Privacy Policy

Who We Are

Stronsay Forge is an independent blacksmithing and artisan craft brand operated by Nathanael MacTaggart, a sole trader trading as A Farm In The North, based on the island of Stronsay, Orkney, Scotland.

For the purposes of data protection legislation, Nathanael MacTaggart is the data controller responsible for personal information processed through Stronsay Forge, except where another organisation acts as an independent controller.

Proprietor: Nathanael MacTaggart
Trading name: A Farm In The North
Trading brand: Stronsay Forge

Dousquoy
Park of Housebay
Stronsay
Orkney
KW17 2AF
Scotland
United Kingdom

Email: info@stronsayforge.com

Information We Collect

When you visit our website, place an order or contact us, we may collect the following information.

Personal and contact information

• Name
• Email address
• Telephone number, where provided
• Billing and delivery addresses
• Information you provide when contacting us

Order and transaction information

• Products purchased
• Order details and purchase history
• Payment confirmation and transaction references
• Delivery and fulfilment information
• Refunds, returns and customer service correspondence

Payments are processed through Shopify and its supported payment providers. We do not ordinarily receive or store your complete payment card details.

Website and technical information

• IP address
• Browser and device information
• Approximate geographical location derived from technical information
• Pages visited and website interactions
• Cookies and similar tracking technologies

Age verification information

Certain products, including knives and other age-restricted items, may require proof of age.

Where age verification is necessary, we may process information required to confirm that a customer meets the applicable legal age requirements.

We aim to collect only the information necessary for verification and retain it only for as long as reasonably required for the verification process or applicable legal obligations.

How We Use Your Information

We use personal information to:

• Process and fulfil orders.
• Arrange delivery and provide tracking information.
• Communicate about purchases, returns and enquiries.
• Process payments and refunds.
• Verify eligibility to purchase age-restricted products.
• Detect and prevent fraud or misuse of our website.
• Maintain business, accounting and tax records.
• Improve our website and customer experience.
• Send marketing communications where we have the appropriate consent or another lawful basis.

We do not sell customer personal information to advertisers.

Our Legal Bases for Processing

Under UK GDPR, we rely on one or more of the following legal bases:

Performance of a contract: To process orders, arrange deliveries and provide customer support relating to purchases.

Legal obligation: To maintain records required for tax, accounting, consumer protection and other applicable legal requirements.

Legitimate interests: To operate and protect our business, respond to enquiries, prevent fraud and improve our services, where these interests are not overridden by your rights.

Consent: Where required for optional marketing communications or non-essential cookies and tracking technologies.

You may withdraw consent at any time where processing is based on consent.

Shopify & Other Service Providers

Our online shop is powered by Shopify, which provides the ecommerce platform used to process orders and manage our website.

Shopify and its associated service providers may process personal information to provide checkout, payment, security and ecommerce services.

Read Shopify's Privacy Policy

We may also use third-party providers for:

• Payment processing
• Postal and delivery services
• Website analytics
• Email communications
• Fraud prevention
• Age verification where required

These providers receive information relevant to their services, subject to applicable data protection requirements and their respective roles and legal obligations.

Email Marketing

We may use Omnisend to manage email marketing and customer communications.

Where you subscribe to marketing communications, your relevant contact information may be processed through Omnisend.

You can unsubscribe from marketing emails at any time using the unsubscribe link included in those messages or by contacting us directly.

Read Omnisend's Privacy Policy

We do not require customers to subscribe to marketing communications in order to make a purchase.

Cookies & Website Analytics

Our website uses cookies and similar technologies to support essential website functions, including shopping baskets, checkout and security.

We may also use optional analytics or marketing technologies to understand how visitors use the website and improve our services.

Where required by law, non-essential cookies will only be used after you have provided appropriate consent.

You can manage cookie preferences through the controls provided on our website, where available, or through your browser settings.

Disabling certain cookies may affect the operation of some website features.

Sharing Your Information

We may share personal information with trusted third parties where necessary to operate our business.

These may include Shopify, payment processors, Royal Mail, delivery providers, email service providers and other relevant service providers.

We may also disclose information where required by law, to respond to lawful requests or to protect our legal rights.

We do not disclose customer information to unrelated third parties for their own independent marketing purposes without an appropriate lawful basis.

International Data Transfers

Some of the service providers used by Stronsay Forge may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we seek to ensure that appropriate safeguards are in place, such as recognised adequacy arrangements or approved contractual protections, where required by applicable law.

Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected, including fulfilling orders, maintaining legally required records and resolving disputes.

Order and transaction information may be retained for the periods required under applicable tax and accounting legislation.

Marketing information is retained for as long as necessary for the relevant purpose, subject to applicable rights to object or withdraw consent.

Age verification information is retained only for as long as necessary for verification and any applicable legal requirements.

When personal information is no longer required, we will delete it or anonymise it where reasonably practicable.

Your Data Protection Rights

Depending on the circumstances, you may have the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Request restriction of certain processing activities.
• Object to certain uses of your information.
• Request transfer of your information where applicable.
• Withdraw consent where processing is based on consent.

These rights are subject to applicable legal conditions and exemptions.

To exercise your rights, please contact info@stronsayforge.com .

You also have the right to complain to the UK Information Commissioner's Office (ICO).

Visit the Information Commissioner's Office

Children's Privacy

Our website is intended for customers who are legally eligible to purchase the products offered.

Age-restricted products, including knives, must only be purchased by individuals who meet the applicable legal age requirements.

We do not knowingly collect children's personal information for marketing purposes.

Security

We take reasonable steps to protect personal information against unauthorised access, loss, misuse and disclosure.

Our website uses Shopify's ecommerce infrastructure and associated security measures.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website services, legal requirements or data protection practices.

The latest version will be published on this website with an updated revision date.