Privacy policy

1. About this policy

This Privacy and Cookie Policy explains how Resin Studio collects, uses, stores and shares personal information when you:

  • visit or use our website;

  • create an account;

  • place an order;

  • contact us;

  • subscribe to marketing communications; or

  • otherwise interact with Resin Studio.

It also explains how we use cookies and similar technologies, the choices available to you and your rights under applicable data-protection law.

2. Who we are

Resin Studio® is a registered trade mark of Scale Model Shop Ltd.

Scale Model Shop Ltd is registered in England and Wales under company number 08261696.

Registered office:

Scale Model Shop Ltd
White Rose Mill
Holmfield
Halifax
HX3 6SN
United Kingdom

For the purposes of the UK General Data Protection Regulation, the Data Protection Act 2018 and other applicable data-protection legislation, Scale Model Shop Ltd is the data controller for the personal information described in this policy.

In this policy, “Resin Studio”, “we”, “us” and “our” refer to Scale Model Shop Ltd trading as Resin Studio.

3. Contacting us

If you have questions about this policy, our use of your information or your data-protection rights, please contact us:

Email: info@resinstudio.co.uk
Telephone: 01422 405045
Post: Scale Model Shop Ltd, White Rose Mill, Holmfield, Halifax, HX3 6SN, United Kingdom

4. Personal information we collect

The information we collect depends on how you interact with us.

Information you provide directly

This may include:

  • your name;

  • billing and delivery addresses;

  • email address;

  • telephone number;

  • account details and preferences;

  • products ordered, returned or exchanged;

  • information supplied when you contact us;

  • responses to surveys, competitions or promotions;

  • marketing preferences; and

  • reviews or other content you choose to submit.

Please do not send sensitive personal information through our website or contact forms unless we specifically request it and explain why it is required.

Order and transaction information

When you place an order, we may collect:

  • your order number;

  • the products and quantities ordered;

  • prices, discounts and delivery charges;

  • payment status and payment method;

  • delivery and fulfilment information;

  • refund, return and cancellation information; and

  • correspondence relating to your order.

Payments are processed by Shopify and the applicable payment provider. We do not normally receive or retain your complete payment-card number or security code.

Information collected automatically

When you visit our website, we and our service providers may automatically collect:

  • your IP address;

  • device type;

  • browser type and version;

  • operating system;

  • approximate location derived from your IP address;

  • pages viewed;

  • links selected;

  • products viewed or added to your basket;

  • referring website;

  • session information;

  • website interactions;

  • cookie identifiers; and

  • diagnostic, security and performance information.

This information may be collected using cookies, pixels, tags, local storage and similar technologies.

5. Sources of personal information

We may receive personal information:

  • directly from you;

  • automatically from your device when you use our website;

  • from Shopify, which hosts and operates our online store;

  • from payment providers;

  • from delivery and fulfilment companies;

  • from applications and services connected to our Shopify store;

  • from analytics, advertising and marketing providers where permitted;

  • from fraud-prevention and security providers;

  • from social-media platforms when you interact with us through those services; and

  • from publicly available sources where lawful and appropriate.

6. How and why we use your information

We only use personal information when we have a lawful reason to do so.

Processing and fulfilling orders

We use your information to:

  • accept and process orders;

  • take and confirm payment;

  • provide order confirmations and updates;

  • deliver products;

  • process returns, refunds and exchanges;

  • manage pre-orders;

  • respond to order enquiries; and

  • maintain transaction and accounting records.

Our lawful bases are the performance of a contract with you, compliance with our legal obligations and our legitimate interests in operating and protecting our business.

Customer accounts

If you create an account, we use your information to:

  • create and administer the account;

  • authenticate access;

  • save your preferences;

  • display order information; and

  • provide account-related support.

Our lawful bases are the performance of a contract with you and our legitimate interests in providing useful account services.

