Privacy Policy

Tom’s Model Trains (“we”, “us”, “our”) is committed to protecting your privacy and personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

Tom’s Model Trains (operated by [Your Legal Name or Trading Name]) is the data controller responsible for your personal data. You can contact us at [email protected].

2. Information We Collect

  • Contact details such as your name, email address, and phone number.
  • Delivery and billing addresses.
  • Payment details (processed securely through third-party providers).
  • Messages or inquiries you send us via email or contact forms.

3. How We Use Your Data

  • To process and deliver your orders.
  • To communicate with you regarding your purchases or inquiries.
  • To comply with legal and tax obligations.
  • To send marketing updates (only if you have opted in).

4. Legal Basis for Processing

  • Contract: To fulfill your purchase or service request.
  • Legal Obligation: To comply with UK laws (e.g., tax record-keeping).
  • Consent: When you choose to receive marketing updates.

5. Data Sharing

We only share necessary information with trusted service providers who help us operate our business, such as:

  • Payment processors (e.g., Stripe, PayPal)
  • Shipping providers (e.g., Royal Mail, DPD)
  • Website hosting and analytics providers

6. Data Security

We take appropriate technical and organisational measures to keep your data secure and prevent unauthorised access, alteration, or misuse.

7. Your Rights Under UK GDPR

  • Access and receive a copy of your data.
  • Request correction or deletion of your data.
  • Restrict or object to certain processing activities.
  • Withdraw consent at any time (for marketing emails).

If you wish to exercise these rights, please contact us at [email protected].

8. Complaints

If you believe your data has been handled incorrectly, you may lodge a complaint with the UK Information Commissioner’s Office (ICO): https://ico.org.uk

9. Retention Period

We retain personal data only for as long as necessary to fulfil legal, accounting, or reporting requirements.

10. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date.

Last updated: October 2025