This privacy policy explains how Andrew J Millar ("we", "us", "our") collects, uses and protects your personal data when you visit www.andrewjmillar.co.uk or make a purchase from us. We take your privacy seriously and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Andrew J Millar is a sole trader operating from the United Kingdom. If you have any questions about this policy or how we handle your data, contact us at hello@andrewjmillar.co.uk

What data we collect

When you make a purchase or create an account we collect:

• Your name and email address
• Delivery and billing address
• Payment information — processed securely by our payment provider, we do not store card details
• Order history
• IP address and browser information collected automatically when you visit the site

If you sign up to our newsletter we collect your email address only.

How we use your data

• To process and fulfil your orders
• To send order confirmations and shipping updates
• To respond to your enquiries
• To send marketing emails if you have opted in — you can unsubscribe at any time
• To improve our website

Legal basis for processing

• Contract — to fulfil orders you place with us
• Legitimate interests — to run and improve our business
• Consent — for marketing emails and non-essential cookies
• Legal obligation — where required by law, such as keeping financial records

How long we keep your data

We keep order and account data for 7 years to comply with HMRC requirements. Marketing data is kept until you unsubscribe. You can request deletion of your account at any time.

Who we share your data with

We do not sell your data. We share it only with payment processors to handle your payment securely, shipping carriers to deliver your order, and hosting providers who store the site data on our behalf. All third parties are required to handle your data securely and in accordance with UK GDPR.

Your rights

Under UK GDPR you have the right to access the personal data we hold about you, correct inaccurate data, request deletion of your data, object to or restrict how we process your data, receive a copy of your data in a portable format, and withdraw consent at any time. To exercise any of these rights email hello@andrewjmillar.co.uk and we will respond within 30 days. You also have the right to complain to the Information Commissioner's Office at ico.org.uk

Changes to this policy

We may update this policy from time to time. Last updated: April 2026.