SUBREALISM · CUSTOMER INFORMATION

Privacy notice.

Last updated: 19 October 2026

Who is responsible

Subrealism LTD is the controller of personal information used to run this shop. Contact us at the email or address above for privacy questions or requests.

Information & purposes

• Orders: your name, email, delivery address, items, payment choice, order reference and payment status are used to process the sale, arrange delivery and provide customer support. The lawful basis is performance of a contract or steps you request before entering one.
• Optional accounts: your account identity, contact information and saved delivery address are used to provide the account you request. Passwords are handled by our authentication provider, not displayed to shop administrators.
• Product enquiries: your name, email, message and the product concerned are used to respond, on the basis of steps before a contract or our legitimate interest in responding to customer enquiries.
• Security and operational diagnostics: technical request information and error reports may be processed to keep the site secure and working, based on our legitimate interests. Financial records are retained to meet legal obligations.

Who receives information

Our authorised shop administrators and service providers receive information needed for their work: Lovable Cloud for hosting, storage and account services; Stripe for card payments; PayPal when you choose it; banking providers for transfers; and Royal Mail or another agreed carrier for delivery. If you choose Google or Lovable sign-in, that provider handles the sign-in and shares the account identity needed to sign you in. Opening our eBay link takes you to eBay, which has its own privacy notice.

We do not store full payment-card details in this shop or in the checkout draft. Payment providers process those details under their own terms and privacy notices. We do not sell customer personal information.

Retention

Order and accounting records are retained for applicable UK accounting and tax obligations (normally six years from the end of the relevant company financial year, with longer retention where legally required). Account information is kept while your account is active and where needed for legal claims or obligations afterwards. Enquiries are kept while needed for the enquiry, a resulting order or a dispute; contact us to request deletion. You can request account closure or deletion; legally required transaction records may need to be retained. Browser checkout drafts last for the tab session and may be cleared after completion; the basket remains until cleared or browser storage is removed.

International processing

Some hosting, authentication or payment providers may process information outside the UK. Transfers requiring protection must use an applicable UK adequacy decision or appropriate safeguards, such as approved contractual clauses and any required UK addendum. Contact us for information about the providers and safeguards relevant to your data.

Your rights

Depending on the circumstances, you can request access, correction, erasure, restriction or portability and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. We may need to verify your identity. We normally respond within one month, subject to lawful extensions. You can complain to the Information Commissioner’s Office (ICO), the UK data protection regulator.

Your choices

An account is optional. Order contact and delivery details are needed to complete and deliver a purchase; without them we cannot fulfil it. No marketing subscription is required. We do not use customer information to make solely automated decisions with legal or similarly significant effects.