Last updated: 21 Sep 2026

1. Who we are

This Privacy Policy explains, in plain terms, what personal information SG Island Cart (“we,” “us,” “our”) collects when you visit or buy from sgislandcart.com, what we use it for, who we share it with, and what rights you have over it. We are based at Unit 4, Chantry Court, Plumpton Way, Carshalton SM5 2DG, UK, and we handle personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What information we collect

We only collect information we actually need to run the site and fulfil your orders:

  • Contact and delivery details: your name, delivery/billing address, email address, and phone number.
  • Order details: what you bought, how much you paid, and confirmation that payment was successful. We do not see or store your full card number — that is handled directly by our payment processor, which is certified to PCI-DSS standards.
  • Account details, if you create one: your login email and a securely hashed password (we cannot see your actual password — not even our own staff can read it), plus your order history.
  • Website usage data: your IP address, browser and device type, and which pages you visit, collected through cookies and similar technologies. See our Cookies Policy for the full breakdown.
  • Support communications: anything you tell us by email, chat, or phone when you contact customer support.
  • Marketing preference: whether you’ve opted in to receive promotional emails, tracked so we only email you if you’ve actually agreed to it, in line with the UK’s e-marketing rules (PECR).

3. Why we’re allowed to use this information (our legal basis)

UK GDPR requires us to have a valid reason for every use of your data. Ours are:

  • To fulfil a contract with you — processing and delivering your order.
  • Legitimate business interests — preventing fraud, keeping our systems secure, and improving the site, balanced against your right to privacy.
  • Your consent — for marketing emails and non-essential cookies, which you can withdraw at any time.
  • Legal obligation — keeping financial records for UK tax law.

4. What we actually do with your information

  • Process and deliver your order, and contact you about it (confirmations, delivery updates, issues).
  • Respond when you contact our support team.
  • Send you marketing emails, but only if you’ve opted in, and always with a one-click way to opt out.
  • Look at aggregated, anonymised usage trends to improve the site — we don’t use this to build invasive individual profiles.
  • Detect and prevent fraud or abuse of our checkout system.
  • Keep the financial records UK law requires us to keep.

We do not use your personal information for anything beyond what’s listed above, and we do not sell your personal information to anyone, for any reason.

5. Who we share your information with

We share personal data only with the specific third parties needed to run the business, and only the minimum needed for their job:

  • Payment processors — to take your payment securely.
  • Delivery couriers — to get your order to you and provide tracking.
  • Website hosting and email providers — to run the site and send order-related emails.
  • Analytics tools (only if you’ve consented to analytics cookies) — to understand site traffic in aggregate.
  • Law enforcement or regulators — only if legally required, e.g. under a valid court order.

We do not share your data with marketing partners, data brokers, or any other business for their own independent use.

6. Where your data is processed

Some of the third-party tools above may process data outside the UK (for example, on servers in the EU or US). Where that happens, we rely on UK-recognised safeguards (such as adequacy regulations or the UK’s International Data Transfer Agreement) to make sure your data stays protected to UK standards wherever it’s processed.

7. How long we keep your information

  • Order and payment records: 6 years, as required by HMRC for tax purposes.
  • Marketing contact preferences: kept until you unsubscribe or ask us to delete them.
  • Account data: kept while your account is active, deleted on request or after a period of inactivity.

8. How we protect your information

We use encrypted connections (TLS/SSL) for all data sent to and from our site, restrict staff access to personal data on a need-to-know basis, and review our security practices regularly. Like any online business, we cannot guarantee data transmission over the internet is 100% secure, but we take reasonable, industry-standard steps to protect it. If a security incident occurs that creates a real risk to your rights, we will notify you and the Information Commissioner’s Office (ICO), as UK law requires.

9. Your rights

Under UK GDPR, you can ask us to:

  • Show you what personal data we hold about you.
  • Correct inaccurate information.
  • Delete your data (subject to our legal record-keeping obligations).
  • Restrict or object to certain uses of your data.
  • Provide your data in a portable format.
  • Stop sending you marketing at any time.

To use any of these rights, email support@sgislandcart.com. We will respond within one month, as required by law, and we won’t charge you for a standard request.

10. If you’re not happy with how we’ve handled your data

Please contact us first at support@sgislandcart.com so we can try to put it right. If you’re still not satisfied, you have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk.

11. Contact us

SG Island Cart Unit 4, Chantry Court, Plumpton Way, Carshalton SM5 2DG, UK Email: support@sgislandcart.com Phone: +44 1372 463099