Privacy Policy for The Guitar Showroom

Introduction

This privacy policy outlines how The Guitar Showroom Ltd. (“we,” “us,” or “our”) collects, uses, and protects personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy applies to all personal data collected through our website (www.theguitarshowroom.co.uk), in-store interactions, and other communications related to our business of selling vintage, acoustic, and electric guitars.

For the purposes of UK data protection laws, The Guitar Showroom Ltd., registered at Unit 2 Suite B, Firgrove Business Park, Firgrove Road, Heathfield, East Sussex, England, TN21 0QL (Company Reg No. 12915407, VAT Reg No. 382 4681 74), is the “data controller.”

Scope of This Privacy Policy

This policy applies to:

  • Customers purchasing or inquiring about guitars.
  • Suppliers providing goods or services.
  • Staff and volunteers (where applicable).
  • Users of our website (www.theguitarshowroom.co.uk).

It does not cover third-party websites linked from our site, which have their own privacy policies.

Data We Collect

We may collect the following personal data:

  • Name: To address you in communications and process transactions.
  • Contact Information: Email addresses, phone numbers, and postal addresses for order processing, delivery, and customer support.
  • Payment Information: Card or bank details for processing payments (handled securely via third-party payment processors).
  • Purchase History: Details of guitars purchased or inquired about to provide tailored services.
  • Website Usage Data: IP addresses, browser type, and browsing behavior (via cookies or analytics tools) to improve our website and services.
  • Correspondence: Emails, phone calls, or messages sent to us for customer service or inquiries.

How We Collect Data

We collect data:

  • Directly from you: When you place an order, contact us, sign up for our newsletter, or visit our showroom.
  • Automatically: Via cookies and analytics tools on our website (e.g., Google Analytics) when you browse.
  • From third parties: Such as payment processors or delivery services, where necessary for fulfilling orders.

Lawful Bases for Processing

We process personal data based on the following lawful bases under the UK GDPR:

  • Contract: To fulfil orders, process payments, and deliver guitars (e.g., using your name and address for shipping).
  • Consent: For marketing communications (e.g., newsletters), which you can withdraw at any time.
  • Legitimate Interests: To improve our website, analyse customer preferences, and prevent fraud, provided this does not override your rights.
  • Legal Obligation: To comply with tax, accounting, or other legal requirements (e.g., retaining invoice data).

How We Use Your Data

We use your data to:

  • Process and deliver orders for vintage, acoustic, and electric guitars.
  • Respond to inquiries and provide customer support.
  • Send marketing communications (if you have opted in).
  • Improve our website and services through analytics.
  • Comply with legal obligations, such as tax reporting.
  • Prevent fraud and ensure secure transactions.

Data Sharing

We may share your data with:

  • Delivery Services: To ship guitars to your address (e.g., couriers).
  • Payment Processors: To securely process payments (e.g., Stripe, PayPal).
  • Professional Advisors: Such as accountants or legal advisors, to comply with legal obligations.
  • Authorities: If required by law (e.g., HMRC for tax purposes).

We do not sell your personal data to third parties.

International Transfers

If data is transferred outside the UK (e.g., to a supplier or service provider in the EEA or elsewhere), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, in compliance with UK GDPR.

Data Retention

We retain personal data only for as long as necessary:

  • Customer Data: Retained for 6 years after your last purchase to comply with tax and accounting laws.
  • Marketing Data: Kept until you unsubscribe or request deletion.
  • Website Analytics: Anonymized data may be retained indefinitely; identifiable data is deleted after 14 months.

Paper invoices are securely stored for one year after submission to our accountant, then securely destroyed.

Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • Access: Request a copy of the data we hold about you.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your data (subject to legal obligations).
  • Restriction: Limit how we process your data in certain circumstances.
  • Portability: Receive your data in a structured, machine-readable format.
  • Object: Object to processing based on legitimate interests or for marketing.
  • Withdraw Consent: Opt out of marketing at any time.

To exercise these rights, contact us at info@theguitarshowroom.co.uk or Unit 2 Suite B, Firgrove Business Park, Firgrove Road, Heathfield, East Sussex, TN21 0QL.

Cookies

Our website uses cookies to enhance user experience and analyse site performance. You can manage cookie preferences via your browser settings or our website’s cookie consent tool. For details, see our Cookie Policy on www.theguitarshowroom.co.uk.

Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Secure payment processing via encrypted third-party platforms.
  • Firewalls and secure servers for website data.
  • Locked storage for physical records.
  • Staff training on data protection.

Changes to This Privacy Policy

We may update this policy to reflect changes in law or our practices. Updates will be posted on our website, and significant changes will be communicated via email or in-store notices. This policy was last updated on 10 September 2025.

Contact Us

For questions, complaints, or to exercise your data protection rights, contact:

  • Email: info@theguitarshowroom.co.uk
  • Phone: 01435 867333
  • Address: The Guitar Showroom Ltd., Unit 2 Suite B, Firgrove Business Park, Firgrove Road, Heathfield, East Sussex, TN21 0QL

If you are dissatisfied with our response, you can contact the Information Commissioner’s Office (ICO) at www.ico.org.uk or 0303 123 1113.

Complaints

If you believe your data has been mishandled, please contact us first. You may also lodge a complaint with the ICO:

  • Website: www.ico.org.uk
  • Helpline: 0303 123 1113