Privacy policy

Last updated: March 2026

RunedForge (a trading name of S Cooke Limited, company number 10940336) is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data when you use our website (runedforge.com) or make a purchase.

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What Data We Collect

When you place an order:

  • Name, email address, phone number
  • Billing and shipping address
  • Payment information (processed securely by Shopify Payments — we do not store card details)
  • Order history and transaction records

When you browse our website:

  • IP address, browser type, device information
  • Pages visited, time spent, referring URL
  • Cookies and similar technologies (see Cookies section below)

When you sign up to our newsletter:

  • Email address

When you contact us:

  • Name, email address, and any information you include in your message

How We Use Your Data

We use your personal data for the following purposes:

  • To fulfil orders — processing payments, arranging delivery, sending order confirmations and shipping updates
  • To comply with legal obligations — tax records, consumer protection regulations, fraud prevention
  • To communicate with you — responding to enquiries, sending service-related emails
  • To send marketing emails — only with your consent, and you can unsubscribe at any time
  • To improve our website — analysing browsing patterns to enhance user experience

Legal Basis for Processing

Under the UK GDPR, we process your data on the following bases:

  • Contract — necessary to fulfil your order and provide our services
  • Legal obligation — tax and accounting requirements, consumer protection law
  • Legitimate interest — fraud prevention, website security, improving our services
  • Consent — marketing emails and non-essential cookies (you can withdraw consent at any time)

Who We Share Your Data With

We share your data only where necessary:

  • Shopify — our e-commerce platform (processes orders, payments, and hosts our store)
  • Royal Mail / delivery partners — to deliver your orders
  • Google Analytics — website usage data (anonymised where possible)
  • Email marketing provider — if you subscribe to our newsletter

We do not sell your personal data to third parties. We do not share your data with any party not listed above without your consent, unless required by law.

Data Retention

  • Order data — retained for 6 years to comply with HMRC tax record requirements
  • Marketing data — retained until you unsubscribe or request deletion
  • Website analytics — anonymised data retained for up to 26 months
  • Customer enquiries — retained for 2 years after resolution

Your Rights

Under the UK GDPR, you have the right to:

  • Access your personal data (Subject Access Request)
  • Rectify inaccurate or incomplete data
  • Erase your data (right to be forgotten), where there is no legal obligation to retain it
  • Restrict processing in certain circumstances
  • Data portability — receive your data in a structured, machine-readable format
  • Object to processing based on legitimate interest
  • Withdraw consent for marketing at any time

To exercise any of these rights, email us at admin@runedforge.com. We will respond within one month.

Cookies

Our website uses cookies to function properly and to improve your experience.

Essential cookies (always active):

  • Shopify session cookies — required for the shopping cart and checkout to work
  • Security cookies — fraud prevention and site protection

Analytics cookies (with your consent):

  • Google Analytics — helps us understand how visitors use our site

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using the checkout.

Children's Privacy

Our website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

International Transfers

Your data is primarily processed within the UK and European Economic Area. Where data is transferred outside the UK/EEA (for example, by Shopify's infrastructure), appropriate safeguards are in place in accordance with UK GDPR requirements.

Changes to This Policy

We may update this policy from time to time. The most current version will always be available on this page. We will notify you of significant changes via email or a notice on our website.

Contact Us

If you have any questions about this privacy policy or how we handle your data:

Email: admin@runedforge.com
Post: S Cooke Limited, 15 Chaldon Road, Poole, BH17 8DA

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

This policy does not affect your statutory rights under UK data protection law.