Forged and Found Ltd is the controller of personal information described in this notice. We trade as Forged & Found. Our registered office is Birmingham Assay Office, 1 Moreton Street, Birmingham, England, B1 3AX. Contact us through the Contact page or at customercare@forgedandfound.co.uk.

Information we collect

• Identity and contact information, such as your name, email, telephone number and billing or delivery address
• Order and transaction information, including items purchased, returns, refunds and payment status; payment providers normally process full card details
• Account information and preferences, if customer accounts are offered
• Messages, contact-form enquiries, reviews and other communications
• Fraud-prevention and order-verification information, including payment checks, billing and delivery address matches, risk signals and identity-verification results where required
• Device, browser, IP address, website-use and cookie information
• Marketing preferences and interactions with our communications

How and why we use it

Where information comes from

We collect information directly from you, automatically from your use of the website, and from service providers that help us operate orders, payments, delivery, security, analytics and marketing.

Who we share it with

We share information only where needed with service providers such as Shopify, payment and fraud-prevention providers, identity-verification services where required, delivery and returns partners, website and IT providers, review tools, customer-service tools, analytics or marketing providers used with the required permissions, and professional advisers. We may also disclose information where required by law, to protect rights or safety, or in connection with a business sale or reorganisation.

Service providers may process information only for the services they provide to us, subject to their roles and applicable contracts. We do not sell personal information for money.

International transfers

Some providers may process information outside the United Kingdom. Where personal information is transferred internationally, we use an applicable adequacy regulation or appropriate safeguards, such as approved contractual clauses, and take supplementary measures where required.

How long we keep it

We keep personal information only for as long as needed for the purpose collected, including to meet tax, accounting, consumer, fraud-prevention and legal-claims requirements. Retention periods differ by record type. Marketing information is kept until you withdraw consent or object, subject to a limited suppression record so we can respect your choice.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to our use of your personal information, receive certain information in a portable form, and withdraw consent. These rights can be limited by law. Contact us to make a request; we may need to verify your identity.

Marketing

You can unsubscribe from marketing emails using the link in the message or by contacting us. We may still send service messages about an order or account.

Cookies

We use cookies and similar technologies as described in our Cookie Policy. You can change non-essential preferences through the cookie settings control.

Security and children

We use appropriate technical and organisational measures designed to protect personal information. No online service can guarantee complete security. Our website is not directed to children and we do not knowingly collect personal information from children without an appropriate lawful basis.

Complaints

Please contact us first if you have a concern. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or another competent supervisory authority where applicable.

Changes

We may update this notice to reflect changes in our practices, providers or legal requirements. The latest version will be posted here with a revised date.