Privacy policy

1. Who we are

This website and online store (the “Services”) are operated by Allwag Promotions Limited on behalf of North London Collegiate School.

For the purposes of data protection law:

  • North London Collegiate School is the Data Controller (the organisation responsible for your personal data)

  • Allwag Promotions Limited acts as a Data Processor, processing personal data on behalf of and under the instruction of the Data Controller

Allwag Promotions Limited is registered in England and Wales (Company No. 03602082), with its registered office at Merchandise House, The Street, Hatfield Peverel. We are registered with the UK Information Commissioner’s Office (ICO) under registration number ZA329381.

If you have any questions about this Privacy Policy or how your data is handled, please contact: privacy@allwag.co.uk

2. About this Privacy Policy

This Privacy Policy explains how your personal data is collected, used, and shared when you:

  • Visit or browse this website

  • Make a purchase

  • Contact us

  • Interact with the Services

By using this website, you acknowledge that you have read and understood this Privacy Policy.

3. Personal data we collect

We may collect and process the following categories of personal data:

Information you provide directly:

  • Name

  • Email address

  • Phone number

  • Billing and delivery address

  • Order and transaction details

  • Communications with us (e.g. enquiries, complaints)

Information collected automatically:

  • IP address

  • Device and browser information

  • Website usage and interaction data

  • Cookies and tracking data (see Cookies Policy)

Information from third parties:

  • Payment providers (e.g. payment confirmation details)

  • Delivery partners

4. How we use your personal data

Your personal data is used to:

Fulfil your orders

  • Process payments

  • Deliver goods

  • Manage returns and refunds

Provide customer support

  • Respond to enquiries and complaints

  • Communicate with you about your order

Improve our services

  • Analyse website performance

  • Improve user experience

Maintain security

  • Prevent fraud

  • Protect our systems and users

Marketing (where permitted)

  • Send communications where lawful (e.g. soft opt-in or consent)

  • You can opt out at any time

5. Legal basis for processing

We rely on the following legal bases:

  • Contract – to fulfil your order

  • Legal obligation – for tax and compliance purposes

  • Legitimate interests – to operate and improve the Services

  • Consent – where required (e.g. certain marketing or cookies)

6. Relationship with Shopify

This website is hosted on Shopify, which provides the ecommerce platform that enables us to deliver the Services.

When you use this website, your personal data may be processed by Shopify, including:

  • Device and browsing information

  • Transaction data

  • Interaction with the website

Shopify may process this data to:

  • Provide and maintain the platform

  • Improve performance and functionality

  • Support fraud prevention and security

In some cases, Shopify may process data across its platform to improve its services.

To learn more, please visit Shopify’s Privacy Policy:

https://privacy.shopify.com

7. Sharing your personal data

We may share your personal data with trusted third parties, including:

  • Payment providers

  • Delivery and logistics partners

  • IT and hosting providers (including Shopify)

  • Customer support tools

  • Fraud prevention services

We ensure that all third parties:

  • Only receive the data necessary

  • Use it only for specified purposes

  • Maintain appropriate security measures

8. International data transfers

Your personal data may be transferred to and processed outside of the United Kingdom and European Economic Area (EEA), including in countries such as the United States and Canada.

Where this occurs, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs)

  • UK-approved transfer mechanisms

9. Data retention

We retain personal data only as long as necessary for the purposes outlined in this policy, including:

  • Order and financial records (typically up to 6 years for legal/tax purposes)

  • Customer service records

Where possible, data is anonymised when no longer required.

10. Children’s data

This website is not intended for children under the age of 16. We do not knowingly collect personal data from children.

11. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion (where applicable)

  • Restrict or object to processing

  • Withdraw consent (where applicable)

  • Request data portability

To exercise your rights, please contact: privacy@allwag.co.uk

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

https://ico.org.uk

12. Marketing preferences

You can opt out of marketing communications at any time by:

  • Clicking the unsubscribe link in emails

  • Contacting us directly

Please note: you may still receive transactional emails (e.g. order confirmations).

13. Data roles clarification

Where Allwag Promotions Limited acts as a Data Processor, we process personal data only in accordance with the instructions of the Data Controller (North London Collegiate School) and do not use your personal data for our own independent marketing purposes.

14. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page.

15. Contact us

If you have any questions about this Privacy Policy or your personal data: privacy@allwag.co.uk

Or write to:

Allwag Promotions Limited
Merchandise House
The Street
Hatfield Peverel
Essex
CM3 2DP