Privacy Policy
Last updated: 10 June 2026
We keep this simple, because our approach to your data is simple: we collect only what we need to run the shop and get your order to your door. We don’t run analytics trackers, we don’t send marketing emails, and we never sell your data. Ever.
1. Who we are
Concrete Pirates LTD is the “data controller” of your personal information — that’s the legal way of saying we’re responsible for looking after it.
- Company No.: 16372430 (registered in England & Wales)
- Registered address: 85 Great Portland Street, First Floor, London, England, W1W 7LT
- Contact: info@concretepirates.com
2. What we collect, and why
When you place an order, we collect your name, billing and delivery address, email address, phone number and details of what you bought. We need these to fulfil our contract with you — to process your payment, print your order, post it, and email you about its progress (order confirmation, shipping confirmation with tracking).
When you create an account, we store your login email and an encrypted version of your password, plus your order history and saved addresses — so you can log in, view your Logbook and check out faster.
When you contact us, we keep your message and our reply so we can help you properly.
Payment details: card payments are processed entirely by Square. Your card number goes directly to Square over an encrypted connection — we never see it and never store it. You can read Square’s own privacy policy at squareup.com.
3. Who we share your data with
Only the partners needed to get your order to you:
- Square — to process your payment securely
- Inkthreadable (our UK print partner) — they receive your name and delivery address so they can print and dispatch your apparel order
- Royal Mail — to deliver your parcel
- IONOS (our website host) — your data is stored on their secure servers
That’s the whole list. We don’t share your data with advertisers, data brokers or anyone else, and we don’t transfer it outside the UK/EEA except where a partner does so with proper legal safeguards in place.
4. How long we keep it
We keep order records for 6 years, as UK tax and accounting law requires. Account data is kept while your account is active — you can ask us to delete your account at any time. Messages are kept only as long as useful for helping you.
5. Your rights
Under UK data protection law (UK GDPR), you have the right to:
- Access a copy of the personal data we hold about you
- Correct anything that’s wrong
- Delete your data (where we don’t have a legal duty to keep it)
- Restrict or object to how we use it
- Move your data to another service (data portability)
To use any of these rights, email info@concretepirates.com and we’ll respond within one month.
If you’re unhappy with how we’ve handled your data, you can complain to the UK’s Information Commissioner’s Office (ICO) at ico.org.uk — though we’d love the chance to put things right first.
6. Cookies
We use only the essential cookies needed to make the shop work (like remembering your basket). Full details are in our [Cookie Policy].
7. Changes to this policy
If we ever change how we handle your data — for example, if we add a newsletter one day — we’ll update this page and the date at the top.
Questions? Email the crew at info@concretepirates.com. A human will reply.