Legal

Privacy policy

How MRB Sell collects, uses, and looks after your information when you visit the shop or buy a book. Last updated 15 September 2026.

  • Controller

    MRB Sell, London

    We decide how your data is used. Write to 16 Essex Road, London, IG11 7QL or info@mrbsell.co.uk.

  • What we keep

    Order and contact details

    Name, email, delivery address, phone, and order history so we can send books and answer support questions.

  • Who we use

    Shopify, PayPal, Royal Mail

    Checkout, payment, and tracked delivery need those companies. We do not sell your details.

  • Your rights

    Access, correction, deletion

    UK GDPR rights apply. Email us to see, fix, or delete your data, or to complain to the ICO.

1. Who we are

MRB Sell is the data controller for this website. Our address is 16 Essex Road, London, IG11 7QL, United Kingdom. For privacy questions, email info@mrbsell.co.uk or call +44 7301 012155.

2. What we collect

When you browse or buy, we may collect:

  • Identity and contact details — name, email, phone, delivery and billing address
  • Order details — titles, amounts, payment status, and messages you send us
  • Account details if you create one — login email and order history
  • Technical data — IP address, browser type, and pages viewed, through cookies and similar tools
  • Newsletter sign-ups, if you choose to subscribe

We do not ask for extra identity documents unless a payment or fraud check requires it.

3. Why we use it

We use personal data to:

  • Take payment and dispatch your order (contract)
  • Send tracking updates and reply to support (contract and legitimate interests)
  • Keep records for tax, accounting, and dispute handling (legal obligation)
  • Improve the shop and keep it secure (legitimate interests)
  • Send marketing email only if you have asked for it (consent, which you can withdraw)

4. Who we share it with

We share only what is needed to run the shop:

  • Shopify, which hosts the store and checkout
  • PayPal and other payment providers shown at checkout
  • Royal Mail, so they can deliver and track your parcel
  • Professional advisers or authorities if the law requires it

We do not sell your personal data. Some providers may store data outside the UK. Where they do, they should use an approved transfer tool such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses.

5. How long we keep it

Order records are kept for at least six years so we can meet UK tax and accounting rules. Support emails are kept for as long as they are useful to the query, then deleted or archived. Newsletter data is kept until you unsubscribe. You can ask us to delete other data unless we must keep it by law.

6. Cookies

The site uses cookies that Shopify needs for the cart, checkout, and security. Analytics or marketing cookies, if present, only run where the theme or Shopify settings allow them. You can block non-essential cookies in your browser; the shop may not remember your basket if you block all cookies.

7. Your rights

Under UK GDPR you can ask us to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Erase data where we have no need to keep it
  • Restrict or object to certain processing
  • Receive a copy of data you gave us (portability)
  • Withdraw consent for marketing at any time

Email info@mrbsell.co.uk and we will respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.

8. Children

We sell children’s books to adults. We do not knowingly collect personal data from children under 13. If you believe we have, please tell us and we will delete it.

9. Changes

We may update this policy when the shop or the law changes. The date at the top of this page is the latest version. Continued use of the site after a change means you have seen the new policy.

10. Contact

info@mrbsell.co.uk · +44 7301 012155
16 Essex Road, London, IG11 7QL, United Kingdom

Want a copy of your data?

Email us from the address on your order and we will handle the request under UK GDPR.