Who controls your data
Goldenrush Ltd is the data controller for this website and store. Registered contact: St. James’ Building, 79 Oxford Street, Manchester M1 6FQ, United Kingdom. Phone: +44 161 768 9034. Email: privacy@goldenrush.co.uk. Queries about this notice or requests to exercise rights can be sent to the email above (office hours 09:00–17:30, Mon–Fri, UK time).
Data we collect
Information provided during account creation and checkout (name, email, phone, billing and delivery addresses), order details and receipts, and messages sent to support. Payment details are handled securely by our payment provider; only tokens and confirmation data are stored by the store. Technical data gathered through your visit includes device type, browser, IP address, approximate location, and activity such as pages viewed and items added to basket. Marketing preferences, wishlists, size settings, and notification choices are saved to tailor your experience.
How your data is used
Data is processed to provide the store and its features, fulfil orders, arrange delivery, handle returns and warranties, maintain your account, recommend sizes and products, prevent fraud, and run performance monitoring and security logs. With consent, email updates about new products and restocks are sent, and can be switched off at any time. Personalisation is limited to what’s needed for shopping and service messages.
Legal bases (UK GDPR)
Processing relies on: performance of a contract (creating an account, taking payment, shipping goods); legitimate interests (site security, preventing abuse, basic analytics, customer service improvements); consent (email marketing and back-in-stock alerts); legal obligation (tax and accounting); and, if required, protection of vital interests or legal claims.
Sharing and international transfers
Data is shared with trusted service partners only where necessary: payment processors, fraud-prevention tools, couriers and warehousing, email and cloud hosting, and professional advisers. These partners operate under data processing agreements. If data leaves the UK/EEA, recognised safeguards are used (such as UK Addendum to SCCs or an adequacy decision). Personal data is never sold.
Retention
Account and order records are kept while the account is active and for up to six years afterwards to meet tax, warranty, and regulatory requirements. Support tickets are stored for up to two years to help resolve follow-up issues. Technical logs are kept for shorter periods (typically up to 13 months) unless security reviews require longer. Marketing data is retained until you unsubscribe or your account is removed.
Your rights
UK residents can request access to their data, ask for corrections, deletion, or restriction, object to processing based on legitimate interests, and request data portability. Consent can be withdrawn at any time without affecting past lawful processing. To act on any right, contact privacy@goldenrush.co.uk or write to the Manchester address above. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.
If you need this policy in a different format, get in touch using the contact details in section 1.