Privacy Policy

1. Who is responsible for your data

REGAL GROUP NE LTD (trading as Ordwell) is the data controller for the personal data described in this policy. You can reach us at support@reggrone.shop or by post at 8 Rowan West Levisham Lane, DL2 1QZ, England. For any privacy request, please put "Privacy" in the subject line.

2. What we collect

• Order and delivery data: name, email, phone (optional), delivery address, city, postal code and country.
• Account and membership data: membership tier, subscription status and billing metadata (never full card numbers).
• Support and enquiry data: the contents of contact, wholesale and support messages you send us.
• Transaction data: order totals, items, currency (USD) and payment status returned by our payment processor.
• Technical data: IP address, device and browser type, and essential/analytics cookie identifiers (see our Cookie Policy).

3. Where we collect it from

• Directly from you when you check out, create or manage a membership, or complete a form.
• Automatically from your device when you use the site (cookies and similar technologies).
• From our payment processor, which confirms payment outcomes without sharing your full card details with us.

4. Why we use it and our legal bases

• To fulfil your order and memberships — legal basis: performance of a contract.
• To provide support and answer enquiries — legal basis: performance of a contract or our legitimate interests.
• To take payment and prevent fraud — legal basis: contract and legitimate interests.
• To improve the store and remember cart items — legal basis: legitimate interests and, for non-essential cookies, your consent.
• To meet legal, tax and accounting duties — legal basis: legal obligation.
• To send marketing where permitted — legal basis: consent, which you can withdraw at any time.

5. Payment provider boundary

Card payments are processed by Stripe on Stripe-hosted checkout pages. Your full card number, expiry and security code are entered on Stripe and are never seen or stored by Ordwell. We receive only the payment result and limited metadata needed to manage your order. Stripe processes card data as an independent controller under its own terms and privacy notice.

6. Who we share it with

We share personal data only with processors and partners that help us run the store:

• Hosting and infrastructure: our cloud hosting provider serves the site and stores data.
• Payments: Stripe for card processing and subscription billing.
• Database and authentication: our managed database provider stores orders, leads and membership records.
• Email and delivery: email and shipping/carrier partners to confirm orders and deliver goods.
• Legal and regulatory bodies where we are required to disclose by law.

We do not sell your personal data.

7. International transfers

We ship internationally where available and use service providers that may process data outside your country. Where data leaves the UK or EEA, we rely on adequacy decisions or Standard Contractual Clauses (and the UK International Data Transfer Addendum) to protect it.

8. How long we keep it

We keep order and transaction records for as long as needed to fulfil the order and to meet tax and accounting obligations. Enquiry and lead data is kept for no longer than 24 months unless an active relationship or legal requirement means we need it longer. When data is no longer needed, we delete or anonymise it.

9. Your rights

Depending on where you live, you have rights under UK GDPR, EU GDPR and the California Consumer Privacy Act (CCPA/CPRA), including:

• Access to the personal data we hold about you.
• Correction of inaccurate data.
• Deletion ("right to be forgotten") where applicable.
• Restriction of, or objection to, certain processing.
• Data portability.
• Withdrawal of consent at any time, without affecting prior processing.
• For California residents: the right to know, delete, correct and to opt out of the sale or sharing of personal information.

To exercise any right, email support@reggrone.shop. You also have the right to complain to a supervisory authority — in the UK, the Information Commissioner's Office (ICO).

10. Do Not Sell or Share

We do not sell your personal information and do not share it for cross-context behavioural advertising. If our practices ever change, we will provide a clear "Do Not Sell or Share My Personal Information" control and honour opt-out preference signals.

11. Cookies and analytics

We use essential cookies to run the cart and checkout, and limited analytics to understand site usage. You can control non-essential cookies as described in our Cookie Policy.

12. Automated decisions and children

We do not make decisions with legal or similarly significant effects using solely automated processing. Our store is not directed at children: it is not available to under-13s, and 13–17 year-olds may only use it with the consent of a parent or guardian.

13. Security

We use encryption in transit, access controls and reputable processors to protect your data. No method of transmission or storage is completely secure, but we take reasonable steps to safeguard your information and to notify you and regulators of a qualifying breach where required.

14. Contact

Questions or requests about this policy: support@reggrone.shop, +44 7749736823, or by post at REGAL GROUP NE LTD, 8 Rowan West Levisham Lane, DL2 1QZ, England.