Privacy Policy

Stacked Racks Vintage Ltd is a company registered in England and Wales, trading as Stacked Racks Vintage. We sell authentic vintage clothing online.

Contact: stackedracksvintage@gmail.com

When you place an order we collect: your full name, email address, phone number, and delivery address. This is necessary to process and ship your order.

When you sign up for our email list we collect your email address only.

We use Google Analytics which automatically collects anonymised data including pages visited, time on site, device type, and general location (country/city level). No personally identifiable information is collected by Analytics.

Stripe (our payment processor) collects your card details and billing information directly. We never see or store your card number.

Order fulfilment — your name, email, phone and address are used solely to process your order, dispatch your item, and provide after-sale support.

Email marketing — if you opted in, we may send occasional emails about new arrivals and promotions. You can unsubscribe at any time by replying to any email.

Analytics — anonymised Google Analytics data is used to improve the website and understand how visitors use it.

HMRC compliance — we are required by law to retain records of sales for tax purposes for a minimum of 6 years.

We use the following cookies:

• Essential cookies — set by Stripe to process payments securely. Cannot be disabled.
• Analytics cookies — Google Analytics (_ga, _gid). Only set if you accept cookies.
• Preference cookies — we store your cookie consent choice and email subscription status locally in your browser.

You can manage or delete cookies via your browser settings at any time.

We do not sell your data. We share data only with:

• Stripe — payment processing. Stripe Privacy Policy
• Google Analytics — anonymised site analytics. Google Privacy Policy
• Supabase — our order database, hosted in the EU. Supabase Privacy Policy
• Royal Mail — your delivery address is shared to ship your order.

Order records are retained for 6 years as required by HMRC. Email marketing opt-ins are kept until you unsubscribe. Analytics data is retained for 26 months in Google Analytics.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict processing
• Data portability

To exercise any of these rights, email us at stackedracksvintage@gmail.com. We will respond within 30 days.

If you have any concerns about how we use your data, please contact us first. You also have the right to lodge a complaint with the ICO (ico.org.uk).