Privacy policy

Last updated 30 August 2026.

This policy explains what personal data SRAR collects, why we collect it, who we share it with, how long we keep it and what you can do about it. It is written to comply with the UK GDPR and the Data Protection Act 2018, with the EU General Data Protection Regulation where it applies to visitors in the EU, and with the California Consumer Privacy Act as amended by the CPRA for any visitor resident in California.

Who is responsible for your data

SRAR, of 4 St James' Rd, Mitcham CR4 2DA, United Kingdom, is the data controller for the personal data described in this policy. Our full contact details are at the end of the page.

What we collect, and how we collect it

Information you give us directly, through forms on this site

  • Your name, email address and telephone number.
  • Your billing address and your delivery address.
  • The contents of any message you send us through the contact form or by email.

Information collected automatically, through cookies and similar technologies

  • Your IP address, browser type, device type and operating system.
  • The pages you view on this site, the order you view them in, and how long you stay.
  • The website or advertisement you arrived from.

Information collected by our payment provider

When you pay, your card details are entered into the checkout and passed directly to Onerway, our payment provider, and the card networks. We never see, receive or store your full card number. We receive only confirmation that payment succeeded and the last four digits of the card, so we can identify the transaction and issue a refund to the right place.

Why we collect it, and our lawful basis

  • Taking payment and delivering your order. Performance of a contract with you.
  • Sending order confirmations, dispatch emails and tracking emails. Performance of a contract with you.
  • Answering your questions and handling returns. Performance of a contract, and our legitimate interests.
  • Keeping records of sales for tax and accounting. Compliance with a legal obligation.
  • Understanding how the site is used so we can improve it. Your consent, given through the cookie banner.
  • Sending marketing emails. Your consent, which you may withdraw at any time.
  • Preventing fraudulent orders. Our legitimate interests in protecting the business.

Who we share it with

We do not sell your personal data, and we never have. We share it only with the organisations we need to in order to run the shop:

  • Shopify Inc. The platform the store runs on. It hosts the site, processes orders and stores customer records on our behalf.
  • Onerway, our payment provider, and the card networks, to take payment and process refunds.
  • Royal Mail. Your name, delivery address and a contact detail, so your parcel can be delivered.
  • Google, through Google Analytics and Google's advertising products, as described below.
  • Our accountant and HMRC. Transaction records, where the law requires it.

Each of these processes your data under a contract that requires it to keep the data confidential and to use it only for the purpose we specify.

Advertising and personalised ads

We advertise our products through Google, including Google Shopping. To do this we use Google's tags on this site, which set cookies and may share with Google that you viewed a particular product or completed a purchase. Google may use that information to show you our advertisements on other websites, and to measure whether our advertising works.

We do not send Google your name, your email address or your payment details for advertising purposes.

You can opt out of personalised Google advertising at any time at google.com/settings/ads, and you can decline our analytics and advertising cookies through the cookie banner on this site without affecting your ability to shop with us.

Cookies

We use three kinds of cookie.

  • Strictly necessary. These make the basket and the checkout work. They cannot be switched off.
  • Analytics. These tell us which pages are used and where people get stuck.
  • Advertising. These let us measure and target the advertising described above.

You may accept or decline the second and third categories through the banner shown on your first visit, and change your mind at any time through your browser settings.

How long we keep it

  • Order records, including name, address and what you bought: seven years from the end of the tax year in which the order was placed, because HMRC requires it.
  • Contact form and email correspondence: two years from the last message, so we can pick up a conversation where it left off.
  • Marketing consent and your email address, if you subscribed: until you unsubscribe.
  • Analytics data: as configured in Google Analytics, currently 14 months.

How we keep it safe

The whole site is served over an encrypted HTTPS connection. Card details never reach us. Access to the Shopify admin, which holds order records, is protected by a password and two factor authentication and is limited to the people who need it to fulfil orders. No system connected to the internet is completely secure, and we cannot promise absolute security, but we will tell you and the Information Commissioner's Office without delay if a breach affects your data and is likely to put your rights at risk.

Your rights

Under UK and EU data protection law you have the right to:

  • Access the personal data we hold about you, and receive a copy.
  • Correct anything inaccurate or incomplete.
  • Erase your data where there is no longer a reason for us to keep it.
  • Restrict or object to our processing, including profiling for advertising.
  • Receive your data in a machine readable format, or have it sent to someone else.
  • Withdraw consent at any time, where our basis for processing is consent.
  • Opt out of marketing at any time, using the unsubscribe link in any email or by emailing us.

If you are a California resident, the CCPA additionally gives you the right to know what personal information we collect and the purposes we use it for, the right to request its deletion, the right to correct it, and the right to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined by the CCPA. We will never treat you differently, with worse prices or worse service, because you exercised any of these rights.

To exercise any right, email support@srar.uk. We reply within one working day and complete the request within one calendar month. We do not charge for this.

Complaints

If you think we have handled your data badly, tell us first and we will try to put it right. You also have the right to complain to the UK supervisory authority at any time:

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline 0303 123 1113
ico.org.uk

Children

This shop sells adult menswear and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us their data, email us and we will delete it.

Links to other sites

This site may link to websites we do not run. We are not responsible for their privacy practices, and we would encourage you to read their policies before giving them anything.

Changes to this policy

If we change this policy we will update the date at the top of the page and, where the change is significant, tell you by email if we hold your address.

Who to contact about your data

SRAR
4 St James' Rd
Mitcham CR4 2DA
United Kingdom
Email: support@srar.uk
Phone: +44 7405 395180
Hours: Monday to Friday, 9am to 5pm UK time