Legal
Privacy notice
What personal data we collect, why, who we share it with and your rights.
Last updated: 22 September 2026.
Who is responsible for your data
ARSHAD & CO. ACCOUNTANCY LTD, trading as ARSHAD & CO., is the controller of the personal data collected through arshadacc.shop. Contact us about anything on this page at support@arshadacc.shop. Our company details are on the Legal information page.
What we collect
- Order details: your name, delivery and billing address, e-mail address, telephone number, the items you order and your order history.
- Payment details: handled by the payment provider. We receive confirmation that you have paid and limited details such as the card type and last four digits; we do not receive or store full card numbers.
- Account details if you create an account: your e-mail address and a password (stored in encrypted form).
- Messages you send us, including withdrawal and complaint messages.
- Technical data: your IP address and browser information, processed by our hosting provider to deliver and secure the site; and the cookies described on our Cookies page.
Why we use it, and on what basis
- To take, deliver and support your order, handle returns and refunds — because it is necessary to perform our contract with you.
- To keep records of sales and meet our legal obligations, including tax and consumer law — because we are legally required to.
- To keep the site secure, prevent fraud and improve our service — in our legitimate interests.
We do not send marketing e-mails, and we do not sell your personal data or share it for targeted advertising.
Who we share it with
- Supplier partners who pack and send your order: your name, delivery address, telephone number and the items ordered.
- Carriers and customs: the details needed to deliver your parcel and clear customs.
- The payment provider used at checkout, to process your payment and prevent fraud.
- Our hosting and e-mail providers, who store data on our behalf.
- Authorities, where the law requires it.
International transfers
Because our supplier partners and some service providers are located outside the United Kingdom and the European Economic Area, your data may be transferred to other countries. Where it is, we rely on an adequacy decision or put in place appropriate safeguards, such as standard contractual clauses. You can ask us for details.
How long we keep it
Order and payment records: 6 years after the end of the financial year of the order, as the law requires for company records. Account details: until you close your account. Messages: up to 2 years after the matter is closed.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Write to support@arshadacc.shop; we reply within one month. If you are not satisfied, you can complain to the UK Information Commissioner's Office (ico.org.uk) or, if you live in the European Union, to the data protection authority in your country.
If you live in a US state with a consumer privacy law, you have similar rights to know about, correct and delete your data, and we will not discriminate against you for using them. We do not sell or share personal information as those laws define it.
Children
This site is not directed at children under 16 and we do not knowingly collect their data.
Changes
If we change this notice we will publish the new version here with a new date.