This policy explains how personal data we collect from you, or that you provide to us, will be processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please read the following carefully to understand how we will treat your personal data.
Will Lord of the Stone Age (“we”, “us”, “our”) is responsible for your personal data.
If you have any questions about this policy or how we use your data, please contact us at:
Email: shop@will-lord.co.uk
We may collect and process the following data about you:
Personal details such as name, email address, telephone number and billing address
Account registration details
Order and purchase information for products, courses, and digital content
Payment-related information (processed securely by third-party providers)
Reviews, ratings, and comments submitted on our website
Newsletter subscriptions and marketing preferences
Gift voucher purchases and recipient details
Enquiries and correspondence via email, forms, or telephone
Telephone calls may be recorded for training and quality purposes.
When you use our website, we may automatically collect:
IP address
Browser type and version
Operating system
Referring and exit pages
Pages visited and interaction data
Device information
Date and time of visits
This data is collected using cookies, server logs, and similar technologies.
We use your personal data for the following purposes:
To create and manage customer accounts
To process orders, bookings, courses, and digital products
To deliver gift vouchers and digital services
To manage reviews and user-generated content
To provide customer support
To send service-related communications
To manage newsletter subscriptions
To carry out marketing (where consent has been given)
To improve website performance and user experience
To comply with legal obligations
To prevent fraud and enhance security
To conduct statistical and business analysis
We will never sell your personal data to third parties.
Under UK GDPR, we must have a lawful basis for using your data. We rely on the following:
Contract – where processing is necessary to fulfil your order or provide services
Consent – for newsletters and marketing communications
Legal Obligation – for tax, accounting, and regulatory purposes
Legitimate Interests – to improve our services, prevent fraud, and run our business effectively
You may withdraw your consent at any time.
We will only send you marketing communications if:
You have opted in, or
You are an existing customer and have not opted out
You can unsubscribe at any time by using the link in our emails or contacting us directly.
When you leave a review or rating on our website, we may display:
Your name or username
Your comments
Your rating
Reviews may remain publicly visible unless you request their removal.
We use trusted third-party providers to process payments and deliver services, including:
Payment processors (e.g. Stripe, PayPal)
Email marketing platforms
Hosting providers
Course delivery platforms
Analytics providers
These providers only process data on our instructions and are required to keep it secure.
We do not store full payment card details on our servers.
We only keep your personal data for as long as necessary.
Typical retention periods include:
Invoice and accounting records: minimum 6 years (UK legal requirement)
Customer accounts: while active and up to 24 months after inactivity
Marketing data: until you unsubscribe
Reviews: until removal is requested
Support records: up to 3 years
We may retain data longer where required by law.
Under UK GDPR, you have the right to:
Access your personal data
Request correction of inaccurate data
Request erasure (“right to be forgotten”)
Restrict processing
Object to processing
Request data portability
Withdraw consent
Lodge a complaint with the ICO
You can exercise these rights by contacting us.
Information Commissioner’s Office:
https://ico.org.uk/make-a-complaint/
We take appropriate technical and organisational measures to protect your personal data, including:
SSL encryption
Secure hosting
Access controls
Regular software updates
Limited staff access
In the event of a data breach that may result in a risk to your rights and freedoms, we will notify affected individuals and the Information Commissioner’s Office within the timescales required by law.
Our website uses cookies and similar technologies to:
Analyse website traffic
Remember user preferences
Enable shopping basket functionality
Support marketing and remarketing
Improve site performance
Cookies may include:
Essential cookies
Performance cookies
Functionality cookies
Marketing cookies
You can manage cookies through your browser settings and our cookie banner.
Disabling cookies may affect website functionality.
Our website may contain links to external websites. We are not responsible for their privacy practices. Please review their policies before submitting personal data.
Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR.
We review this Privacy Policy regularly and may update it from time to time. Any changes will be published on this page.
If you have any questions about this policy or your personal data, please contact:
Email: shop@will-lord.co.uk
