PRIVACY POLICY
Brought to you by The Abbey Hotel, Bury St Edmunds
Email: mail@abbeyshop.com
Telephone: 01284 762020
Version: 2.0
Last updated: 1 September 2026
This Privacy Policy explains how personal information is collected and used when you visit Abbeyshop.com, place an order, contact us, sign up for marketing or otherwise use our services.
1. Who We Are
Abbeyshop.com is brought to you and operated by The Abbey Hotel, Bury St Edmunds.
For data-protection purposes, the controller of personal information processed through Abbeyshop.com is:
Arthur Gilbert Exeter Cannell trading as The Abbey Hotel, sole trader.
Business address:
35 Southgate Street
Bury St Edmunds
Suffolk
IP33 2AZ
United Kingdom
Email: mail@abbeyshop.com
Telephone: 01284 762020
In this policy, “Abbeyshop.com”, “Abbeyshop”, “The Abbey Hotel”, “we”, “us” and “our” refer to that business.
2. Scope
This Privacy Policy applies to personal information collected through Abbeyshop.com and related ordering, customer-service, fulfilment, marketing and account-management activities.
Some Abbeyshop.com pages may direct you to another retailer's website to complete a purchase directly with that retailer.
Once you leave Abbeyshop.com and provide information directly to another retailer, that retailer's own privacy information will apply to the information it collects.
3. Information We May Collect
We may collect:
your name;
billing and delivery addresses;
email address;
telephone number;
products or services ordered;
order values and payment status;
delivery and collection information;
returns and refund information;
customer-service correspondence;
marketing preferences;
newsletter signup information;
information submitted through forms, reviews, competitions or surveys;
IP address, browser and device information;
cookie and similar identifiers;
information about how you interact with Abbeyshop.com.
If you are a Retail Partner or other business contact, we may also collect information connected with our commercial relationship, including contact, payment, product, insurance, compliance and fulfilment information.
4. Payment Information
Payments are processed by the payment providers available through our checkout, which may include Stripe.
We do not normally receive or store your complete payment-card number.
Payment providers may process payment details, authentication information and fraud-prevention information under their own privacy arrangements.
We may receive information such as payment status, transaction identifiers, card type or limited card details needed to reconcile, refund or investigate a payment.
5. How We Collect Information
We may collect information:
directly from you;
when you place an order;
when you contact us;
when you sign up for marketing;
when you use forms or website features;
automatically through website technologies;
from payment, delivery and other service providers;
from Retail Partners fulfilling Abbeyshop orders on our behalf.
6. How We Use Personal Information
We may use personal information to:
operate Abbeyshop.com;
process and fulfil orders;
take and reconcile payments;
arrange delivery or collection;
communicate with you about an order;
process cancellations, returns and refunds;
respond to questions and complaints;
prevent fraud and misuse;
comply with legal, accounting, tax and product-safety obligations;
manage Retail Partner relationships;
maintain and secure the Website;
understand and improve our services;
send marketing where legally permitted.
7. Lawful Bases
Depending on the circumstances, we process personal information because:
it is necessary to perform a contract with you or take steps before entering one;
we are required to do so by law;
it is necessary for our legitimate interests or those of another organisation, where those interests are not overridden by your rights; or
you have given consent.
Where we rely on consent, you may withdraw it at any time.
8. Retail Partner Fulfilment
Some Abbeyshop.com orders may be supplied, prepared, packaged or dispatched by independent Retail Partners on our behalf.
Where a Retail Partner needs customer information to fulfil an Abbeyshop.com order, we will share only information reasonably necessary for that purpose.
This may include:
your name;
delivery address;
relevant contact details;
items ordered;
delivery instructions.
Retail Partners must use Abbeyshop customer information only for authorised fulfilment, delivery, customer-service, safety or legal purposes connected with the Abbeyshop order, unless they have their own lawful basis for another use.
