Política de privacidad

Privacy Policy

At a Glance

We respect your privacy and are committed to handling your personal information fairly, lawfully and securely.

  • We collect personal information needed to operate our website, process orders, provide customer service and protect our business.
  • We do not sell your personal information.
  • We share information only where necessary, including with payment, delivery, website, analytics, marketing, fraud-prevention and professional service providers.
  • You have rights over your personal information under applicable data protection law.
  • You can unsubscribe from marketing communications at any time.

This summary should be read together with the full Privacy Policy below.

Full Privacy Policy

1. Who We Are

This website is operated by Diecast Model Centre Ltd, a company registered in England and Wales under Company No. 14431108.

For the purposes of applicable data protection law, the data controller is:

Diecast Model Centre Ltd
Peckett Plaza, Caldicott Drive
Heapham Road Industrial Estate
Gainsborough
DN21 1FJ
United Kingdom

Email: ian@diecastmodelcentre.co.uk

A data controller is the organisation that determines why and how personal information is processed. As Diecast Model Centre Ltd is a limited company, the company itself is the data controller.

2. Scope of This Policy

This Privacy Policy applies when you:

  • visit or use our website;
  • create or use a customer account;
  • place or enquire about an order;
  • request a return, cancellation or electronic withdrawal;
  • contact us by email, telephone, website form, social media or another communication channel;
  • subscribe to marketing communications;
  • otherwise interact with our products, services or website.

This policy applies to consumers, business customers, prospective customers and website visitors.

3. Personal Information We Collect

Information You Provide

Depending on how you interact with us, we may collect:

  • your name;
  • billing and delivery addresses;
  • email address;
  • telephone number;
  • account and login information;
  • order history and product preferences;
  • information included in enquiries, reviews, return requests or other correspondence;
  • business name, position, company details or VAT information where relevant;
  • information supplied to verify an order, payment or business purchase;
  • marketing preferences and consent records;
  • records of returns, refunds, cancellations, payment disputes and customer-service interactions.

Payment Information

Payments are processed through secure payment providers. We do not normally receive or store your full payment-card number or card security code.

We may receive limited payment information, such as:

  • payment status;
  • payment method;
  • billing name and address;
  • partial or masked card details;
  • transaction identifiers;
  • fraud, verification or risk indicators provided by payment services.

Information Collected Automatically

When you use our website, we and our service providers may collect:

  • IP address;
  • browser type and version;
  • device type and operating system;
  • approximate location derived from technical information;
  • pages viewed and links selected;
  • dates, times and duration of visits;
  • referral source and campaign information;
  • shopping-basket, checkout and website interaction information;
  • cookie identifiers and similar technical data.

This information may be collected through cookies, pixels, local storage, server logs and similar technologies. Please see our Cookie Policy for further details.

Information Received from Other Sources

We may receive personal information from:

  • Shopify and other website service providers;
  • payment processors and fraud-prevention services;
  • delivery carriers and fulfilment providers;
  • analytics, advertising and marketing platforms;
  • review providers;
  • publicly available sources;
  • business directories or company records where relevant to a business transaction;
  • law enforcement, regulators or other authorities where legally permitted.

4. How We Use Personal Information

We may use personal information to:

  • operate, maintain and secure our website;
  • create and manage customer accounts;
  • process, verify and fulfil orders;
  • take payment and issue refunds;
  • arrange delivery and provide tracking information;
  • manage pre-orders, deposits and outstanding balances;
  • process cancellations, returns, withdrawal requests, complaints and warranty claims;
  • communicate about orders, enquiries and customer-service matters;
  • verify identity, billing information, authority to order or the nature of a transaction;
  • assess large, unusual or potentially high-risk orders;
  • detect, investigate and prevent fraud, payment abuse, unauthorised transactions and misuse of our policies or promotions;
  • maintain internal records of orders, returns, payment disputes and account restrictions;
  • improve our products, website, customer experience and business operations;
  • analyse website performance and customer behaviour;
  • comply with legal, tax, accounting, regulatory and record-keeping obligations;
  • establish, exercise or defend legal claims;
  • send marketing communications where permitted;
  • personalise advertising or measure marketing performance where permitted and subject to applicable consent requirements.

5. Lawful Bases for Processing

Under the UK General Data Protection Regulation and Data Protection Act 2018, and under the EU GDPR where it applies, we must have a lawful basis for processing personal information.

Contract

We process information where necessary to take steps at your request before entering a contract or to perform a contract with you. This includes processing orders, taking payment, arranging delivery, providing order communications and managing returns.

Legal Obligation

We process information where necessary to comply with legal obligations, including tax, accounting, product-safety, consumer-law and regulatory requirements.

Legitimate Interests

We may process information where it is necessary for our legitimate interests or those of another organisation, provided those interests are not overridden by your rights and interests.

