Privacy Policy

This policy explains how (VENTURE) Archives ("we", "us", "our") collects, uses and protects your personal data when you visit our website, enter our prize draws, or buy from us.

We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.

1. Who we are

(VENTURE) Archives
5 Malcolm Arcade, Leicester, LE1 5FT, United Kingdom
Contact: support@venturearchives.com

If you have any questions about this policy, your data, or want to exercise any of the rights listed below, email us at the address above.

2. What personal data we collect

Depending on how you interact with us, we may collect:

When you enter a prize draw (e.g. the raffle at /pages/raffle)

• First name and full name
• Email address
• Mobile phone number
• Instagram handle
• Your raffle entry number (generated by us)
• The fact that you gave consent to receive email and SMS marketing
• The date and time of your entry

When you buy from us

• Name, delivery and billing address, email, phone
• Order details (items, price paid, delivery method)
• Payment information (handled by Shopify Payments — we do not see or store your full card number)

When you browse the site

• Technical data: IP address, device type, browser type, pages visited, referring URL, session behaviour
• Cookies and similar technologies used by Shopify and our analytics

3. Why we collect it and the lawful basis

You can withdraw consent to marketing at any time. Doing so does not affect the lawfulness of any processing we did before.

4. Who we share your data with

We only share data with third parties who process it on our behalf. These include:

• Shopify Inc. / Shopify International Ltd. — our ecommerce platform (hosting, orders, payments)
• Klaviyo Inc. — email and SMS marketing platform (stores your email, phone, name, raffle entry number, and consent status)
• Cloudflare Inc. — the raffle entry form is processed by a Cloudflare Worker; Cloudflare briefly handles your submission in transit to Klaviyo
• Royal Mail / shipping carriers — for order delivery
• Tax and accounting providers — for statutory reporting

All processors are bound by contractual obligations that require them to handle your data securely and in line with UK GDPR.

International transfers

Some of the above processors (Shopify, Klaviyo, Cloudflare) are US-headquartered. Where personal data is transferred outside the UK, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or on adequacy decisions issued by the UK government.

5. How long we keep your data

• Marketing data (Klaviyo): until you unsubscribe, or after 3 years of no interaction — whichever is sooner.
• Prize draw entries: we keep raffle entry records for 12 months after the draw in case of disputes, then delete them (marketing preferences separately remain in Klaviyo under the rule above).
• Order data: 7 years, to meet HMRC record-keeping requirements.
• Website logs: up to 90 days.

6. Your rights

Under UK GDPR you have the right to:

1. Access — ask for a copy of the personal data we hold about you.
2. Rectification — correct data that is wrong or incomplete.
3. Erasure — ask us to delete your data (the "right to be forgotten").
4. Restriction — ask us to stop using your data while we investigate an issue.
5. Portability — get your data in a machine-readable format and send it to another controller.
6. Objection — object to processing based on legitimate interest, or to any direct marketing.
7. Withdraw consent — at any time, for anything we do based on consent.

To exercise any of these, email support@venturearchives.com. We will respond within one calendar month.

You can also complain to the UK Information Commissioner's Office (ICO): ico.org.uk — but we'd prefer you give us the chance to put it right first.

7. How to unsubscribe from marketing

• Email: click the unsubscribe link at the bottom of any marketing email.
• SMS: reply STOP to any SMS we send.
• Manual: email support@venturearchives.com and we'll remove you.

8. Cookies

Our site uses cookies and similar technologies for:

• Core site functionality (you can't disable these — they're required for the cart, checkout, and login to work).
• Analytics, supplied by Shopify, to understand how people use the site.

You can block cookies via your browser settings. Doing so may break parts of the checkout experience.

9. Children

We do not knowingly collect data from anyone under 16. Our prize draws are restricted to entrants who are 16 or over. If you're a parent or guardian and believe we hold data about a child under 16, email us and we'll delete it.

10. Changes to this policy

We'll update this policy when our practices change. The date at the top shows when it was last updated. Material changes will be announced via email or on the site.