They must not use Abbeyshop customer information for unrelated marketing simply because they fulfilled an order for us.
9. Other Organisations We May Share Information With
Where necessary, personal information may be shared with organisations such as:
Squarespace and other website or hosting providers;
Stripe and other payment providers;
delivery, postal and courier companies;
Retail Partners fulfilling Abbeyshop orders;
email and communication providers;
analytics and website-security providers;
accountants, insurers, lawyers and other professional advisers;
regulators, courts, public authorities or law-enforcement bodies where required or permitted by law.
We do not sell personal information to third parties.
10. Direct-to-Retailer Links
Abbeyshop.com may provide links allowing you to purchase directly from another retailer or service provider.
Where you leave Abbeyshop.com and complete the transaction elsewhere, that retailer is responsible for the personal information you provide directly to it.
If a link uses referral or affiliate tracking, information about the referral or click may be processed where legally permitted.
11. Marketing
We may send marketing communications where you have consented or another lawful basis allows us to do so.
You can unsubscribe from marketing emails using the unsubscribe facility provided or by contacting:
Messages necessary to operate an order — such as order confirmations, dispatch information, refunds, cancellations or product-safety notices — are service communications rather than marketing.
12. Cookies and Similar Technologies
Abbeyshop.com uses cookies and similar technologies for purposes including:
website operation;
security;
shopping basket functionality;
preferences;
analytics where enabled;
marketing where enabled and permitted.
Further information is provided in our Cookie Policy.
Where consent is required for non-essential cookies or technologies, we will use appropriate consent controls.
13. Security
We use reasonable technical and organisational measures designed to protect personal information against accidental or unlawful loss, misuse, alteration, unauthorised access or disclosure.
No website, internet connection or storage system can be guaranteed completely secure.
14. How Long We Keep Information
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, tax, accounting, safety, record-keeping and dispute-resolution requirements.
Different categories of information may therefore be retained for different periods.
15. International Transfers
Some organisations that provide services to Abbeyshop.com may process information outside the United Kingdom.
Where UK data-protection law requires safeguards for an international transfer, appropriate lawful mechanisms or protections will be used.
16. Your Data Protection Rights
Depending on the circumstances, you may have rights relating to your personal information, including rights to request:
access;
correction;
erasure;
restriction of processing;
objection to certain processing;
data portability;
withdrawal of consent where processing relies on consent.
These rights are not absolute and legal conditions or exemptions may apply.
We may need to verify your identity before responding to a request.
17. How to Exercise Your Rights
Contact:
or write to:
The Abbey Hotel
35 Southgate Street
Bury St Edmunds
Suffolk
IP33 2AZ
United Kingdom
Please provide enough information for us to understand your request.
18. Complaints
If you have a concern about how we use personal information, please contact us first so that we can investigate.
You also have the right to complain to the Information Commissioner's Office (ICO).
19. Children
Abbeyshop.com is primarily intended for adults.
We do not knowingly seek to collect children's personal information where parental or guardian involvement would be required by law.
20. Fraud Prevention and Automated Checks
Payment, security and fraud-prevention providers may use automated systems to assess transactions or website activity for authentication, security, regulatory or fraud-prevention purposes.
Where another provider makes decisions under its own legal responsibilities, its own privacy information will apply to that processing.
21. Changes to This Policy
We may update this Privacy Policy to reflect changes to Abbeyshop.com, our suppliers, Retail Partners, service providers, technology or legal requirements.
The latest version will be published on Abbeyshop.com with an updated review date.
22. Contact and Legal Identity
For privacy enquiries and data-rights requests:
Abbeyshop.com
The Abbey Hotel
35 Southgate Street
Bury St Edmunds
Suffolk
IP33 2AZ
United Kingdom
Email: mail@abbeyshop.com
Telephone: 01284 762020
For formal legal identification:
The Abbey Hotel is the trading name of Arthur Gilbert Exeter Cannell, sole trader.