Privacy policy
Privacy Policy
Last updated: 7 October 2026
Impala Records Ltd (“Impala Records”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and share personal data when you visit impalarecords.co.uk, place an order, create an account, contact us, subscribe to marketing or otherwise interact with us.
For the purposes of UK data protection law, Impala Records Ltd is the data controller.
Impala Records Ltd
Company number: 17284449
Registered in England and Wales
Email: info@impalarecords.co.uk
1. Personal Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data:
Identity and contact information
- Name
- Email address
- Telephone number, where provided
- Billing address
- Delivery address
Order and transaction information
- Products purchased
- Order history
- Payment status
- Delivery information
- Returns, refunds and customer-service history
Payment information
Payments are processed by Shopify and/or the payment providers available at checkout. We do not receive or store your full payment card details.
Account information
If you create an account, we may process information associated with that account, including your contact details, order history and account preferences.
Communications
We may keep records of emails, contact-form submissions and other communications between you and Impala Records.
Marketing information
- Whether you have subscribed to marketing
- Your marketing preferences
- Your interaction with marketing communications
Technical and usage information
When you use our website, we and our service providers may collect information such as:
- IP address
- Browser and device information
- Cookie identifiers
- Pages viewed
- Referring website
- Website interactions
- Approximate location derived from technical information
2. How We Collect Your Personal Data
We collect personal data:
- directly from you when you place an order, create an account, contact us or subscribe to marketing;
- automatically when you use our website, through cookies and similar technologies;
- from Shopify and other service providers used to operate our store;
- from payment, delivery, fraud-prevention, analytics and marketing providers where relevant; and
- from other sources where you have authorised the sharing of information with us or where the law otherwise permits it.
3. How and Why We Use Your Personal Data
Processing and fulfilling orders
We use your information to:
- process your order;
- take and confirm payment;
- arrange delivery;
- provide order updates;
- process returns and refunds; and
- communicate with you about your purchase.
Our lawful basis is generally performance of a contract with you.
Customer service
We use personal data to answer enquiries, resolve problems and provide support relating to our products and services.
Depending on the circumstances, our lawful basis is performance of a contract or our legitimate interests in providing effective customer service and operating our business.
Operating and improving our website
We may use technical and usage information to maintain, secure and improve our website and understand how customers use it.
Our lawful basis may be our legitimate interests in operating and improving our business or consent where consent is required for cookies or similar technologies.
Fraud prevention and security
We may process personal data to protect customers, our website and our business against fraud, misuse, security threats and unlawful activity.
Our lawful basis is our legitimate interests in protecting our business and customers and, where applicable, compliance with a legal obligation.
Legal, tax and accounting obligations
We retain and process certain transaction and customer information where necessary to comply with accounting, tax, regulatory and other legal requirements.
Our lawful basis is compliance with a legal obligation.
Marketing
Where permitted by law, we may use your contact information to send you news, new-arrival information, offers and other marketing relating to Impala Records.
We may send electronic marketing where you have consented or, where legally permitted, where the UK electronic-marketing rules allow us to contact existing customers about our own similar products or services.
You can unsubscribe at any time using the unsubscribe link in a marketing email or by contacting info@impalarecords.co.uk.
Unsubscribing from marketing will not prevent us from sending essential communications relating to an order or customer-service request.
4. Our Legitimate Interests
Where we rely on legitimate interests, those interests may include:
- operating and improving Impala Records;
- providing customer service;
- understanding how our website and services are used;
- protecting our website, customers and business against fraud and misuse;
- maintaining appropriate business records; and
- establishing, exercising or defending legal claims.
Where we rely on legitimate interests, we consider whether our interests are overridden by your rights and interests.
5. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Some cookies are necessary for the website and checkout to function properly. Other cookies may be used for analytics, personalisation or advertising.
Where UK law requires consent for a particular cookie or similar technology, it will only be used after the required consent has been obtained.
