YOUR PRIVACY MATTERS
Privacy,
with care.
How personal information may be collected, used, stored, and protected when you visit our website or contact us.
LAST UPDATED 13 OCTOBER 2026
CitiStores Private Clients respects your privacy and is committed to protecting the personal information you share with us. This policy explains our approach in clear terms.
1. Introduction
This Privacy Policy explains how personal information may be collected, used, stored, and protected when you visit our website, contact us, or enquire about our services.
We process personal information in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, where applicable.
2. Information we may collect
Depending on how you interact with our website and services, we may collect the following information:
- Contact information: Your name, email address, telephone number, and other contact details you choose to provide.
- Enquiry information: Details of your questions, shopping preferences, product requests, and communications with us.
- Transaction information: Relevant information required to manage an order or service, where applicable.
- Technical information: Information such as your IP address, browser type, device information, and website usage data.
- Marketing preferences: Your preferences regarding receiving promotional communications, where applicable.
We aim to collect only information that is relevant and necessary for the purposes described in this policy.
3. How we use your information
We may use your personal information to:
- Respond to enquiries and requests.
- Provide information about our services.
- Understand your shopping requirements and preferences.
- Manage orders or service requests, where applicable.
- Improve our website and customer experience.
- Maintain website security and prevent misuse.
- Comply with applicable legal and regulatory obligations.
- Send marketing communications where we have the appropriate permission or other lawful basis.
We will not use your information for purposes that are incompatible with the purposes for which it was collected unless permitted by applicable law.
4. Lawful basis for processing
Where required by data protection law, we rely on one or more lawful bases to process personal information. These may include:
- Consent: Where you have given consent for a specific purpose.
- Contract: Where processing is necessary to take steps at your request or fulfil an agreement.
- Legitimate interests: Where processing is necessary for our legitimate business interests and those interests do not override your rights.
- Legal obligations: Where processing is necessary to comply with applicable laws.
The appropriate lawful basis depends on the particular processing activity.
7. Data security
We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure. You should take care when submitting personal information online.
8. Data retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including responding to enquiries, providing services, maintaining appropriate business records, and meeting legal obligations.
The applicable retention period depends on the type of information and the circumstances in which it was collected.
9. International data transfers
If personal information is transferred outside the United Kingdom, we will take appropriate steps to ensure that the transfer complies with applicable data protection requirements.
Where required, appropriate safeguards will be implemented to protect the information being transferred.
10. Your privacy rights
Depending on the circumstances and applicable law, you may have the right to:
- Request access to your personal information.
- Request correction of inaccurate or incomplete information.
- Request erasure of your personal information.
- Request restriction of certain processing activities.
- Object to certain types of processing.
- Request the transfer of information you provided to us.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with the UK Information Commissioner's Office (ICO).
These rights are subject to applicable legal conditions and exceptions. To exercise a privacy right, please contact us using the contact form on our website.
11. Third-party websites
Our website may contain links to external websites or services. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any external websites you visit.
12. Children's privacy
Our website and services are not intended to knowingly collect personal information from children in circumstances where parental consent or other legal safeguards are required.
If you believe a child has provided personal information to us inappropriately, please contact us so that we can assess and address the matter.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, technology, or legal obligations. Any updated version will be published on this page with a revised date.
14. Contact us
If you have questions about this Privacy Policy or how we handle personal information, please contact CitiStores Private Clients through the contact form on our website.
We will review and respond to privacy-related enquiries in accordance with applicable requirements.