Privacy Policy
Last updated: 13th July 2026
This Privacy Policy explains how Edward Turner and Son Ltd T/A Rodgers Wostenholm Group (company number 01035504), registered office 312–314 Petre Street, Sheffield, S4 8LT (“we”, “us”, “our”), collects, uses, and protects your personal data when you visit or use www.sheffieldcollectableknives.com (the “Site”) or place an order with us.
We are the “data controller” of the personal data described in this Policy. This Policy should be read alongside our Terms and Conditions and Delivery and Returns Policy, both available on the Site.
1. The Personal Data We Collect
We collect the following categories of personal data:1.1 Account and Order Data
- Name, billing and delivery address(es), email address, and telephone number.
- Date of birth, which we collect and store against your order for age-verification and legal-compliance purposes – see Clause 4.
- Order history, order value, and product details, where you create an account on the Site.
- Account login credentials (your password is stored in encrypted/hashed form and is not visible to us).
1.2 Payment Data
Payments are processed by Stripe. We do not collect or store your full card details ourselves – these are entered directly into Stripe’s secure systems. We receive confirmation of payment and a limited payment reference from these providers.1.3 Delivery Data
We share your name, delivery address, and contact details with our courier(s) so that your order can be delivered and age-verified on arrival, as required by UK knife-sale law.1.4 Technical and Usage Data
We use Google Analytics to understand how visitors use the Site. This may collect data such as your IP address, browser and device type, pages viewed, and time spent on the Site, typically via cookies. See Clause 5 for more detail.1.5 Communications
If you contact us (for example, by email or through a contact form), we will keep a record of that correspondence, including your name, contact details, and the content of your message, in order to respond to you.2. How We Use Your Data and Our Legal Basis
Under UK GDPR, we must have a valid legal basis for each use of your personal data. We rely on the following:- Performance of a contract – to process and fulfil your order, take payment, arrange delivery, and manage your account.
- Legal obligation – to verify your age before selling you a knife or bladed article, to keep records for tax and accounting purposes, and to comply with other applicable law.
- Legitimate interests – to keep the Site secure, prevent fraud, understand how the Site is used (via analytics) so we can improve it, and respond to customer enquiries – provided these interests are not overridden by your own rights and interests.
- Consent – where we ask for your agreement, for example for non-essential cookies or (if introduced in future) email marketing. You may withdraw consent at any time.
3. Your Account
If you create an account on the Site, we store your order history, saved address(es), and account details so that you can log in, track orders, and re-order more easily. You can review and update most account details by logging in, or by contacting us using the details in Clause 15.4. Age-Verification Data
Because we sell knives and bladed articles, UK law requires us to verify that customers are aged 18 or over, both at the point of sale and at the point of delivery. 4.1 At checkout, we ask you to confirm your date of birth. This is stored against your order record so that we can demonstrate compliance with age-verification law if required to do so by a regulator, courier, or law enforcement body. 4.2 At the point of delivery, our courier will independently check photographic proof of age. We do not receive a copy of this ID – the courier’s check is carried out and recorded by them, in accordance with their own privacy practices. 4.3 We treat date-of-birth data as sensitive and restrict access to it internally to what is necessary for order fulfilment, compliance, and fraud prevention. It is not used for marketing or profiling.5. Cookies and Analytics
5.1 Cookies are small text files placed on your device when you visit a website. We use cookies to make the Site work properly (for example, to remember items in your basket) and, with your consent where required, to understand how visitors use the Site. 5.2 We use Google Analytics to collect statistics about visits to the Site, such as pages viewed, time spent, and general location (typically at country or city level, not precise location). Google Analytics uses cookies and similar technologies, and data collected may be processed by Google outside the UK – see Clause 7 for more on international transfers. 5.3 You can control or delete cookies through your browser settings. Blocking some cookies may affect how the Site functions, for example your basket contents.6. Who We Share Your Data With
We share personal data with the following categories of third party, only as necessary for the purposes set out in this Policy:- Payment providers – Stripe, to process payment for your order.
- Couriers – to deliver your order and carry out age verification on delivery.
- Web hosting – SiteGround (UK-based hosting), which stores the data that powers the Site.
- Analytics providers – Google Analytics, to help us understand Site usage.
- Professional advisers and regulators – such as our accountant, solicitor, or the police/Trading Standards, where we are legally required to share information or need to seek advice.
7. International Transfers
Some of the third parties listed in Clause 6 (for example, Google Analytics and Stripe) may store or process data outside the UK, including in the United States. Where this happens, we rely on safeguards recognised under UK GDPR, such as the UK’s International Data Transfer Addendum or the provider’s own approved transfer mechanisms, to ensure your data continues to receive an appropriate level of protection.8. Data Retention
We keep personal data only for as long as necessary for the purposes it was collected.- Order and transaction records (including date of birth recorded against an order): retained for 6 years from the end of the relevant tax year, in line with standard UK tax and accounting record-keeping requirements.
- Account data: retained for as long as your account remains active, plus a reasonable period afterwards in case you wish to reactivate it, after which it will be deleted or anonymised.
- Customer service correspondence: typically retained for up to 2 years after the matter is resolved.
- Analytics data: retained in accordance with Google Analytics’ default retention settings, which we may configure.
9. Data Security
We use appropriate technical and organisational measures to protect your personal data, including secure (HTTPS) connections, restricted internal access to sensitive data such as date of birth, and reputable third-party providers for payment and hosting. No method of transmission or storage is completely secure, but we work to protect your data to an appropriate standard.10. Your Rights
Under UK GDPR, you have the right to:- access the personal data we hold about you;
- have inaccurate personal data corrected;
- request erasure of your personal data, subject to our legal obligations (for example, we may need to retain order and age-verification records for compliance purposes even after an erasure request);
- request that we restrict our use of your personal data in certain circumstances;
- receive a copy of your personal data in a portable format, where technically feasible;
- object to our use of your personal data where we rely on legitimate interests; and
- withdraw consent at any time, where we rely on consent (for example, for non-essential cookies).