This document explains how Crownshop Ltd gathers, processes and safeguards personal data. We hold privacy to the same standard as the equipment we sell — with rigour, transparency and no shortcuts.
Crownshop Ltd ("we", "us", "our") is a limited company incorporated in England and Wales under registration number 15961007, operating from 1 Waterside Station Road, Harpenden, Hertfordshire, AL5 4US, United Kingdom.
We specialise in fitness equipment and accessories, distributing primarily via the Amazon Marketplace. Through these activities, we collect and process personal data belonging to customers, site visitors and individuals who correspond with us directly. This Privacy Policy outlines the categories of data we collect, the reasons for processing, our retention practices and the rights available to you under current legislation.
Crownshop Ltd serves as the data controller for all personal information referenced in this document. Our data processing activities are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We gather personal data under the following circumstances and in these categories:
We do not handle payment card information; all payment processing is managed directly by Amazon within their own data protection framework.
Personal data is processed only where a legitimate legal basis exists under UK GDPR Article 6(1). The grounds upon which we rely are set out below:
When you make a purchase or submit an enquiry, we process your contact and order information to discharge our obligations: addressing your query, administering returns or warranty claims, and delivering post-sale assistance.
We process a limited volume of technical and behavioural data to evaluate website performance, identify irregular activity and enhance service quality. These interests have been balanced against your rights, and we have determined that they do not override your fundamental freedoms.
Where you have enrolled in our mailing list, marketing messages are dispatched on the basis of your explicit consent. You may revoke consent at any point by selecting the unsubscribe option in any email or by writing to us directly.
Specific records are maintained to satisfy HMRC reporting requirements and additional statutory obligations applicable to UK-registered businesses.
We do not sell, lease or trade personal data with external parties for their own promotional purposes. Data is disclosed only in the following situations:
Purchases made through Amazon fall under Amazon's independent privacy framework. Amazon operates as a separate data controller for transaction handling and payment processing. We encourage you to consult Amazon's Privacy Notice at amazon.co.uk for full details.
A small number of third-party processors assist us with website hosting, analytics and email distribution. Each provider operates under a signed data processing agreement and is restricted from using your information for any purpose beyond the specific service rendered to us.
We may release personal data where compelled by statute, judicial order, or a lawful demand from a governmental or regulatory body, including HMRC and law enforcement authorities exercising their statutory powers.
Our website deploys cookies and analogous tracking technologies for operational and analytical functions.
These are fundamental to website operation and cannot be switched off. They support core functions such as page navigation and access to secure sections of the site.
We employ anonymised analytics solutions to examine visitor patterns — identifying popular pages, tracking session flow and determining traffic sources. These tools do not capture personally identifiable information.
Cookie preferences can be managed through your browser settings. Disabling certain cookies may reduce website functionality. For independent guidance on cookie management, visit allaboutcookies.org.
We implement appropriate technical and organisational safeguards to protect personal data from unauthorised access, accidental loss and unlawful disclosure. These measures include access restrictions, encrypted communications and periodic reviews of our security protocols.
When data ceases to serve its original purpose and no legal retention requirement applies, it is securely erased or permanently anonymised.
Under the UK GDPR, you are entitled to exercise the following rights concerning your personal data:
To exercise any of these rights, please write to us at crownshop-ltd@hotmail.com. We will respond within 30 days. Identity verification may be required before we can process your request.
Should you believe that your personal data has been handled unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection. The ICO can be reached at ico.org.uk or by telephone on 0303 123 1113.
For any enquiries or requests connected to this Privacy Policy or the handling of your personal data, please contact us at:
This policy is reviewed at regular intervals to accommodate changes in our operations, regulatory requirements or supervisory guidance. The "Last updated" date shown above indicates the most recent revision. Where material amendments are made, we will notify affected individuals by email where their contact details are on file. Your continued use of our website or services following any update constitutes acknowledgement of the revised terms.