Privacy policy

Perrock ("we," "our," or "us") runs this e-commerce website together with its associated services (referred to collectively as the "Platform"). Based in the United Kingdom, we act as the data controller responsible for your personal information.

When you access or use our Platform, you confirm that you understand and accept the practices set out in this Privacy Policy.

1. DATA CONTROLLER DETAILS

PERROCK

Address: 1 Regent Terrace, Gateshead NE8 1HA, United Kingdom
Phone: +44 7520689743
Email: support@perrock.com

Customer Service Hours:
Monday to Friday, 10:00 a.m. – 6:00 p.m. (GMT)
We aim to respond to all inquiries within 24 hours.

2. TYPES OF PERSONAL INFORMATION WE COLLECT

Which personal data we gather depends on how you engage with our Platform, and may include:

Identification and Contact Details: Name, email address, phone number, delivery address, and billing address.

Purchase and Transaction Data: Items ordered or returned, order totals, payment references, and limited payment information (full card numbers are handled by our payment partners and are not retained by us).

Account Data (for registered users): Login credentials, usernames, and saved preferences.

Support Communications: Messages, attachments, and correspondence you exchange with our customer service team.

Technical and Usage Information: IP addresses, device identifiers, browser type, operating system, pages viewed, clickstream data, and cookie identifiers.

3. HOW WE COLLECT YOUR INFORMATION

Directly from you: When you place orders, set up accounts, sign up for communications, or reach out to customer support.

Automatically: Through cookies, pixels, and comparable tracking technologies while you browse our Platform.

From third parties: Via service providers who help us with payment processing, shipping, marketing, and analytics.

4. WHY WE PROCESS YOUR DATA AND OUR LEGAL BASIS (GDPR ARTICLE 6)

We handle your personal information for these purposes:

Order Processing and Account Management (completing purchases, arranging deliveries, managing returns, offering customer support) — Legal basis: Performance of a contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).

Payment Handling and Fraud Prevention — Legal basis: Legitimate interests (Art. 6(1)(f)) and compliance with legal obligations, including financial and tax regulations (Art. 6(1)(c)).

Platform Improvement and Analytics (understanding how users behave, fixing technical problems, improving functionality) — Legal basis: Legitimate interests (Art. 6(1)(f)).

Marketing and Promotional Activities (sending newsletters, tailored offers, and targeted advertising) — Legal basis: Consent where the law requires it (Art. 6(1)(a)); otherwise legitimate interests (Art. 6(1)(f)). You may opt out at any time.

Legal and Regulatory Compliance (fulfilling tax duties, financial reporting, responding to lawful requests from authorities) — Legal basis: Legal obligation (Art. 6(1)(c)).

5. COOKIES AND TRACKING TECHNOLOGIES

We make use of cookies and similar technologies to:

Support core website features (essential cookies),
Retain your settings and preferences,
Assess site performance and user engagement, and
Serve relevant marketing content where this is permitted.

Where the law requires it, we'll ask for your consent to non-essential cookies the first time you visit our Platform. You can change your cookie preferences whenever you like through our cookie settings panel or your browser controls. Do bear in mind that switching off certain cookies may affect how the Platform works.

6. SHARING YOUR INFORMATION

We share personal data only where it's needed to run our Platform:

E-commerce Platform Provider (Shopify): Hosting, order management, and security services.

Payment Processors: Secure transaction handling and fraud detection.

Logistics and Fulfillment Partners: Order dispatch and return processing.

Technology and Analytics Providers: Cloud infrastructure, email delivery, and performance measurement.

Professional Advisors: Legal, accounting, and compliance support where required.

Corporate Transactions: Should a merger, acquisition, or asset sale take place, your data may pass to the successor entity.

Under no circumstances do we sell your personal information to third parties.

7. INTERNATIONAL DATA TRANSFERS

Certain of our service providers (Shopify and its sub-processors included) may process your data beyond the United Kingdom or the European Economic Area. Whenever such transfers happen, we make sure suitable safeguards are in place, such as the EU Standard Contractual Clauses (SCCs). You're welcome to ask us for copies of the relevant transfer documentation (though some information may be redacted for confidentiality reasons).

8. DATA RETENTION

We keep personal data only for as long as it's needed to serve the purposes described in this Policy and to satisfy legal requirements. Our usual retention periods are:

Transaction and Invoice Records: Up to 10 years (as tax and accounting laws require).

Account Information: For as long as your account stays active; deleted or anonymised once there's been prolonged inactivity and any legal retention period has passed.

Customer Service Records: Up to 3 years after resolution (extended if needed for legal proceedings).

Marketing Preferences: Until you withdraw consent or object to processing; after that, your details are removed from promotional communications.

9. YOUR RIGHTS UNDER DATA PROTECTION LAW

Under both the UK GDPR and the EU GDPR, you have the right to:

Access the personal data we hold on you,
Ask us to correct data that is inaccurate or incomplete,
Request that your data be deleted in certain situations,
Restrict or object to processing,
Obtain your data in a portable format, and
Withdraw consent at any time (where processing relies on consent).

To make use of any of these rights, email us at support@perrock.com. We may need to confirm your identity before acting on your request. We'll reply within one month (though this can be extended by up to two further months for complex requests, in which case we'll let you know beforehand).

You are also entitled to file a complaint with a supervisory authority. In the UK, that's the Information Commissioner's Office (ICO). If you live in the EEA, you can approach your local data protection authority.

10. CHILDREN'S PRIVACY

Our Platform isn't built for or aimed at anyone under the age of 16. We don't knowingly gather personal data from children. If you suspect a child has shared personal information with us, please let us know right away so we can remove it.

11. AUTOMATED DECISION-MAKING

We don't carry out automated decision-making or profiling that would have legal effects on you or affect you in a similarly significant way (as set out in GDPR Article 22).

12. SHOPIFY PLATFORM

Our online shop runs on Shopify, which supplies the hosting, order management, analytics, and security infrastructure. Shopify processes your data acting as our data processor, and may independently control certain aggregated or platform-level data. For more information, take a look at Shopify's Privacy Policy and Privacy Portal.

13. UPDATES TO THIS POLICY

From time to time we may revise this Privacy Policy. Any changes will appear on this page alongside a refreshed "Last Modified" date. When the changes are significant, we'll notify you as the applicable law requires.