Privacy Policy

1. Who is responsible for your data

The data controller is DOWNTOWN SIXTYSIX LTD, registered office 82 Shaftesbury Avenue, CT19 4LT, United Kingdom. For any privacy question or request, contact support@downsixt.shop or call +44 7287380071.

2. What we collect

• Order and delivery data: name, email, phone (optional), shipping address, city, postal code and country you enter at checkout.
• Payment data: our payment processor handles your card details. We receive confirmation, amount, currency, the last four digits and a payment reference — never your full card number.
• Enquiry and support data: the content of contact and custom-order forms, including quantity and use case.
• Account and membership data: if you join Counter Club, your plan, billing status and preferences.
• Technical and usage data: IP address, device and browser type, and pages viewed, collected via cookies and similar technologies.

3. Collection sources — where the data comes from

We collect personal data from the following collection sources:

• Directly from you: the details you type into our checkout, contact form, custom & wholesale form, or send us by email or phone.
• Automatically from your device: IP address, device and browser type and pages viewed, gathered through cookies and similar technologies when you browse the store.
• From our payment processor: payment outcome, amount, currency, card last four digits and a payment reference — returned to us after you pay.
• From our delivery carriers: dispatch, tracking and delivery-status updates for your parcel.

We do not buy personal data from data brokers and we do not collect personal data from social media or other third-party sources.

4. Order fulfilment data

Because we ship physical ceramics, order fulfilment is the main reason we hold your personal data. Specifically:

• Delivery address: your name, delivery address, postal code, country and (where given) phone number are used to pick, pack, label and deliver your order. We pass these to the delivery carrier handling your parcel — carriers act as separate controllers for the delivery itself.
• Order fulfilment records: the items, quantities, prices, order reference and dispatch/tracking status are kept so we can fulfil the order, prove what was sent, and handle any delivery dispute.
• Returns, breakage claims and support: if you report a damaged piece or start a return, we process the photos, messages and order reference you send us in order to verify the claim and issue a replacement or refund.
• Payment and billing data: our payment processor collects and holds your card details and billing address. We receive only the payment outcome, amount, currency, last four digits and a reference — never your full card number. Billing data is used to reconcile the order, issue refunds and meet tax record-keeping duties.
• Logistics carriers: the carrier receives only the data needed to deliver (name, address, contact for delivery notifications) and may process it outside the UK/EEA when shipping internationally, under the safeguards in section 7.

5. Why we use it and our legal bases

• To fulfil your order — process payment, ship your ceramics, handle returns and support (performance of a contract).
• To respond to enquiries — reply to contact and wholesale forms (legitimate interests / pre-contract steps).
• To run membership — manage Counter Club billing and benefits (performance of a contract).
• To keep the site secure and improve it — analytics and fraud prevention (legitimate interests).
• Marketing — only where you have opted in, and you can withdraw consent at any time (consent).
• Legal and tax compliance — keeping order records (legal obligation).

6. Who we share it with

We share data only with processors that help us run the store, under contract and only as needed:

• Payment processing — our PCI-compliant payment provider handles card payments and disputes.
• Hosting — our cloud hosting and content delivery provider.
• Database and storage — our managed database provider stores orders and enquiries.
• Email — our transactional email provider sends order and support messages.
• Delivery — the shipping carriers that deliver your order need your name and address.

We do not sell your personal data.

7. International transfers

Some processors are located outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as UK International Data Transfer Agreements, EU Standard Contractual Clauses or an adequacy decision.

8. How long we keep it

Order and tax records are kept as required by law (typically up to 6 years). Enquiry and lead data is kept for up to 24 months. Marketing data is kept until you opt out. Technical logs are kept for a short period for security.

9. Your rights

Under UK GDPR and EU GDPR

• Access a copy of your data
• Correct inaccurate data
• Erase data where there is no ongoing lawful reason to keep it
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

Under the CCPA/CPRA (California residents)

• Know what personal information we collect and how it is used
• Request deletion of personal information
• Correct inaccurate personal information
• Opt out of any sale or sharing of personal information
• Non-discrimination for exercising your rights

To exercise any right, email support@downsixt.shop. We respond within the time limits set by applicable law.

10. Do Not Sell or Share

We do not sell or share your personal information for cross-context behavioural advertising. If this ever changes we will provide a clear opt-out mechanism first.

11. Cookies and analytics

We use strictly necessary cookies to run the cart and checkout, and optional analytics cookies to understand usage. See our Cookie Policy for details and controls.

12. Automated decisions and children

We do not make solely automated decisions that produce legal effects about you. Our store is not intended for children: it may not be used by anyone under 13, and 13–17 year-olds must have a parent or guardian's consent.

13. Security

We use encryption in transit, access controls and vetted processors. No method of transmission is completely secure, but we take reasonable steps to protect your data and to notify you and regulators of any breach as required by law.

14. Complaints and contact

Contact us first at support@downsixt.shop. UK/EU residents also have the right to complain to their data protection authority (in the UK, the Information Commissioner's Office). This policy is governed by the laws of England and Wales.