation.
• The UK International Data Transfer Agreement.
• The UK Addendum to approved standard contractual clauses.
• Another lawful transfer mechanism permitted under UK data-protection law.

You can contact us if you would like more information about the safeguards used for a particular transfer.

Cookies and Similar Technologies

Cookies are small files stored on your device when you visit a website.

We may use:

Essential Cookies

These are required for functions such as:

• Maintaining your shopping basket.
• Remembering your login.
• Processing checkout.
• Maintaining website security.
• Remembering privacy choices.

Essential cookies do not require consent where they are strictly necessary for the service requested.

Preference Cookies

These remember choices such as language, display settings or other website preferences.

Analytics Cookies

These help us understand how visitors use the website, identify errors and improve performance.

Advertising Cookies

These may be used to measure advertising, understand campaign performance or show more relevant advertisements.

We will request permission before using non-essential cookies where consent is legally required.

You can accept, reject or manage non-essential cookies through our cookie controls. You can also remove cookies using your browser settings, although blocking essential cookies may prevent parts of the website or checkout from working.

Further information about individual cookies and their duration should be provided in our Cookie Policy or cookie-management panel.

How Long We Retain Personal Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, fraud-prevention and dispute-resolution requirements.

Retention periods may include:

• Order, payment and accounting records: normally retained for up to six years after the relevant transaction or accounting period.
• Customer accounts: retained while the account remains active and for a reasonable period afterwards.
• Customer enquiries and complaints: retained for as long as needed to resolve the matter and protect legal rights.
• Personalisation information: retained with the associated order record where necessary to confirm what was requested and supplied.
• Marketing information: retained until you unsubscribe, withdraw consent or the information is no longer required.
• Website security and technical logs: retained for a limited period based on security and operational requirements.
• Cookie information: retained for the period shown in the cookie-management panel or Cookie Policy.

Information may be retained for longer where required by law, a dispute, suspected fraud or a legal claim.

When information is no longer required, it will be securely deleted or anonymised.

Data Security

We use appropriate technical and organisational measures to protect personal information. These may include:

• Encrypted website connections.
• Restricted access to administrative systems.
• Access controls and authentication.
• Software and security updates.
• Website monitoring and backups.
• Secure payment processing through specialist providers.
• Limiting the information shared with suppliers and service providers.

No online system can be guaranteed to be completely secure. However, we are responsible for taking appropriate measures based on the nature and risk of the information processed.

If we become aware of a personal-data breach, we will investigate it and notify affected individuals and the Information Commissioner’s Office where legally required.

Your Data-Protection Rights

Depending on the circumstances, you may have the right to:

• Request access to your personal information.
• Ask us to correct inaccurate or incomplete information.
• Request deletion of your information.
• Ask us to restrict how information is used.
• Object to processing based on legitimate interests.
• Object to direct marketing at any time.
• Request transfer of certain information in a portable format.
• Withdraw consent where consent is the lawful basis.
• Complain about how we process your information.

These rights are not absolute and may be subject to legal exceptions.

We may need to request information to confirm your identity before acting on a request. We will not normally charge a fee unless a request is manifestly unfounded or excessive.

To exercise your rights, email:

help@pewterworld.co.uk

Automated Decision-Making

Pewter World does not normally make decisions based solely on automated processing that produce legal or similarly significant effects.

Payment and fraud-prevention providers may use automated checks when processing a transaction. Their use of personal information is explained in their own privacy notices.

Children’s Privacy

Our website and products are not directed at children under 18, and children should not place orders or create accounts.

We do not knowingly collect personal information directly from children for marketing purposes.

If you believe that a child has provided personal information without appropriate permission, please contact us so that we can investigate and take appropriate action.

Third-Party Links

Our website may contain links to websites operated by other organisations.

We do not control these websites and are not responsible for their privacy practices. You should review the relevant privacy notice before providing personal information to a third party.

Data-Protection Complaints

If you have a concern about how we have handled your personal information, please contact us first:

Email: help@pewterworld.co.uk

Address:

Pewter World
14 Mannington Road
Roebuck Park
Hellingly
BN27 4DQ
United Kingdom

We will acknowledge a data-protection complaint within 30 days and respond without undue delay.

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: www.ico.org.uk

Changes to This Privacy Notice

We may update this Privacy Notice when our business practices, service providers or legal obligations change.

The latest version will be published on this page with its revision date. Significant changes may also be communicated by another appropriate method.

Last Updated: 19 July 2026

Replace Andy Clarke privately on the website before publishing. That is the only unfinished part.