Privacy Policy — Bigglestones.com
Last updated: March 2026
1. Who we are
Bigglestones Books is an independent bookshop based in Glasgow, Scotland. We operate both a physical shop and an online store at bigglestones.com.
Data controller: Bigglestones Books 57 Glassford Street Glasgow G1 1UG
When you use our website or purchase from us, we are the data controller responsible for your personal information. We are committed to handling your data with care and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What data we collect
Depending on how you interact with us, we may collect and process the following personal data:
When you place an order:
- Name
- Delivery and billing address
- Email address
- Phone number
- Payment information (processed securely by our payment provider — we do not store card details)
- Order history
When you create an account:
- Name and email address
- Password (stored in encrypted form)
- Saved addresses and order history
When you contact us:
- Your name and email address
- The contents of your message
When you browse our website:
- IP address
- Browser type and version
- Pages visited and time spent on the site
- Referring website
- Cookie data (see Section 7)
When you sign up to our mailing list:
- Name and email address
- Marketing preferences
3. How we use your data
We use your personal data for the following purposes:
| Purpose | Legal basis |
|---|---|
| Processing and fulfilling your orders | Performance of a contract |
| Sending order confirmations and dispatch notifications | Performance of a contract |
| Managing returns and refunds | Performance of a contract |
| Responding to your enquiries | Legitimate interests |
| Sending marketing emails (if you have opted in) | Consent |
| Improving our website and customer experience | Legitimate interests |
| Complying with legal and regulatory obligations | Legal obligation |
| Fraud prevention and site security | Legitimate interests |
We will never use your data in ways that are incompatible with the purposes listed above.
4. Marketing communications
If you have opted in to receive marketing from us, we may send you emails about new arrivals, events, promotions, and things we think you’ll enjoy as a Bigglestones customer.
You can unsubscribe at any time by:
- Clicking the unsubscribe link in any marketing email
- Emailing us at shop@bigglestones.com
- Updating your preferences in your account settings
We will never send you marketing without your consent, and opting out will not affect your ability to place orders or use our website.
5. Who we share your data with
We do not sell your personal data. We may share it with trusted third parties only where necessary to operate our business:
- Payment processors — to handle transactions securely (e.g. Stripe, PayPal, or similar)
- Delivery and courier services — to fulfil and track your orders (e.g. Royal Mail)
- Email marketing platforms — to send newsletters and order communications (e.g. Mailchimp or similar)
- Website hosting and ecommerce platforms — to operate bigglestones.com
- Accountancy and bookkeeping software — for financial record-keeping
All third-party providers are required to handle your data securely and in accordance with UK GDPR. We only share the minimum data necessary for each purpose.
We may also disclose your data if required to do so by law, or to protect the rights, property, or safety of Bigglestones Books, our customers, or others.
6. How long we keep your data
We retain your personal data only for as long as necessary:
| Data type | Retention period |
|---|---|
| Order records | 7 years (required for tax and accounting purposes) |
| Customer account data | Until you close your account, plus 12 months |
| Marketing preferences | Until you unsubscribe or withdraw consent |
| Enquiry and correspondence records | 2 years |
| Website analytics and cookies | As set out in our Cookie Policy (Section 7) |
When data is no longer needed, we delete or anonymise it securely.
7. Cookies
Our website uses cookies — small text files stored on your device — to help the site function and to improve your experience.
We use the following types of cookies:
- Essential cookies — required for the site to work (e.g. your shopping basket, login session)
- Analytics cookies — help us understand how visitors use the site, so we can improve it (e.g. Google Analytics)
- Marketing cookies — used to show you relevant content and measure the effectiveness of any advertising
You can manage your cookie preferences at any time through the cookie banner on our site, or via your browser settings. Please note that disabling certain cookies may affect the functionality of bigglestones.com.
8. Your rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access — you can request a copy of the personal data we hold about you
- Right to rectification — you can ask us to correct any inaccurate or incomplete data
- Right to erasure — you can ask us to delete your data in certain circumstances
- Right to restriction — you can ask us to limit how we use your data
- Right to data portability — you can request your data in a machine-readable format
- Right to object — you can object to us processing your data based on legitimate interests or for direct marketing
- Right to withdraw consent — where we rely on consent, you can withdraw it at any time
To exercise any of these rights, please contact us at shop@bigglestones.com. We will respond within one month of receiving your request. We may need to verify your identity before processing your request.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
🌐 ico.org.uk 📞 0303 123 1113
9. Data security
We take the security of your personal data seriously. Our website uses SSL encryption (HTTPS) to protect data in transit, and we work only with reputable third-party providers who maintain appropriate security standards.
We do not store payment card details — all transactions are handled by our payment processor.
In the unlikely event of a data breach that affects your rights and freedoms, we will notify you and the ICO as required by law.
10. Children’s privacy
Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at shop@bigglestones.com and we will delete it promptly.
11. Links to other websites
Our site may contain links to third-party websites such as publishers, author pages, or event partners. This Privacy Policy applies only to bigglestones.com. We are not responsible for the privacy practices of any linked sites and encourage you to read their policies separately.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version will always be published on bigglestones.com with the date it was last updated. We will notify you of any significant changes by email where we hold your contact details.
13. Contact us
If you have any questions about this Privacy Policy or how we handle your data, please get in touch:
📧 shop@bigglestones.com 📍 Bigglestones Books, 57 Glassford Street, Glasgow, G1 1UG