Customer service

We use information supplied in telephone calls, emails, forms and other communications to:

  • answer questions;

  • provide product guidance;

  • investigate complaints;

  • resolve problems; and

  • keep an appropriate record of our correspondence.

Our lawful bases are the performance of a contract, compliance with legal obligations and our legitimate interests in providing effective customer service.

Marketing

Where permitted, we may use your contact details and preferences to send information about:

  • products;

  • offers;

  • news;

  • guides;

  • events; and

  • Resin Studio services.

Where consent is required, we will only send this marketing after you have actively agreed to receive it.

You can unsubscribe from marketing emails at any time by selecting the unsubscribe link in an email or contacting us. Unsubscribing from marketing will not prevent us from sending necessary service messages about your orders or account.

Our lawful bases are your consent or, where legally permitted, our legitimate interests in promoting our products to existing customers.

Website operation and improvement

We may use website and device information to:

  • operate and maintain the website;

  • remember your preferences;

  • maintain your shopping basket;

  • understand how customers use the website;

  • improve navigation, content and performance;

  • diagnose technical problems;

  • measure the effectiveness of website features; and

  • develop our products and services.

Our lawful bases are our legitimate interests in operating and improving our business and, where required for non-essential cookies or tracking, your consent.

Personalisation and advertising

Where you have given the required consent, we and our partners may use information about your website activity to:

  • personalise your experience;

  • recommend relevant products;

  • measure advertising performance;

  • create marketing audiences; and

  • show relevant advertising on this website or other websites and services.

You can control non-essential cookies and similar technologies through our cookie banner and cookie-preference controls.

The lawful basis for this processing is normally your consent.

Security and fraud prevention

We use information to:

  • secure our website and systems;

  • authenticate users;

  • identify suspicious transactions;

  • prevent fraud and misuse;

  • investigate security incidents; and

  • protect our customers, staff and business.

Our lawful bases are our legitimate interests in protecting the business and our customers, compliance with legal obligations and, where necessary, the establishment or defence of legal claims.

Legal and regulatory purposes

We may use or retain information to:

  • meet accounting and taxation requirements;

  • respond to lawful requests from public authorities;

  • comply with court orders;

  • enforce our terms and policies;

  • establish, exercise or defend legal claims; and

  • comply with other legal or regulatory obligations.

Our lawful basis is compliance with a legal obligation or our legitimate interests in protecting and enforcing our rights.

7. How we share personal information

We may share personal information where necessary with the following categories of recipient.

Shopify

Our online store is hosted by Shopify. Shopify processes information about your use of the store to provide ecommerce, checkout, account, security, analytics and related services.

Information submitted through the store is transmitted to Shopify and may also be processed by Shopify’s service providers.

You can learn more in the Shopify Consumer Privacy Policy.

You may also be able to exercise certain rights relating to information processed by Shopify through the Shopify Privacy Portal.

Payment providers

Payment information is shared with the payment provider selected during checkout so it can:

  • authorise and process payment;

  • conduct fraud and security checks;

  • issue refunds; and

  • meet its regulatory obligations.

Payment providers process information under their own privacy notices.

Delivery and fulfilment providers

We share the information required to deliver your order with postal operators, couriers, fulfilment services and relevant delivery partners. This normally includes your name, delivery address, contact details and parcel information.

Professional and operational service providers

We may use organisations that provide:

  • website and IT services;

  • cloud storage;

  • accounting and bookkeeping;

  • customer support;

  • communications;

  • email marketing;

  • analytics;

  • security;

  • fraud prevention;

  • product reviews; and

  • professional legal, financial or insurance services.

These organisations receive only the information reasonably required to perform their services and must handle it appropriately.

Authorities and legal recipients

We may disclose information where reasonably necessary to:

  • comply with the law;

  • respond to a court order or lawful request;

  • protect someone’s safety;

  • investigate suspected fraud or criminal activity;

  • enforce our legal rights; or

  • defend a legal claim.

