STRW
Account
LegalLast updated 11 August 2026

Privacy notice

What data we collect, why, how long we keep it and who we share it with. Drawn up under the UK General Data Protection Regulation and the Data Protection Act 2018.

01

Data controller

The data controller is Topstore STRW Ltd, a company registered in England and Wales. Legal name, registered office and registration number are published on the Contact page.

For anything relating to personal data, write to legal@topstorestrw.com. We reply within one month, as the law requires.

02

Data we collect

To fulfil an order we collect first name, last name, delivery address, email address and phone number. The phone number is for the courier in case of a delivery problem and is not used for anything else.

If you open an account we also keep your password in encrypted form, the addresses you choose to save and your order history. We do not process special category data and we do not ask for data we do not actually need.

We neither receive nor store payment data: with bank transfer the operation happens entirely at your bank, with cash on delivery the payment is in cash to the courier.

03

Purposes and legal bases

We process data to perform the contract of sale, meaning to take the order, ship it and handle any return. The legal basis is performance of a contract.

We process data to meet the accounting and tax obligations that apply to a company registered in the United Kingdom. The legal basis is legal obligation.

If you subscribe to the newsletter, we process your email address to send you news about releases. The legal basis is consent, which you can withdraw at any time from the link at the bottom of every email.

04

Anonymous measurement of visits

We count how many people open a product page, how many reach the cart and how many complete a purchase. We do not do it with cookies and we write nothing to the visitor device.

Instead of an identifier, the server computes a short key from the network address and the browser type, mixed with a value that changes every night. The address goes into the calculation and is not retained, and the next day the key is different: the result does not allow a person to be singled out or followed over time, so it does not constitute personal data under the law.

05

Recipients

Data is shared with the couriers handling delivery, limited to what is needed to deliver the parcel, and with the provider of the infrastructure hosting the site and the database.

We do not sell or pass on personal data to third parties for their own commercial purposes. Every supplier acts as a processor under a written contract.

06

Transfers outside the United Kingdom

The database and the site files are hosted with providers whose infrastructure includes the United States. Transfers rely on the approved standard contractual clauses, supplemented by the international addendum required under UK law.

You can ask us for a copy of the safeguards in place by writing to the address above.

07

Retention

Order data is kept for as long as the applicable accounting and tax obligations require, and in any case no longer than needed to defend a legal claim.

Account data stays for as long as the account exists. If you ask for deletion, we remove the profile and keep only the documents the law obliges us to retain.

A newsletter address is deleted immediately after consent is withdrawn.

08

Your rights

At any time you can ask for access to your data, correction of anything inaccurate, erasure, restriction of processing, portability, and you can object to processing based on legitimate interests.

To exercise them, write to legal@topstorestrw.com. We ask for no particular wording, but we may need something that confirms your identity, so that data does not go to the wrong person.

If you believe the processing breaches the law you can complain to the Information Commissioner’s Office, the United Kingdom supervisory authority, or to the supervisory authority of the country where you live.