Privacy policy

How we collect, use, and protect your personal information — written plainly, no surprises.

Who we are

J & M McEwen ("we", "us", "our") is the data controller for personal information collected through this website and our showroom at 76 Junction Rd, Kirkwall, Orkney Islands KW15 1AR, United Kingdom. You can reach our customer service team on +44 1856 872281 or by emailing enquiries@jandmmcewen.co.uk.

What information we collect

We collect personal information when you place an order, sign up to our mailing list, contact our customer service team, browse the website, or visit the showroom. The categories are:

Order details — name, billing address, delivery address, phone, email, items ordered, payment status. Payment card numbers are processed directly by our payment provider; we do not see or store them.
Account details — if you create an account, your login credentials and saved addresses.
Communications — the contents of emails, online chat transcripts and recorded phone calls (when calls are recorded for training).
Website analytics — cookies, device type, browser, IP address, pages visited, referrer. See the cookie policy for detail.
Marketing preferences — whether you have opted in to email marketing.

Why we collect it (lawful basis under UK GDPR)

Purpose	Lawful basis
Process and deliver your order	Contract performance
Provide warranty and after-sales support	Contract performance / legitimate interests
Prevent fraud and verify identity	Legitimate interests
Send marketing emails	Consent (you can withdraw any time)
Comply with accounting, tax, consumer law	Legal obligation
Improve our website and service	Legitimate interests

Who we share it with

We share only what is needed to fulfil your order. The categories of recipient are: our payment provider (Shopify Payments / Stripe), delivery carriers (own van, NorthLink, Pentland Ferries freight, Royal Mail, palletised hauliers), our email service provider, our analytics provider, and HMRC where the law requires. We do not sell your personal information to third parties.

International transfers

Some of our service providers (e.g. our email and analytics tools) may process data outside the UK. Where they do, we rely on the UK's international data transfer agreement or a UK adequacy decision so that your data is protected to UK standards.

How long we keep it

Order and accounting records: 7 years (HMRC requirement)
Customer accounts: until you ask us to close them, plus 90 days
Marketing list: until you unsubscribe
Website analytics: 26 months
CCTV at the showroom: 30 days, on a rolling overwrite

Your rights

Under UK GDPR you have the right to ask us to:

confirm what personal information we hold about you, and give you a copy (subject access request);
correct anything that is wrong;
delete data we no longer need to hold;
restrict how we use it while we look into a dispute;
port it to another provider in a structured format;
object to processing based on legitimate interests;
withdraw consent for marketing at any time.

To exercise any of these rights, email enquiries@jandmmcewen.co.uk with "Data request" in the subject line. We will respond within one calendar month.

Complaints

If you think we have got something wrong, please tell us first — we will fix it. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.