Privacy Policy

Captain Tolley Limited · Last updated: 10 November 2026

1. Who we are

This website, captaintolley.com, is operated by Captain Tolley Limited (“we”, “us”, “our”), a company registered in England and Wales.

Company number: 02068479
VAT number: GB448857984

Registered address: 69 Valiant House, Vicarage Crescent, London SW11 3LX, United Kingdom

Telephone: +44 (0)20 7924 2817
Email: info@captaintolley.com

We are the “data controller” of the personal information described in this policy. That means we decide how and why your information is used.
If you have any questions about this policy or how we handle your information, please contact us at info@captaintolley.com.


2. What this policy covers


This policy explains what personal information we collect when you visit our website, contact us or buy from us, how we use it, who we share it with, how long we keep it and what rights you have.


3. The information we collect


When you place an order
Your name, billing and delivery addresses, email address and phone number
The products you order, order value and order history
Payment details. Card payments are handled by our payment provider, and we do not see or store your full card number.
Any notes you add to your order
When you create an account (if you choose to)
Your name, email address, password (stored in encrypted form), saved addresses and order history
When you contact us
Your name, email address and any other details you include in the message when you use our contact form, email us or phone us
When you leave a review
Your name, email address, the content of your review and any photos you upload. Reviews are collected through Judge.me.
When you browse our website
Technical information such as your IP address, browser type, device, pages visited and how you arrived at our site
Information collected through cookies and similar technologies (see section 9)
We do not knowingly collect information from children under 16, and our website is not aimed at them.


4. How we use your information and our legal basis


Under UK data protection law, we must have a lawful basis for using your information. These are the bases we rely on.

What we do
Our lawful basis
Process and deliver your order, take payment, send order updates and handle returns or refunds
Contract (we need this to fulfil your order)
Reply to your enquiries and provide customer support
Legitimate interests (responding to people who contact us) or contract, where your enquiry relates to an order
Keep accounting and tax records, including VAT
Legal obligation
Prevent fraud and keep our website secure
Legitimate interests (protecting our business and customers)
Understand how our website is used and improve it
Consent (for non-essential cookies and analytics)
Publish your review on our website
Legitimate interests (showing genuine customer feedback)
Handle legal claims or disputes
Legitimate interests (protecting our legal rights)

 

We do not use your information to make automated decisions that have a legal or similarly significant effect on you.

5. Who we share your information with

We only share your information with organisations that help us run the business, and only as far as they need it. We do not sell your personal information.

Website hosting:
WP Engine, which hosts our website and WooCommerce store

Payment processing:
Stripe, which processes your payment
Delivery and fulfilment partners, including couriers and postal services, and the warehouse service that stores and dispatches our stock
Email and communication tools used to send order emails and handle enquiries

Analytics:
Google Analytics, if you accept analytics cookies

Professional advisers such as accountants, lawyers and insurers

Regulators, law enforcement or other authorities, where we are legally required to share information

If our business is ever sold or restructured, your information may be transferred to the new owner, who must continue to protect it in line with this policy.

6. International transfers

We only sell to customers in the UK, but some of our service providers, such as Stripe, Google and Judge.me, may process information outside the UK, including in the United States.

Where this happens, we make sure your personal information is protected, for example by relying on a UK adequacy decision, or on approved safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. You can contact us for more detail about the safeguards we use.

7. How long we keep your information

We keep personal information only for as long as we need it for the purposes in this policy.

Information
How long we keep it
Order and invoice records
6 years from the end of the financial year, to meet tax and accounting requirements
Customer account details
Until you ask us to close the account, or after 2–3 years of inactivity
Contact form enquiries and emails
2 years after the enquiry is resolved
Marketing preferences
Until you unsubscribe
Reviews
For as long as the review is displayed on our website, unless you ask us to remove it
Analytics data
In line with the data retention setting in our Google Analytics account

 

When we no longer need information, we delete or anonymise it.

8. Your rights


Under UK data protection law you have the right to:

  • Be informed about how we use your information (this policy)
  • Access a copy of the personal information we hold about you
    Correct information that is inaccurate or incomplete
  • Erase your information in certain circumstances
  • Restrict how we use your information in certain circumstances
  • Object to us using your information where we rely on legitimate interests, and to direct marketing at any time
  • Data portability, meaning to receive your information in a portable format or have it sent to another organisation, where it applies
  • Withdraw consent at any time, where we rely on consent. This does not affect anything we did before you withdrew it.


To use any of these rights, email info@captaintolley.com. We may need to confirm your identity first. We will normally respond within one month.


You can unsubscribe from marketing emails at any time by using the link in any email or by contacting us.


If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk, telephone 0303 123 1113. If you live in the EU or EEA, you may also contact your local data protection authority.


9. Cookies


Our website uses cookies, which are small text files placed on your device.
Strictly necessary cookies keep the website working, for example to remember what is in your basket and to keep the checkout secure. These do not need your consent.


Analytics cookies from Google Analytics help us understand how visitors use the site. We only use these if you accept them.

You can change your cookie choices at any time through the cookie banner or on our cookie policy page, and you can also block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the site, such as the basket and checkout, from working.


10. Security


We take appropriate technical and organisational steps to protect your personal information, including secure (HTTPS) connections and restricted access to the information we hold.

Payment card details are processed by our payment provider and not stored on our website.

No online service can be completely secure, so please use a strong, unique password if you create an account.


11. Links to other websites


Our website may link to other websites, such as Amazon, eBay, YouTube or social media platforms.

We are not responsible for their privacy practices, so please read their privacy policies before giving them your information.


12. Changes to this policy


We may update this policy from time to time.

The latest version will always be on this page, with the date it was last updated shown at the top.

If we make an important change, we will let you know in an appropriate way, for example by email or a notice on the site.


13. Contact us


Captain Tolley Limited 69 Valiant House, Vicarage Crescent London SW11 3LX United Kingdom

Telephone: +44 (0)20 7924 2817

Email: info@captaintolley.com