Privacy policy
Last updated: 2026
Cardhaven Ltd (“we”, “us”) is the data controller for personal data collected through cardhaveen.shop. We process personal data in accordance with the UK GDPR and the Data Protection Act 2018.
What we collect
- Contact and delivery details you provide at checkout (name, email, phone, address).
- Order history and basket contents, including baskets that are not completed.
- Anonymous usage analytics such as pages viewed and products viewed.
Why we use it
- To process and deliver your order (contract).
- To provide customer support and handle returns (contract and legal obligation).
- To improve the shop and understand which products are popular (legitimate interests).
- To send order updates. Marketing email is only sent where you have opted in (consent).
Retention
Order records are kept for six years to meet UK tax and accounting requirements. Incomplete basket data is deleted after 90 days. Analytics data is retained for 12 months.
Sharing
We share delivery details with our carrier (Royal Mail) and payment details with our payment provider. We never sell personal data.
Cookies and local storage
We use essential browser storage to remember your basket and a session identifier used for basket recovery and anonymous analytics. No third-party advertising cookies are set.
Your rights
You may request access to, correction of, or deletion of your personal data, and may object to processing based on legitimate interests. Email privacy@cardhaveen.shop. You can also complain to the Information Commissioner’s Office (ico.org.uk).