Privacy policy

Last updated: 4 October 2026

M J Cronin ("we", "us", "our") respects your privacy. This policy explains how we collect, use, share and protect your personal data when you visit mjcronin.co.uk, shop with us or contact us. We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

M J Cronin is the data controller for the personal data described in this policy.

M J Cronin, 19 Sussex Rd, Knaphill, Woking GU21 2RA, United Kingdom. Email: info@mjcronin.co.uk. Phone: +44 1483 799144.

2. The data we collect

  • Identity and contact data: name, billing and delivery address, email address and phone number.

  • Order data: products purchased, order value, order history and communications about your order.

  • Payment data: processed securely by our payment providers. We do not store full card numbers.

  • Technical data: IP address, browser type, device information and pages visited, collected through cookies and similar technologies.

  • Marketing preferences: whether you have chosen to receive emails from us.

3. How we use your data and our lawful basis

Purpose

Lawful basis

Processing and delivering your order, handling returns and refunds

Performance of a contract

Answering your questions and providing customer support

Performance of a contract or legitimate interests

Preventing fraud and keeping our website secure

Legitimate interests

Keeping financial records for tax and accounting

Legal obligation

Sending marketing emails

Consent (you can withdraw at any time)

Improving our website and range using analytics

Consent, through our cookie banner

4. Who we share your data with

We share personal data only where needed to run our business:

  • Shopify, which hosts our online store and checkout

  • Payment providers, including Shopify Payments and Shop Pay, to process payments

  • Delivery partners: Royal Mail, DPD and FedEx, to deliver your order

  • Email and analytics providers, to send order updates and understand site use

  • Professional advisers and authorities, where required by law

We do not sell your personal data.

5. International transfers

Where international transfers require safeguards, we use appropriate transfer mechanisms under UK data protection law, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, as applicable.

6. How long we keep your data

We keep order and transaction records for six years to meet UK tax and accounting requirements. We keep marketing data until you unsubscribe. Other data is kept only as long as needed for the purpose it was collected.

7. Cookies

We use essential cookies to make the website and checkout work. With your consent, we also use analytics and marketing cookies. You can change your choices at any time through the cookie banner or your browser settings.

8. Your rights

Under UK data protection law, you have the right to:

  • Access the personal data we hold about you

  • Ask us to correct inaccurate data

  • Ask us to delete your data

  • Restrict or object to certain processing

  • Request a copy of your data in a portable format

  • Withdraw consent at any time, where we rely on consent

To exercise any of these rights, email info@mjcronin.co.uk. We will respond within one month.

9. Data security

We use appropriate technical and organisational measures to protect your data, including encrypted checkout and restricted access to customer records.

10. Children

Our website is not intended for children under 16, and we do not knowingly collect their personal data.

11. Complaints

If you have concerns about how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with the date it was last updated.