LEGAL
privacy policy
Last updated: 25/09/2025
At Burne and Royce Ltd (“we”, “our”, “us”), we are committed to protecting your privacy and handling your personal information with transparency and care. This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit www.burneandroyce.co.uk (the “Website”), and your rights under the UK General Data Protection Regulation (UK GDPR).
1. Who We Are
Burne and Royce Digital Ltd is a company registered in England and Wales.
Company number: 14851756
Registered office: Unit 7 Navigation Business Village Navigation Way, Ashton-On-Ribble, Preston, Lancashire, United Kingdom, PR2 2YP.
Email: info@burneandroyce.co.uk
We are the “data controller” for the purposes of applicable data protection laws.
2. What Personal Data We Collect
We may collect and process the following types of personal data:
Information you provide:
-
Contact information: name, email address, phone number, postal address
-
Account information: if you register for an account (username, password)
-
Order details: billing/shipping address, purchase history
-
Communications: messages, emails, reviews, or form submissions
-
Marketing preferences: subscription to newsletters or offers
Information we collect automatically:
-
Technical data: IP address, browser type, device type, operating system
-
Usage data: pages visited, time spent on the Website, referral source
-
Cookies and similar technologies: see our [Cookie Policy] for details
Information from third parties:
-
If you access the Website via social media or log in with third-party credentials, we may collect associated profile information.
3. How We Use Your Personal Data
We use your data to:
-
Process orders and provide our services
-
Respond to enquiries and communicate with you
-
Send updates, newsletters, and promotional content (only with your consent)
-
Improve our Website and user experience
-
Comply with legal obligations
-
Detect and prevent fraud or security issues
We rely on the following lawful bases for processing your data:
-
Contractual necessity – to fulfil your orders or service requests
-
Consent – where you have given us permission (e.g. email marketing)
-
Legitimate interests – to operate and improve our business
-
Legal obligations – for tax, regulatory, or fraud-prevention reasons
4. Marketing and Communications
You will only receive marketing communications from us if you have:
-
Subscribed to our mailing list
-
Purchased from us and have not opted out
-
Explicitly given consent
You can unsubscribe at any time by clicking the unsubscribe link in our emails or contacting us.
5. Sharing Your Information
We do not sell your personal data. However, we may share your information with trusted third parties, including:
-
Payment processors (e.g. Stripe, PayPal)
-
Delivery partners (e.g. Royal Mail, couriers)
-
Website hosting and IT service providers
-
Marketing platforms (e.g. Mailchimp, Google Analytics, Meta/Facebook)
-
Legal or regulatory authorities, if required by law
All service providers are required to keep your data secure and use it only for the intended purpose.
6. Data Retention
We keep your personal data only as long as necessary for the purposes we collected it for, including to satisfy legal, accounting, or reporting requirements.
-
Customer records: up to 7 years (for legal and tax purposes)
-
Marketing data: until you unsubscribe or withdraw consent
-
Website analytics data: typically anonymised after 26 months
7. Your Data Protection Rights
Under UK GDPR, you have the following rights:
-
Access – request a copy of the personal data we hold about you
-
Correction – request correction of inaccurate or incomplete data
-
Erasure – request deletion of your data where appropriate
-
Restriction – request restriction of processing in certain circumstances
-
Data portability – request a copy of your data in a structured format
-
Object – object to our use of your data for direct marketing or other purposes
-
Withdraw consent – at any time, where processing is based on consent
To exercise any of these rights, contact us at: [Insert email address]
We will respond within one month of your request.
8. Security of Your Information
We implement appropriate technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction.
However, no method of online transmission or storage is completely secure. We encourage you to use strong passwords and secure your own devices.
9. International Data Transfers
If we transfer your data outside the UK (e.g. to US-based service providers like Google or Mailchimp), we ensure appropriate safeguards are in place, such as:
-
Standard Contractual Clauses (SCCs)
-
Data processing agreements
-
UK adequacy decisions
10. Links to Third-Party Websites
Our Website may contain links to other websites not operated by us. This policy applies only to our Website, so we encourage you to read the privacy policies of any external sites you visit.
11. Children’s Privacy
Our Website is not intended for children under the age of 13. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date and, where appropriate, notify you via email or the Website.
13. Contact Us
If you have questions about this Privacy Policy or your personal data, please contact us:
Burne and Royce Digital Ltd
Email: info@burneandroyce.co.uk
Address: Burne & Royce Digital Blackburn, Suite 8, Saturn Centre, Challenge Way, Blackburn BB1 5QB.
If you're not satisfied with our response, you can contact the Information Commissioner's Office (ICO):
Website: www.ico.org.uk
Phone: 0303 123 1113


















