Privacy policy

Last updated: 19 October 2026

1. Who we are

Elbury (elbury.co.uk) is operated by Robin Coiffier, sole trader (entrepreneur individuel) registered in France under SIRET 944 837 269 00017, 159 Boulevard Albert Brandenburg, A23, 33300 Bordeaux, France. Email: contact@elbury.co.uk. Phone: +33 7 56 91 17 77.

We are the data controller for the personal information described in this policy. This policy explains what we collect, why, who we share it with, how long we keep it and the rights you have under the UK GDPR, the EU GDPR and the Data Protection Act 2018.

2. What we collect

  • Order details: your name, email address, phone number, delivery and billing address, the items you buy, and order and return history.
  • Payment details: payments are processed by our payment providers (such as Shopify Payments and PayPal). We do not see or store your full card number.
  • Account details: if you create an account, your login email and password (stored securely by Shopify).
  • Messages: what you write to us by email or through our contact form, including any order number, size question or photos you send.
  • Newsletter: your email address, only if you choose to subscribe.
  • Device and browsing data: IP address, browser and device type, pages viewed and basket activity, collected through cookies and similar technologies (see section 7).

We do not knowingly collect information from children. Our store is intended for adults; children's shoes are bought by an adult on their behalf.

3. Why we use it and our legal basis

Purpose Legal basis
Process, deliver and track your order; handle returns and refunds Performance of our contract with you
Reply to your questions and provide customer support Performance of a contract, or our legitimate interest in helping you
Keep accounting and tax records Legal obligation
Prevent fraud and keep the store secure Legitimate interest
Send our newsletter and offers Your consent (you can unsubscribe at any time)
Measure how the store is used and show relevant ads (analytics and advertising cookies) Your consent, given through our cookie banner

4. Who we share it with

We only share what each provider needs to do its job:

  • Shopify (our e-commerce platform and checkout), which hosts the store and processes order data. More information: shopify.com/legal/privacy.
  • Payment providers (Shopify Payments, PayPal and any other method shown at checkout), to take your payment and prevent fraud.
  • Our suppliers and delivery carriers, who receive your name, delivery address and phone number to prepare and deliver your order.
  • Order-tracking tools, to send you tracking updates.
  • Our email provider, to send and receive customer emails.
  • Google (Google Analytics, Google Ads and Google Merchant Center), only for analytics and advertising cookies you have accepted.
  • Authorities, where the law requires it.

We never sell your personal information.

5. International transfers

Some of our providers, suppliers and carriers are located outside the United Kingdom and the European Economic Area. When your data is transferred, we rely on adequacy decisions or on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

6. How long we keep it

  • Orders and invoices: 10 years, as required by French accounting law.
  • Customer messages: up to 3 years after our last exchange.
  • Customer account: until you close it, or 3 years after your last activity.
  • Newsletter: until you unsubscribe.
  • Cookies: up to 13 months.

7. Cookies

We use strictly necessary cookies to run the store (for example, to keep items in your basket and process checkout). With your consent, we also use analytics and advertising cookies. You can accept or refuse them in our cookie banner and change your choice at any time. Refusing them does not stop you from shopping.

8. Your rights

You can ask us to:

  • access the personal information we hold about you;
  • correct it if it is wrong;
  • delete it (unless we must keep it by law, for example invoices);
  • restrict or object to how we use it, including for direct marketing;
  • send it to you or another company in a portable format;
  • withdraw your consent at any time, without affecting earlier use.

To make a request, email contact@elbury.co.uk. We reply within one month. We may ask you to confirm your identity first.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or, in France, to the CNIL (cnil.fr). We would appreciate the chance to resolve your concern first.

9. Security

The store and checkout run on Shopify, which uses encryption (HTTPS) and is PCI-DSS compliant for card payments. Access to customer data is limited to what we need to run the business.

10. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date of the last update at the top.

11. Contact

Questions about your data? Email contact@elbury.co.uk. Every message is read and answered by a person.