Our legitimate interests may include:

  • operating and improving our business and website;
  • providing effective customer service;
  • protecting customers, staff, suppliers and our business;
  • preventing and investigating fraud, payment abuse and misuse;
  • reviewing unusual or high-risk orders;
  • maintaining appropriate records;
  • establishing, exercising or defending legal claims;
  • understanding website performance and customer demand;
  • sending limited business-to-business marketing where legally permitted.

Consent

We rely on consent where required, including for certain electronic marketing communications and non-essential cookies. You may withdraw consent at any time, although this will not affect processing carried out before withdrawal.

6. Orders, Fraud Prevention and Transaction Monitoring

We and our payment, website and fraud-prevention providers may use personal information to assess transactions, verify customer details and identify activity that may indicate fraud, unauthorised payment or misuse.

This may involve considering information such as:

  • billing and delivery information;
  • payment and transaction history;
  • device, IP address and technical information;
  • order value, quantity and purchasing patterns;
  • account history;
  • returns, cancellations, payment disputes or previous suspected misuse;
  • risk indicators supplied by payment processors or other service providers.

These checks may result in an order being delayed for review, a request for additional verification, a payment being declined, an order being refused before acceptance or an account being restricted.

Some risk checks may use automated tools or scoring. Where applicable law provides rights relating to a solely automated decision that produces legal or similarly significant effects, you may contact us to request information, express your point of view or ask for appropriate human review.

We do not use fraud-prevention information to make decisions based on protected characteristics.

7. Electronic Withdrawal and Return Requests

If you use an electronic withdrawal or returns function on our website, we may process:

  • your name and contact details;
  • order number and order details;
  • the items concerned;
  • the reason selected or information supplied;
  • the date and time of the request;
  • supporting photographs or documents where relevant;
  • communications and outcomes relating to the request.

We use this information to identify the order, process the request, communicate with you, arrange return services, issue refunds and comply with contractual and legal obligations.

We rely primarily on contract and legal obligation for this processing. We may also rely on legitimate interests where necessary to investigate suspected misuse, protect our rights or maintain appropriate records.

8. Sharing Personal Information

We do not sell your personal information.

We may share personal information where necessary with trusted organisations, including:

  • Shopify and website-hosting providers;
  • payment processors, banks and payment services;
  • fraud-prevention, identity-verification and security providers;
  • delivery carriers, fulfilment providers and collection services;
  • website app, customer support and AI-assisted functionality providers;
  • email, SMS and marketing platforms;
  • analytics, advertising and performance-measurement providers;
  • review and feedback platforms;
  • accountants, insurers, legal advisers and other professional advisers;
  • tax authorities, regulators, courts, law-enforcement bodies or public authorities where required or permitted by law;
  • a purchaser, investor or adviser involved in a proposed sale, transfer, restructuring or financing of all or part of our business.

These organisations may process personal information on our behalf as our service providers or, where appropriate, for their own purposes as independent data controllers in accordance with their own privacy information.

Where organisations process personal information on our behalf, we require them to protect it appropriately and to use it only for authorised purposes.

9. Shopify

Our website is hosted by Shopify, which provides the ecommerce platform through which we offer our products and services.

Shopify may process personal information to provide, secure and improve its services, including website hosting, checkout, account functions, analytics and payment-related services.

Further information is available in Shopify’s Privacy Policy.

10. Shopify Inbox AI Assistant

We use Shopify Inbox, including Shopify's AI-assisted chat features, to help provide customer support through our website.

When you communicate with us using the website chat, Shopify may process the information you provide, including your chat messages and any personal information contained within them, in order to:

  • generate AI-assisted responses to customer enquiries;
  • assist our customer support team in responding more efficiently; and
  • improve the quality, accuracy and performance of Shopify's AI-assisted chat services over time.

Please avoid including sensitive personal information in chat messages unless it is necessary for us to assist with your enquiry.

Information processed through Shopify Inbox is subject to appropriate contractual and technical safeguards. For more information about how Shopify processes personal information, please refer to Shopify's Privacy Policy.

11. Cookies and Similar Technologies

We use cookies and similar technologies to:

  • provide essential website and checkout functionality;
  • remember settings and preferences;
  • secure accounts and prevent fraud;
  • measure website use and performance;
  • understand how visitors interact with our website;
  • support advertising and marketing where permitted.

Where required, we obtain consent before using non-essential cookies or similar technologies.

You can manage available choices through our cookie banner and, where applicable, through your browser or device settings.

Please see our Cookie Policy for more information.

12. Order and Service Communications

We may send communications that are necessary to provide our services, including:

  • order acknowledgements and confirmations;
  • payment and verification requests;
  • pre-order updates and balance-payment notices;
  • delivery and tracking information;
  • returns and refund communications;
  • product-safety, recall or important service notices;
  • responses to enquiries or complaints.

