Privacy policy
Last updated: 2 September 2026
Crown Super Clone holds five kinds of data. This page lists them, says why, and tells you how to have them deleted. We are a UK shop, so the UK GDPR and the Data Protection Act 2018 apply. Order from the EEA and the EU GDPR applies as well.
The data we hold
| Data | Why | Legal basis | Kept for | Who sees it |
|---|---|---|---|---|
| Contact and delivery: name, email address, delivery address, the name for the label | Taking the order; sending bank details or a payment link, QC photos and tracking; getting the parcel to you | Contract | 6 years with the order record (UK tax and accounting rules) | Us; the courier (DHL Express, FedEx or UPS) for name, address and, where its delivery notifications need it, email; our email delivery provider |
| Order data: what you bought, the price, order and return numbers, the QC photos we sent, our correspondence | Fulfilling, returning, refunding and honouring the warranty; keeping accounts | Contract; legal obligation for the accounting side | 6 years | Us; our email delivery provider; authorities and professional advisers where the law obliges |
| Payment references: the bank account name and reference or the crypto wallet address your payment came from, and whether it has arrived | Matching the payment to your order and refunding to the same place | Contract; legal obligation | 6 years | Us only |
| Technical: IP address, browser and device type, pages visited, time of visit (server logs and analytics) | Keeping the shop secure, finding what breaks, preventing fraud | Legitimate interest; consent for analytics cookies | As long as security and maintenance need, then deleted or anonymised | Us; an analytics provider, technical data only (this may include Google Analytics) |
| Marketing preference: whether you agreed to emails from us, and the address tied to it | Sending offers and news | Consent, withdrawable any time via the unsubscribe link or an email to us | Until you withdraw; the address then comes off the list | Us; our email delivery provider |
Enquiries that never become an order are kept only as long as answering them takes. Some providers process data outside the UK; each such transfer rests on a UK adequacy decision, the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. Nobody buys your data from us and no advertiser gets it.
What we never collect
Card numbers, expiry dates, security codes: none, ever, because the shop takes no card payments. Online banking passwords and wallet seed phrases: never asked for. An email requesting any of these is not from us.
Your rights
- Access: a copy of everything.
- Rectification: fix what is wrong.
- Erasure: gone, unless tax law says the order record stays.
- Objection: stop a use, marketing included.
- Restriction: paused while a dispute is settled.
- Portability: your data as a machine-readable file.
One email to info@crownsuperclone.com with “privacy” in the subject does it. We may ask you to write from the address the order was placed with before releasing anything, and we respond within one month, or longer where the law allows for complex requests. The regulator is the Information Commissioner’s Office at ico.org.uk; a complaint there is your right, and if you are in the EEA your own data protection authority is an alternative.
Cookies
- Strictly necessary: session, basket and security cookies. Without them the shop does not work, so they cannot be switched off.
- Analytics: which pages get visited and how the site performs. Not essential, and set only with your consent: if you have not accepted them, they are not set, and the shop works exactly the same. Delete them in your browser whenever you like.
No advertising or retargeting cookies from third-party ad networks.
Security
HTTPS across the site; order data on access-controlled systems. With no card payments, there is nothing card-shaped to lose.
Children
Adults only. An order from someone under 18 is cancelled.
Changes
Dated at the top; material changes go out by email.
Contact
- Controller: Crown Super Clone, a UK-based online shop trading by website and email only.
- Privacy questions: info@crownsuperclone.com, “privacy” in the subject line.
- An order you have placed: orders@crownsuperclone.com.
- 24-hour reply target for both.