Privacy policy

This Privacy Policy explains howIvory London Limited (“we”, “us”, “our”) collects, uses and protects your personal data when you visit www.g-t.store, place an order, contact us, or otherwise interact with us.

We are the data controller of your personal data for the purposes of UK data protection law. Controllers are the organisations that decide why and how personal data is used.

1. Who we are

Business name: Ivory London Limited
Trading name: Grand Tourer
Email: hello@g-t.store

If you have any questions about this Privacy Policy or how we handle your data, please contact us using the details above.

2. What personal data we collect

We may collect and process the following categories of personal data:

• your name

• billing address

• delivery address

• email address

• phone number

• order details

• payment information (processed securely by our payment provider — we do not usually store full card details)

• communications you send to us

• technical data such as IP address, browser type, device information and how you use our website

• marketing preferences

The ICO says privacy information should clearly explain what data is collected and how it is used.

3. How we collect your data

We collect personal data:

• directly from you when you place an order, fill in a form, sign up to marketing, or contact us

• automatically when you use our website, through cookies and similar technologies

• from service providers involved in payment, delivery, website hosting, analytics or marketing

4. How we use your personal data

We use your personal data to:

• process and deliver your orders

• take payment and manage refunds

• communicate with you about your order

• provide customer support

• manage our relationship with you

• improve our website, products and services

• prevent fraud and protect our business

• send marketing communications where permitted by law or where you have consented

5. Our lawful bases for processing

Under UK GDPR, we must have a lawful basis for using your personal data. Depending on the circumstances, we rely on:

• Contract — where we need to process your data to fulfil your order or take steps before entering into a contract with you

• Legal obligation — where we need to comply with legal or regulatory requirements

• Legitimate interests — where we use your data for legitimate business reasons, provided your rights do not override those interests

• Consent — where we rely on your consent, such as for certain marketing or cookie activity

The ICO requires organisations to tell people the lawful basis they rely on and their purposes for processing.

6. Payments

Payments made through our website are processed by third-party payment providers. We only share the personal data necessary to process your payment, prevent fraud, and comply with legal obligations.

7. Sharing your personal data

We may share your personal data with trusted third parties where necessary, including:

• payment processors

• delivery and courier companies

• website hosting and ecommerce platform providers

• IT and security providers

• analytics providers

• email and marketing platforms

• professional advisers where necessary

• regulators, authorities, or law enforcement where required by law

If another organisation processes personal data on our behalf, it may act as our processor and must only process the data on our instructions under appropriate arrangements.

8. International transfers

Some of our service providers may process personal data outside the UK. Where this happens, we take steps to ensure your data is protected in line with UK data protection law.

9. How long we keep your data

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, tax, or reporting requirements.

For example, we may keep:

• order records for up to [6 years] for tax and accounting purposes

• customer service communications for [12–24 months]

• marketing records until you unsubscribe or withdraw consent, unless we need to retain limited suppression data

If you do not use a fixed period, the ICO says you should explain the criteria you use to decide retention periods.

10. Your rights

Under UK data protection law, you may have the right to:

• access your personal data

• have inaccurate personal data corrected

• ask for your data to be erased

• restrict how your data is used

• object to processing

• request transfer of your data in certain circumstances

• withdraw consent where processing is based on consent

• complain to the Information Commissioner’s Office (ICO)

The ICO states that people must be told what rights they have in relation to their personal data.

11. Complaints

If you have concerns about how we use your data, please contact us first and we will try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection matters. The ICO recommends explaining how people can make complaints in clear language.

12. Cookies

Our website may use cookies and similar technologies to operate properly, improve performance, analyse traffic, and support marketing activity. You can control cookies through your browser settings and, where required, through our cookie banner.

13. Third-party links

Our website may contain links to other websites. This Privacy Policy does not apply to those third-party websites, and you should read their own privacy notices.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We recommend checking this page periodically to stay informed of any changes. The ICO also notes privacy notices should be kept under review and updated when needed.