Privacy Policy

1. Who we are

Northpine Shop Ltd is the controller of personal data processed through this website. Our contact details are provided below for privacy requests and general support.

2. Personal data we collect

We collect data you provide directly and some data collected automatically when you use the site. Examples include:

• Contact details such as name, email address, and phone number (if provided).
• Order-related information such as items purchased, delivery address, and communications with support.
• Technical data such as device type, browser, approximate location (derived from IP), and site interaction metrics.
• Cookie preferences, including whether you accepted or rejected optional cookies.

3. How we use your data

We use your personal data to provide services and improve the website. Typical purposes include processing orders, responding to support requests, preventing fraud, maintaining site security, and improving site usability. We do not use personal data for deceptive advertising or to mislead customers.

4. Legal bases for processing (UK GDPR)

Where required, we rely on one or more of the following legal bases:

• Contract: to process and deliver orders, handle payments, and provide customer service.
• Legitimate interests: to secure the website, prevent abuse, and improve performance and usability.
• Consent: for optional cookies and, where applicable, marketing communications.
• Legal obligation: for accounting, tax, and regulatory requirements.

5. Cookies

We use essential cookies for core functionality such as remembering cookie preferences and supporting site features. Optional cookies may be used for analytics to understand how visitors use the site. You can accept or reject optional cookies using the cookie banner. Essential cookies cannot be disabled through the banner because they are required for the site to function as intended.

6. Sharing your data

We share personal data only when needed to provide services, comply with law, or protect our rights. Typical recipients include payment processors, delivery carriers, and service providers that help us operate the website. We require service providers to protect data and process it only for authorized purposes.

7. International transfers

If we transfer personal data outside the UK, we use appropriate safeguards, such as adequacy regulations or contractual protections, to help ensure a similar level of protection.

8. Data retention

We retain personal data only as long as necessary for the purposes described in this policy. For example, order records may be kept to meet accounting and tax obligations, while support messages are retained to manage customer service and disputes. When data is no longer needed, we delete or anonymize it.

9. Security

We apply reasonable technical and organizational measures to protect personal data. No online system can be guaranteed 100% secure, but we work to reduce risks through access controls, secure communications, and careful vendor selection.

10. Your rights

Depending on your circumstances, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object to certain processing. You may also have a right to data portability and to withdraw consent where processing is based on consent. To exercise your rights, contact us using the details in Section 1.

11. Complaints

If you are not satisfied with how we handle your data, you can contact us first so we can address the issue. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO). We do not include external links on this site, but you can find the ICO by searching for the official UK regulator website.

12. Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. When we update it, we will revise the effective date at the top of this page.