These are service communications rather than marketing messages. You may continue to receive them where necessary even if you have opted out of marketing.

13. Marketing Communications

Where permitted, we may send information about:

  • new products and announcements;
  • offers and promotions;
  • restocks and availability;
  • business news or relevant content.

We send electronic marketing only where we have an appropriate lawful basis and comply with applicable direct-marketing rules.

You can unsubscribe at any time by:

  • using the unsubscribe link in a marketing email;
  • following the opt-out instructions in a message;
  • contacting us directly.

We may keep a minimal suppression record after you unsubscribe so that we can respect your preference and avoid sending further marketing.

14. SMS and Mobile Messaging

If you opt in to an SMS or mobile messaging service, we may use your telephone number to send the communications described at the point of sign-up.

You can opt out using the instructions provided in the message, such as replying STOP, where supported, or by contacting us.

Standard network charges may apply depending on your mobile provider and tariff.

15. International Transfers

Some service providers may store or process personal information outside the United Kingdom or the country in which you live.

Where a restricted international transfer takes place, we use or rely on appropriate safeguards where required, which may include:

  • a UK adequacy regulation or other recognised adequacy decision;
  • the UK International Data Transfer Agreement;
  • the UK Addendum to approved standard contractual clauses;
  • approved contractual clauses or other lawful transfer mechanisms;
  • an applicable legal exception where permitted.

You may contact us for further information about the safeguards relevant to your personal information.

16. Data Retention

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including legal, accounting, tax, fraud-prevention and dispute-resolution requirements.

Typical retention periods include:

  • order, payment and accounting records: normally six years after the end of the relevant financial period, or longer where legally required;
  • customer-service, return and complaint records: for a reasonable period taking account of possible follow-up enquiries, disputes and legal claims;
  • fraud-prevention and account-restriction records: for as long as reasonably necessary and proportionate to protect our business and customers;
  • marketing records: until you unsubscribe, withdraw consent or the information is no longer required, together with any necessary suppression record;
  • cookie and analytics information: according to the periods described in our Cookie Policy or the settings of the relevant provider.

Retention periods may vary where a longer period is required by law, a dispute is ongoing or information is needed to establish, exercise or defend legal claims.

17. Data Accuracy

Please ensure that the personal information you provide is accurate and up to date.

You can update certain account information through your customer account or contact us to request a correction.

18. Data Security

We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, disclosure, access or destruction.

Measures may include access controls, secure service providers, encryption in transit, account authentication, staff confidentiality and fraud-monitoring processes.

Although we take reasonable security precautions, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

19. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have the right to:

  • be informed about how your personal information is used;
  • request access to personal information we hold about you;
  • request correction of inaccurate or incomplete information;
  • request erasure of personal information in certain circumstances;
  • request restriction of processing in certain circumstances;
  • object to processing based on legitimate interests;
  • object to direct marketing at any time;
  • request data portability where the right applies;
  • withdraw consent where processing is based on consent;
  • raise concerns about certain automated decisions and request applicable safeguards.

These rights are not absolute and may be subject to legal conditions, exceptions or exemptions.

We may need to verify your identity before responding to a request. We will normally respond within one month, although the law allows this period to be extended in certain circumstances.

You will not normally have to pay a fee. A reasonable fee may be charged, or a request may be refused, where the law permits this because a request is manifestly unfounded or excessive.

To exercise a right, please contact us using the details in Section 23.

20. Complaints

Please contact us first if you have concerns about how we use your personal information so that we have an opportunity to address them.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection:

Information Commissioner’s Office – Make a Complaint

If you are located outside the United Kingdom, you may also have the right to complain to the relevant data protection authority in your country.

21. Children’s Information

Our website and services are intended for adults and are not directed at children.

You must be at least 18 years old to place an order independently. We do not knowingly collect personal information directly from children for marketing purposes.

If you believe a child has provided personal information to us without appropriate authority, please contact us.

22. Links to Other Websites

Our website may contain links to websites operated by other organisations. We are not responsible for their privacy practices or content.

You should review the privacy information provided by the relevant third party before supplying personal information through its website or service.

23. Contacting Us

For questions about this Privacy Policy or to exercise your data protection rights, please contact:

Diecast Model Centre Ltd
Peckett Plaza, Caldicott Drive
Heapham Road Industrial Estate
Gainsborough
DN21 1FJ
United Kingdom

Email: ian@diecastmodelcentre.co.uk

24. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our business, website, services, service providers or legal obligations.

The latest version will be published on this page with an updated revision date. Where a change is significant, we may provide an additional notice where appropriate.

Last updated: July 2026