Business transfers

If Scale Model Shop Ltd or part of its business is sold, reorganised or transferred, relevant personal information may be disclosed to advisers, prospective purchasers or the acquiring organisation, subject to appropriate confidentiality and data-protection safeguards.

We do not sell personal information in the ordinary meaning of selling customer lists for money.

8. Shopify enhanced services

We may use Shopify features that combine information from interactions with our store, Shopify and other Shopify merchants to provide services such as fraud protection, analytics, personalisation and advertising.

Where these features involve non-essential cookies, advertising or similar tracking, they will be subject to the consent choices available through our cookie banner.

For certain enhanced services, Shopify may process personal information as an independent controller and is responsible for dealing with rights relating to that processing.

Further information is available in the Shopify Consumer Privacy Policy and through the Shopify Privacy Portal.

9. Cookies and similar technologies

What cookies are

Cookies are small text files stored on your computer, telephone, tablet or other device when you visit a website.

We may also use similar technologies such as pixels, tags, local storage and software-development tools. In this section, references to cookies include these similar technologies where appropriate.

Why we use cookies

Cookies may be used to:

  • operate the website;

  • keep the website and checkout secure;

  • remember items placed in your basket;

  • remember your preferences;

  • enable customer accounts;

  • understand website performance;

  • measure visits and customer interactions;

  • improve our services;

  • personalise content; and

  • provide and measure advertising where you have consented.

Types of cookies we may use

Strictly necessary cookies

These cookies are required for essential website functions such as:

  • maintaining your shopping basket;

  • processing checkout;

  • providing secure account access;

  • preventing fraud;

  • balancing website traffic; and

  • remembering privacy choices.

These cookies cannot normally be disabled through our cookie-preference tool because the website may not work correctly without them.

Consent is not normally required for cookies that are strictly necessary to provide a service you have requested. We nevertheless provide information about their use.

Functional cookies

These cookies remember choices you make and provide enhanced features, such as language, region or other display preferences.

Where required by law, we ask for consent before using them.

Analytics cookies

These cookies help us understand how visitors use the website, which pages are popular, how customers move around the store and whether errors occur.

We use this information to measure and improve the website. We will obtain consent before using analytics cookies where the law requires it.

Advertising and marketing cookies

These cookies and similar technologies may be used to:

  • measure advertising;

  • limit how often an advertisement is displayed;

  • understand whether an advertisement resulted in a visit or purchase;

  • create advertising audiences; and

  • display advertisements relevant to your interests.

We do not activate these technologies where consent is required unless you have agreed to their use.

Third-party cookies

Some cookies may be placed or accessed by third parties that provide services to us, including Shopify, payment providers, analytics services, advertising platforms and applications installed on our store.

These third parties may process information under their own privacy and cookie policies.

The exact cookies used may change when Shopify, an installed application or one of our services is updated. Our cookie banner and preference controls provide current information about the available cookie categories.

Your cookie choices

When you first visit the website, our cookie banner allows you to make choices about non-essential cookies.

You can:

  • accept non-essential cookies;

  • reject non-essential cookies;

  • choose particular cookie categories; and

  • change or withdraw your consent later through the Cookie preferences link.

Rejecting non-essential cookies will not prevent you from shopping with us, although some optional features may be unavailable or less personalised.

You can also use your browser settings to block or delete cookies. Blocking strictly necessary cookies through your browser may prevent the website, basket, account or checkout from functioning properly.

Withdrawal of consent does not affect processing that took place lawfully before consent was withdrawn.

10. International transfers

Shopify and some of our other service providers operate internationally. This means personal information may be stored, accessed or processed outside the United Kingdom.

Where a restricted transfer is made, we or the relevant provider will use a lawful transfer mechanism where required. This may include:

  • UK adequacy regulations;

  • the UK International Data Transfer Agreement;

  • the UK Addendum to the European Commission’s Standard Contractual Clauses; or

  • another legally permitted safeguard or exception.

