Privacy Policy

Welcome to Toffs Store. We are more than a retailer; we are custodians of sporting heritage, connecting enthusiasts worldwide with meticulously recreated vintage apparel. Just as we handle each classic jersey or Harrington jacket with care and respect, we are deeply committed to protecting your personal information. This Privacy Policy outlines how we collect, use, and safeguard your data when you visit theretrofootballshirt.com. Your trust is our most valued asset, and we treat your privacy with the utmost seriousness.

1. Who We Are & Our Data Controller

Our website is operated by Toffs Store, located at 49 Corporation St, Manchester, GB M4C 7TN. We are the data controller responsible for your personal data collected through this website.

2. The Information We Collect

To provide you with a seamless journey into sporting history, we collect information that is necessary and proportionate:

• Information You Provide Directly: This includes your name, billing and shipping address, email address, telephone number, and payment details (processed securely by our partners, not stored by us) when you make a purchase or create an account.
• Order & Transaction History: Details of the retro recreations you purchase, for your personal archive and our order fulfilment.
• Communication Data: Correspondence with our customer service team via email.
• Technical & Usage Data: Collected automatically, including your IP address, browser type, device information, and how you navigate our site (e.g., your interest in specific teams like Argentina, England, or categories like Casualwear).

3. How We Use Your Information

We use your data solely to honour our commitment to your heritage journey:

• To process and deliver your orders for vintage-style apparel worldwide.
• To manage your account, allowing you to track orders and save preferences.
• To communicate with you regarding your order, enquiries, or customer service needs.
• To improve our website, product range, and overall service for our global community of collectors.
• To comply with legal obligations (e.g., fraud prevention, tax calculations).

We do not engage in automated decision-making or profiling.

4. Legal Basis for Processing

We process your data under the following legal frameworks as required by UK and EU data protection laws (UK GDPR/ GDPR):

• Contract: Processing is necessary to fulfil our sales contract with you.
• Legitimate Interest: To operate and improve our business in a way that does not override your rights (e.g., website security, fraud prevention).
• Legal Obligation: To comply with applicable laws.
• Consent: Where required by law for specific non-essential purposes (e.g., certain marketing communications), we will seek your clear, affirmative consent.

5. Data Sharing & Disclosure

We are stewards of your data and share it only when essential:

• Service Providers: Trusted partners who perform functions on our behalf, such as payment processing (e.g., PayPal, card processors), shipping carriers, and IT service providers. They act only on our instructions.
• Legal Requirements: We may disclose information if required by law, regulation, or legal process.
• Business Transfers: In the unlikely event of a merger or sale, customer data may be transferred as a business asset.

We never sell your personal data to third parties for marketing purposes.

6. International Transfers

As we ship globally (excluding some remote regions), your data may be transferred to and processed in countries outside the UK/EEA (e.g., to our payment processors). We ensure such transfers are protected by appropriate safeguards, such as Standard Contractual Clauses approved by relevant authorities.

7. Data Security & Storage

Security is fundamental to our ethos. We implement robust technical and organisational measures to protect your data, including encryption (SSL) on our website and secure payment gateways. We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or to comply with legal obligations (typically 6 years for financial records).

8. Your Rights & Choices

You have rights regarding your personal data. Please contact us using the details below to exercise them:

• Access: Request a copy of the data we hold about you.
• Correction: Update inaccurate or incomplete data.
• Erasure: Request deletion of your data under certain circumstances.
• Restriction/Objection: Request we limit or stop processing your data in specific ways.
• Portability: Receive your data in a structured, machine-readable format.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk).

9. Cookies & Tracking Technologies

Our website uses cookies—small text files placed on your device—to ensure the site functions correctly, remember your preferences (like items in your cart), and understand how collectors like you interact with our content (e.g., interest in “HARRINGTON JACKETS” or “British & Irish Lions” products).

• Essential Cookies: Required for core functions like secure checkout.
• Analytical/Performance Cookies: Help us improve our site by analysing anonymous usage trends.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect your website experience.

10. Links to Other Websites

Our site may contain links to other websites (e.g., sporting history resources). This Privacy Policy applies only to our website. We encourage you to read the privacy statements of any external sites you visit.

11. Updates to This Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. The latest version will always be posted on this page with an updated effective date.