1. Who we are

NAR London Ltd, trading as Crown01, is the data controller for the personal information collected via crown01.co.uk and related sales channels. Registered in England and Wales — Company number 10907445. Our registered warehouse is at 95 Theobalds Park Road, Enfield, EN2 9BS, United Kingdom. You can contact us about your data at info@crown01.co.uk.

2. Information we collect

Order details: name, billing/shipping address, email, phone number, order items (collected via Shopify when you place an order).
Account / form data: email for newsletter signup, contact form messages, trade application details.
Cart data: items you've added to your basket and the email you provide so we can send abandoned-cart reminders.
Usage data: anonymised analytics (pages visited, device type, referrer) via Google Analytics 4 and TikTok Pixel.

3. How we use your information

To process and ship your orders.
To send order confirmations, dispatch notifications, and customer support replies.
To send abandoned-cart reminders (you can opt out by replying to any email).
To send marketing communications if you've opted in via newsletter signup.
To improve our website and services via aggregate analytics.
To comply with UK legal and tax obligations.

4. Legal basis for processing

Under UK GDPR, we process personal data under one or more of the following lawful bases:

Performance of a contract — to fulfil your orders and provide the services you've requested.
Legitimate interests — website operation, fraud prevention, security and business improvement.
Consent — marketing emails and optional analytics/marketing cookies (you can withdraw consent at any time).
Legal obligation — tax, accounting and other regulatory requirements.

5. Payment security

Payments are processed securely by Shopify Inc., a PCI-DSS Level 1 certified payment platform. Crown01 does not collect, store or process payment card information. When you proceed to checkout, you are redirected to Shopify's hosted checkout where your payment details are entered, encrypted and handled entirely by Shopify and its underlying acquirers. Our systems only receive order metadata (items, quantities, totals and your email address) — never your card number, CVV, expiry date or any other cardholder data.

6. Who we share your information with

Shopify Inc. — our checkout, payment and order management provider.
Resend — our transactional email provider (order confirmations, customer support replies).
Google Analytics 4, Meta Pixel and TikTok Pixel may be used to understand website performance, advertising effectiveness and visitor interactions, subject to your cookie preferences.
Royal Mail, DPD, UPS and other carriers — to deliver your orders.

We do not sell your personal information to third parties.

7. Your rights

Under UK GDPR you have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your information ("right to be forgotten")
Object to processing for direct marketing
Data portability
Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk)

To exercise any of these rights, please email info@crown01.co.uk.

8. Data retention

We retain order data for 6 years (HMRC tax requirement). Newsletter subscribers may unsubscribe at any time; we keep an unsubscribe record indefinitely to honour your preference. Abandoned-cart records are deleted 30 days after the cart is created.

9. Cookies

See our Cookie Policy for full details on the cookies we use.

Privacy Policy