Further information about Shopify’s international processing is available in Shopify’s privacy documentation.

11. How long we retain information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to meet legal, accounting, taxation, security and reporting obligations.

Retention periods depend on:

  • the type of information;

  • why it was collected;

  • whether an account remains active;

  • whether it is required to fulfil a contract;

  • applicable legal requirements;

  • the risk associated with retaining it; and

  • whether it is required for a dispute or legal claim.

Order, payment, invoice and accounting records will generally be retained for at least six years from the end of the relevant company financial year, or longer where the law requires it.

Customer-service correspondence is retained for as long as reasonably necessary to resolve the matter and maintain an appropriate business record.

Marketing information is retained until you unsubscribe, withdraw consent or we determine that it is no longer appropriate to retain it. We may retain limited suppression information so that we can respect an unsubscribe request.

Cookie and consent records may be retained as required to remember and demonstrate your privacy choices.

When information is no longer required, we will delete it, anonymise it or securely restrict its use where deletion is not immediately possible.

12. Security

We use reasonable technical and organisational measures designed to protect personal information against:

  • accidental loss;

  • unauthorised access;

  • alteration;

  • misuse;

  • disclosure; and

  • destruction.

However, no internet transmission or information-storage system is completely secure. You should not send confidential payment information or other highly sensitive information through ordinary email or contact forms.

If you create an account, you are responsible for keeping your login information confidential and should not share your password with anyone else.

13. Children’s information

Our website and products are intended for adults purchasing craft products and are not directed at children.

We do not knowingly collect personal information directly from children who are not legally able to provide it. If you believe a child has provided personal information to us improperly, please contact us so we can investigate and take appropriate action.

14. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you the right to:

  • be informed about how your information is used;

  • request access to the personal information we hold about you;

  • ask us to correct inaccurate or incomplete information;

  • ask us to delete information;

  • ask us to restrict how information is used;

  • object to processing based on legitimate interests;

  • object to direct marketing;

  • receive certain information in a portable format;

  • withdraw consent where processing is based on consent; and

  • ask for information about safeguards used for certain international transfers.

These rights are not absolute. Legal exceptions may allow or require us to retain or continue using certain information.

You will not normally be charged for exercising these rights. We may request information reasonably necessary to verify your identity and protect personal information against unauthorised disclosure.

To exercise a right, contact us at info@resinstudio.co.uk.

We will respond within the period required by applicable law. For most UK data-protection requests, this is normally within one month, although the period may be extended where legally permitted.

15. Automated decision-making

We do not ordinarily make decisions that produce legal or similarly significant effects about customers using solely automated processing.

Shopify, payment providers and fraud-prevention services may automatically assess transactions for fraud and security purposes. If an order is rejected or delayed and you believe this has occurred incorrectly, please contact us.

16. Marketing preferences

You can stop receiving marketing communications by:

  • selecting the unsubscribe link in a marketing email;

  • changing an available account preference; or

  • contacting us at info@resinstudio.co.uk.

We may continue to send essential messages concerning orders, payments, deliveries, security, accounts or changes to services you use.

17. External websites

Our website may contain links to websites, applications or services operated by other organisations.

We are not responsible for how those organisations collect or use personal information. You should review their privacy policies before providing information to them.

18. Complaints

If you are concerned about how we have handled your personal information, please contact us first so that we can try to resolve the issue.

You also have the right to complain to the UK Information Commissioner’s Office.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Telephone: 0303 123 1113
Website: ico.org.uk/make-a-complaint

19. Changes to this policy

We may update this Privacy and Cookie Policy to reflect:

  • changes to our services;

  • changes to Shopify or connected applications;

  • changes to our use of personal information;

  • legal or regulatory developments; or

  • other operational requirements.

The latest version will be published on this website, and the “Last updated” date will be changed accordingly. Where required, we will provide additional notice of a significant change.