Privacy policy

Last Updated: 22/05/2026

1. Introduction

This Privacy Policy describes how we collect, use, store, and disclose your personal information when you visit, use, or make a purchase through our website, or otherwise communicate with us.

We are committed to protecting your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Personal Information We Collect

Contact details including your name, billing address, shipping address, phone number, and email address
Financial information including payment card details, transaction details, and payment confirmation
Account information including your username, password, and account preferences
Transaction information including items viewed, added to cart, purchased, returned, or cancelled
Communications including information you include when contacting our customer support team
Device and usage information including your IP address, browser type, and how you interact with our website

3. How We Collect Your Information

Directly from you when you create an account, place an order, or contact us
Automatically through cookies and similar technologies when you use our website
From service providers who collect or process information on our behalf
From third-party partners where permitted by applicable law

4. How We Use Your Information

To process and fulfil your orders, including payment, shipping, and returns
To manage your account and provide customer support
To send order confirmations, updates, and service-related notifications
To send marketing communications where you have given consent or where permitted by law
To improve and personalise your shopping experience
To detect and prevent fraud and ensure the security of our website
To comply with our legal obligations under UK law

5. Legal Basis for Processing (UK GDPR)

Contract: to fulfil orders and provide our services to you
Legal obligation: to comply with UK law and regulatory requirements
Legitimate interests: to improve our services, prevent fraud, and manage our business
Consent: for marketing communications and non-essential cookies

6. Cookies

We use cookies and similar tracking technologies on our website in accordance with the UK Privacy and Electronic Communications Regulations (PECR). You will be asked for your consent before non-essential cookies are placed on your device. For full details, please refer to our Cookie Policy.

7. How We Share Your Information

Service providers who assist with payment processing, order fulfilment, IT management, customer support, and data analytics
Marketing partners to deliver relevant advertising, where you have consented or where permitted by law
Our e-commerce platform provider who hosts and operates our online store on our behalf
Legal authorities where required by law, court order, or to protect our legal rights
Business transfers in connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

8. International Data Transfers

Your personal information may be transferred to and processed in countries outside the United Kingdom. Where such transfers occur, we ensure appropriate safeguards are in place, such as the use of UK International Data Transfer Agreements (IDTAs) or equivalent mechanisms, in compliance with UK GDPR.

9. Data Retention

Order and transaction records: 6 years in accordance with UK tax and accounting regulations
Account information: for the duration of your account and 2 years thereafter
Marketing data: until you withdraw your consent or opt out

When your information is no longer required, we will securely delete or anonymise it.

10. Your Rights Under UK GDPR

Right to access: request a copy of the personal information we hold about you
Right to rectification: request correction of inaccurate or incomplete information
Right to erasure: request deletion of your personal information in certain circumstances
Right to restriction: request that we limit how we use your information
Right to portability: request a copy of your data in a machine-readable format
Right to object: object to processing based on legitimate interests or for direct marketing
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at contact@gantina.com. We will respond within one calendar month as required by UK GDPR.

11. Marketing Communications

We may send you promotional emails where you have opted in or where permitted by law. You can opt out at any time by using the unsubscribe link in any marketing email or by contacting us at contact@gantina.com. Opting out of marketing will not affect service-related communications such as order confirmations.

12. Children's Data

Our website is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their personal information, please contact us and we will delete it promptly.

13. Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

14. Complaints

If you have concerns about how we handle your personal information, please contact us first at contact@gantina.com. If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: https://ico.org.uk
Phone: 0303 123 1113

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by updating the date at the top of this page and, where appropriate, by email.

Contact

Email: contact@gantina.com

Phone: +44 78 10 76 05 84

Address: 8 St George St, London W1S 2FE, UK

Business Hours: Monday – Friday: 9am – 6pm (GMT)