Privacy Policy

W. JOHNSTONE & SONS LIMITED (“Johnstonesons”, “we”, “us”) is the data controller for personal data collected through johnstonesons.shop. This policy explains what we collect, why, and the rights you have under the UK GDPR, EU GDPR and the California Consumer Privacy Act (CCPA).

Information we collect

• Contact and order details: name, email, shipping address, phone number.
• Order information: items purchased, order value and history.
• Payment confirmation: we receive confirmation of payment from our payment processors. We do not store full card numbers on our servers.
• Messages you send us through forms or email.
• Technical data: IP address, browser type and basic analytics about how the site is used.

How we use your information

• To process, fulfil and deliver your orders.
• To provide customer support and respond to enquiries.
• To prevent fraud and keep the store secure.
• To meet legal, tax and accounting obligations.
• With your consent, to send occasional updates you can opt out of at any time.

Legal bases

We rely on performance of a contract (to fulfil your order), legitimate interests (to run and secure the store), consent (for optional marketing) and legal obligation (to keep required records).

Payment processing

Card and wallet payments are handled by PCI-DSS compliant payment processors such as Stripe and PayPal. When you pay, your payment details are submitted directly to the processor under their own privacy terms. We receive only the information needed to confirm and fulfil your order.

Sharing your information

We share data only with providers that help us operate: payment processors, shipping carriers, and hosting and analytics providers. We never sell your personal data. Some providers may process data outside your country under appropriate safeguards.

Data retention

We keep order records for as long as needed to provide our service and to meet legal and tax requirements (typically up to 7 years), then delete or anonymise them.

Your rights

Depending on where you live, you may have the right to access, correct, delete or port your data, to object to or restrict processing, and to withdraw consent. California residents have the right to know what we collect, to request deletion, and not to be discriminated against for exercising these rights. To make a request, email support@johnstonesons.shop.

Cookies

We use essential cookies to run the cart and checkout, and limited analytics cookies to understand site usage. You can control cookies through your browser settings.

Contact

For any privacy question or request, contact W. JOHNSTONE & SONS LIMITED at support@johnstonesons.shop, by phone on +44 7307166449, or by post at 23 George Street, Dumfries, United Kingdom, DG1 1EA.