Privacy Policy

We collect information you provide when creating an account, placing an order, requesting a return, contacting support, joining Cove Club, applying for wholesale or affiliate access, leaving a review, or updating marketing preferences.

This can include your name, email address, phone number, billing and delivery addresses, order history, return details, support messages, review content, uploaded return or review images, wholesale business details, affiliate payout details, and marketing preference choices.

We also use necessary technical storage such as session cookies, authentication cookies, cart identifiers, checkout recovery data, and affiliate discount attribution so the website, checkout, admin systems, and approved referral discounts can work.

We use customer information to process orders, take payment, arrange delivery, manage returns and refunds, maintain accounts, respond to support requests, operate wholesale and affiliate workflows, prevent abuse, and meet legal or tax record-keeping duties.

Marketing emails are only sent when you have opted in or where another lawful basis applies. You can change marketing preferences in your account area or unsubscribe from marketing emails.

We do not sell personal information. We share information only where needed to operate the service, including with payment processors, delivery providers, email providers, hosting/database/storage providers, ecommerce/CMS software providers, and professional advisers where required.

Examples include Stripe for payments and billing, Royal Mail for delivery and return operations, email delivery providers for transactional messages, and hosted infrastructure used to run the storefront, Medusa backend, Payload CMS, and media storage.

We use technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, or loss. No online service can guarantee complete security, but access to customer and admin systems should be limited to authorised staff and protected with strong credentials.

Our website contains many links to other websites such as fishing trips, festivals, holiday cottages and other sites of interest. If you follow one of these links you will leave our website and we would like you to be aware that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement.

You should exercise caution and look at the privacy statement applicable to the website in question.

The website uses necessary cookies and similar browser storage for authentication, admin login, cart continuity, checkout, security, and affiliate discount attribution. These are required for core store features or requested referral discounts to work.

The current platform does not load Google Analytics or advertising cookies by default. If analytics, advertising pixels, or other non-essential tracking tools are added later, they should be loaded only after appropriate cookie consent is collected.

You can control cookies through your browser settings, but blocking necessary cookies may stop account, cart, checkout, CMS, or admin features from working correctly.

Under UK data protection law, including the UK GDPR and Data Protection Act 2018, you may have rights to be informed, access your personal information, correct inaccurate information, request deletion, restrict or object to processing, and request data portability.

Some information may need to be retained where required for order fulfilment, accounting, fraud prevention, dispute handling, tax, or other legal obligations.

If you believe information we hold is incorrect or incomplete, or if you want to exercise a data protection right, please contact Down The Cove using the contact details provided on the website.