Privacy policy

Last updated: 2 October 2026

Who we are

Tourstock is operated by TourStock Ltd. References to “Tourstock”, “we”, “us” and “our” in this notice mean TourStock Ltd.

Our address is Ground Floor, 60 Weir Road (within SW19 Studios), London, SW19 8UG, United Kingdom.

For privacy questions or to exercise your rights, email info@tourstock.co.uk.

What this notice covers

This notice explains how we collect and use personal information when you:

• visit tourstock.co.uk;
• buy or enquire about a product or service;
• create an account or join a mailing list;
• ask us for support, a return, repair or quote;
• interact with our advertising or social accounts;
• supply goods or services to Tourstock; or
• otherwise communicate with us.

Information we collect

Depending on how you deal with us, we may collect:

• identity and contact information, such as your name, billing or delivery address, email address and telephone number;
• order information, including products, quantities, prices, discounts, tax, delivery method, returns, refunds and transaction references;
• account information and preferences;
• customer-service communications and information you choose to provide;
• business contact information for trade customers and suppliers;
• website and device information, such as cookie identifiers, IP address, browser, device, pages viewed, referral source and interactions;
• marketing preferences and campaign attribution information; and
• fraud-prevention, security and service-integrity information.

Payment-card details are handled by our payment providers. Tourstock does not store complete card numbers or card security codes.

Where information comes from

We receive information:

• directly from you;
• from Shopify when you use our store;
• from payment, delivery, accounting and fraud-prevention providers;
• from analytics, advertising and social platforms where permitted;
• from cookies and similar technologies, subject to your choices; and
• from publicly available business sources where relevant to a trade relationship.

Why we use information

We use personal information for the following purposes and lawful bases.

Orders and services

We use information to provide quotes, process and deliver orders, take payment, send transactional messages, handle returns and refunds, provide support and manage accounts. This is necessary to perform a contract with you or to take steps at your request before entering a contract.

Legal and accounting records

We keep records needed for tax, accounting, product-safety, fraud-prevention, regulatory and dispute purposes. This is necessary to comply with legal obligations and, where applicable, for our legitimate interests in protecting Tourstock and its customers.

Operating and improving Tourstock

We use order, fulfilment, stock, website and campaign information to understand performance, identify service or data-quality problems, improve products and content, measure experiments and control costs. Our lawful basis is our legitimate interest in running and improving a safe, efficient retail business.

Tourstock’s internal operating system processes detailed order records in memory to calculate period and channel aggregates. Its routine analytical ledger excludes customer names, email addresses, telephone numbers and postal addresses. Customer-facing invoices and public website changes remain subject to owner-controlled permissions and audit records.

We do not make solely automated decisions about customers that have legal or similarly significant effects.

Marketing

We may send marketing where you have consented or where applicable law permits us to contact an existing customer about similar products. You can unsubscribe at any time. We keep a minimal suppression record where necessary to respect an opt-out.

Cookies, analytics and advertising

We use essential cookies and similar technologies to run the store: to keep your basket, take you through checkout, protect the site and remember your cookie choice. These are always on.

With your permission we also use:

• Analytics: Shopify's store analytics, Google Analytics and Microsoft Clarity, to understand how visitors use the site. Clarity records anonymised interactions such as clicks, scrolling and page layout so we can find and fix problems.
• Marketing: Google Ads, Meta (Facebook and Instagram), TikTok and Judge.me, to measure our advertising, show our ads to people who have visited the store, and measure product reviews. Shopify's Google and Meta sales channels may also send order events to those platforms from Shopify's servers, in line with your choices.

Visitors in the United Kingdom and the European Economic Area are asked before any analytics or marketing cookies are set. The banner offers Accept all, Reject all and Manage choices, and rejecting is as easy as accepting. Until you choose, only essential cookies are used. You can change your choice at any time with the Cookie preferences link at the bottom of every page, or by clearing cookies in your browser settings.

Who we share information with

We disclose only the information reasonably necessary to providers that help us operate, including:

• Shopify, which hosts and operates our online store;
• payment processors and financial institutions;
• postal, courier, fulfilment and returns providers;
• cloud hosting, security, credential-management and technical-support providers;
• accounting and business-finance providers, including Xero and Monzo where connected;
• analytics and advertising providers (Google, Microsoft, Meta, TikTok and Judge.me), only for the purposes you allow through your cookie choices;
• social platforms, including Meta or YouTube, when you interact with those services or when Tourstock connects account-level analytics;
• professional advisers, insurers, auditors and regulators; and
• a buyer or successor if Tourstock is involved in a genuine business sale or reorganisation.

Providers must handle information under their own legal obligations and, where they act for us, under appropriate contractual safeguards.

We may disclose information where required by law or where necessary to protect customers, Tourstock or others. We do not sell customer personal information.

International transfers

Some providers process information outside the United Kingdom. Where UK data protection law requires a transfer safeguard, we rely on an adequacy regulation, the UK International Data Transfer Agreement or Addendum, or another valid safeguard. You may contact us for more information about the relevant safeguard.

How long we keep information

We keep information only for as long as it is needed for the purpose described above. In particular:

• core order, invoice, payment and tax records are normally kept for six years after the end of the relevant financial year, or longer where law or a live dispute requires;
• customer-service and return records are normally kept for up to three years after the matter closes, unless they form part of a longer-lived accounting, warranty or legal record;
• account information is kept while the account is active and for a reasonable period afterwards;
• marketing contact information is kept until you unsubscribe or it is no longer needed; a minimal suppression record may be retained;
• cookie and analytics information follows the retention configured in the relevant service and is periodically reviewed; and
• raw operational webhook records are encrypted, access-controlled and deleted when no longer required for reliable processing, security or a legal obligation.

When a fixed period is not appropriate, we consider the amount and sensitivity of the information, the risk of harm, the purpose, whether it can be achieved another way, and legal requirements.

Security

We use measures appropriate to the information and risk. These include restricted access, least-privilege provider permissions, encrypted transport, encrypted sensitive operational records, protected credential management, audit trails, monitoring and recovery controls.

No system can be guaranteed completely secure. Please do not send payment-card details or other highly sensitive information through ordinary email.

Your rights

Depending on the circumstances, UK data protection law may give you rights to:

• access your personal information;
• correct inaccurate or incomplete information;
• request deletion;
• restrict processing;
• receive certain information in a portable format;
• object to processing based on legitimate interests or to direct marketing; and
• withdraw consent where processing relies on consent.

These rights are not absolute. We may need to verify your identity and may retain information where law requires or permits it.

To exercise a right, email info@tourstock.co.uk. We normally respond within one month.

You may complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/ or by calling 0303 123 1113. We would appreciate the opportunity to address your concern first.

Children

Our store is not directed to children, and we do not knowingly collect personal information from children who cannot lawfully provide it. A parent or guardian may contact us if they believe a child has provided information.

Third-party sites

Our store may link to websites or services we do not control. Their privacy notices apply when you use those services.

Changes

We may update this notice when our services, providers or legal obligations change. We will publish the revised notice and update the date above. Where a change materially affects how we use personal information, we will take any additional steps required by law.