Privacy policy

Last updated: 27 October 2026

This policy explains how Cornobble collects and uses your personal data when you visit cornobble.com or buy from us. The data controller is Kayne Mountney, a sole trader trading as Cornobble ("we", "us"). Contact: hello@cornobble.com.

What we collect

- Order and contact details: your name, email, delivery and billing addresses, phone number (if you provide one) and what you bought.

- Payment information: processed securely by our payment providers. We never see or store your full card details.

- Communications: messages you send us.

- Device and browsing information: such as IP address, browser type and pages viewed, collected through cookies and similar technologies.

How and why we use it

- To process, fulfil and deliver your order and handle returns (lawful basis: contract).

- To answer your questions and provide customer service (contract or legitimate interests).

- To keep the shop secure and prevent fraud (legitimate interests).

- To keep tax and accounting records (legal obligation).

- To send you marketing emails, only if you've opted in. You can unsubscribe at any time (consent).

Who we share it with

We share your data only as needed to run the shop: with our e-commerce platform (Shopify), payment providers, our fulfilment supplier (AW Dropship, a UK wholesaler who packs and dispatches your order), delivery carriers such as Royal Mail and APC, and professional advisers or authorities where the law requires. We never sell your personal data.

International transfers

Some service providers, including Shopify, may process data outside the UK. Where they do, appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Addendum.

Cookies

Our site uses cookies that are needed for it to work (for example, your basket). Where required, we'll ask for your consent before setting non-essential cookies such as analytics or marketing cookies.

How long we keep it

We keep order records for six years for tax and legal purposes. Other information is kept only as long as needed for the purposes above.

Your rights

Under UK data protection law (UK GDPR and the Data Protection Act 2018), you can ask to access, correct or erase your data, restrict or object to its use, or receive a portable copy. You can also withdraw consent at any time. To do any of these, email us. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.