Privacy policy
OriginaTwo8 Ltd — originaltwo8.com
Last updated:23.08.2026
OriginalTwo8 Ltd ("we", "us", "our") operates this store and website at originaltwo8.com (the "Services"). We are the data controller for the personal information described in this policy. This store is hosted on Shopify, which also processes some data on our behalf and, in some cases, as an independent controller — see "Our Relationship with Shopify" below.
This policy explains what personal information we collect, why, how long we keep it, who we share it with, and the rights you have over it under UK data protection law (the UK GDPR and the Data Protection Act 2018).
1. Who We Are
OriginalTwo8 Ltd
62 Alpha Street, Liverpool, Merseyside, L21 8HL, England
Email: original.two.8@gmail.com
2. Personal Information We Collect
• Contact details — name, billing and delivery address, phone number, email address
• Order and payment information — items purchased, order value, payment confirmation (card details themselves are handled directly by our payment processor and Shopify, not stored by us)
• Account information — if you create an account, your username, preferences and order history
• Communications — anything you send us via email or contact forms
• Device and usage information — IP address, browser type, pages viewed, and similar data collected automatically via cookies and analytics tools
3. How and Why We Use It, and Our Legal Basis
Under UK GDPR, we must have a lawful basis for each way we use your data. Here's how that applies:
• To take and fulfil your order, process payment, arrange delivery, and handle returns — necessary to perform our contract with you.
• To respond to customer service enquiries — necessary to perform our contract, or our legitimate interest in supporting our customers.
• To prevent fraud and keep the Services secure — our legitimate interest in protecting our business and customers.
• To send you marketing emails or offers — only with your consent (e.g. via our email sign-up), which you can withdraw at any time.
• To run analytics and advertising cookies (e.g. TikTok, Meta) — based on your cookie consent, given through our cookie banner.
• To comply with our legal obligations — for example, keeping financial records for HMRC.
4. Cookies and Similar Technologies
We use cookies and similar technologies for three broad purposes:
• Strictly necessary cookies — required for the store, cart and checkout to function; these don't require consent.
• Analytics cookies — help us understand how visitors use the site.
• Advertising/marketing cookies — used by platforms such as TikTok and Meta to measure and personalise ads.
Where cookies are not strictly necessary, we will ask for your consent via a cookie banner before they are set, and you can change your preferences at any time. Details of the specific cookies we use are available on request or via our cookie settings tool.
5. Who We Share Your Information With
• Shopify, our e-commerce platform provider, which processes data to run the store and checkout.
• Payment processors, to take payment securely.
• Delivery and fulfilment partners (including dropshipping suppliers), to get your order to you.
• Marketing and analytics providers (e.g. email marketing tools, TikTok, Meta), where you've consented to related cookies.
• Professional advisers such as our accountant, where necessary.
• Law enforcement or regulators, where we're legally required to.
We do not sell your personal information to third parties.
6. International Transfers
Some of our service providers (including Shopify and certain marketing platforms) may process data outside the UK. Where this happens, we rely on approved safeguards such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or a transfer to a country the UK government has assessed as providing adequate protection.
7. How Long We Keep Your Information
• Order and transaction records: kept for at least 6 years to meet HMRC and accounting obligations.
• Account information: kept while your account is active, and deleted or anonymised within a reasonable period after closure.
• Marketing consent: kept until you unsubscribe or withdraw consent.
• Customer service correspondence: kept for as long as needed to resolve your query and for a reasonable period afterwards.
8. Your Rights
Under UK data protection law, you have the right to:
• Access the personal information we hold about you
• Have inaccurate information corrected
• Request deletion of your information, in certain circumstances
• Object to, or ask us to restrict, certain processing
• Receive your data in a portable format, where technically feasible
• Withdraw consent at any time, where we rely on consent
To exercise any of these rights, contact us at original.two.8@gmail.com. We may need to verify your identity before acting on a request, and we'll respond within one month as required by law.
9. Complaints
If you're unhappy with how we've handled your personal information, please contact us first so we can try to resolve it. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113.
10. Children's Data
Our Services are not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
11. Security
We use reasonable technical and organisational measures to protect your personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or the law. The current version will always be available on this page, with the date it was last updated shown at the top.
13. Contact Us
Email: original.two.8@gmail.com