You can manage available choices through our cookie controls and, where appropriate, through your browser settings.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
6. Shopify
Our online store is hosted by Shopify, which provides the ecommerce platform we use to sell our products and services.
Shopify processes personal data in connection with services including website hosting, checkout, payments, security and ecommerce functionality.
Shopify may process personal data in countries outside the United Kingdom and may also process certain information for its own purposes in accordance with its own privacy documentation.
7. Who We Share Personal Data With
We may share personal data where reasonably necessary with categories of recipients including:
- Shopify and ecommerce service providers;
- payment processors;
- delivery and postal providers;
- website hosting and technical service providers;
- analytics providers;
- marketing and advertising service providers, where permitted;
- fraud-prevention and security providers;
- professional advisers such as accountants, lawyers and insurers;
- government authorities, regulators, courts or law-enforcement bodies where required by law; and
- prospective purchasers, investors or advisers if Impala Records undergoes a sale, restructuring or similar business transaction.
We require service providers acting on our behalf to handle personal data appropriately and only for permitted purposes.
We do not disclose personal data to third parties simply for them to use for their own unrelated direct marketing.
8. International Transfers
Some of the organisations that provide services to us may process personal data outside the United Kingdom.
Where personal data is transferred internationally and UK data protection law requires safeguards, we take appropriate steps to ensure that the transfer is lawful.
Depending on the destination and provider, these safeguards may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another lawful transfer mechanism.
You can contact us if you would like further information about safeguards relating to a particular transfer.
9. How Long We Keep Personal Data
We keep personal data only for as long as reasonably necessary for the purposes for which it was collected.
The appropriate retention period depends on factors including:
- the nature of the information;
- why it was collected;
- whether it remains necessary for our relationship with you;
- legal, tax and accounting requirements;
- fraud-prevention and security requirements; and
- whether information may be required to establish, exercise or defend legal claims.
When personal data is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.
10. Security
We take reasonable technical and organisational measures designed to protect personal data against accidental or unlawful loss, misuse, alteration, disclosure or access.
However, no website, electronic transmission or storage system can be guaranteed to be completely secure.
11. Your Data Protection Rights
Depending on the circumstances, UK data protection law may give you the right to:
- request access to personal data we hold about you;
- request correction of inaccurate or incomplete information;
- request deletion of your personal data;
- request restriction of processing;
- object to certain processing;
- request transfer of certain personal data to you or another organisation;
- withdraw consent where processing is based on consent; and
- object to direct marketing.
You have the right to object at any time to the use of your personal data for direct marketing.
Some rights are subject to legal conditions and exemptions and therefore may not apply in every circumstance.
To exercise a data protection right, contact:
We may need to verify your identity before responding to a request.
You will not normally have to pay a fee to exercise your rights, although the law allows a reasonable fee or refusal in certain circumstances involving manifestly unfounded or excessive requests.
12. Automated Decision-Making
Impala Records does not itself make decisions about customers based solely on automated processing where those decisions would produce legal or similarly significant effects.
Some service providers, such as payment or fraud-prevention providers, may use automated systems as part of the services they provide. Their processing is governed by their applicable privacy information and data protection obligations.
13. Providing Information to Us
Certain personal data is necessary for us to enter into and perform a contract with you.
For example, we need sufficient contact, payment and delivery information to process and deliver an order.
If required information is not provided, we may be unable to process an order or provide the requested service.
14. Children's Privacy
Our store is intended for a general adult retail audience and is not directed specifically at children.
We do not knowingly seek to collect personal data from children in circumstances where parental or guardian consent would be required by law.
15. Third-Party Websites
Our website may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices of third-party websites. We recommend reviewing their privacy information before providing personal data to them.
16. Complaints
If you have a concern about how we use your personal data, please contact us first at:
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Your right to complain to the ICO is not affected by contacting us first.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, services, legal obligations or data-processing practices.
The latest version will be published on this page and the “Last updated” date will be changed accordingly.
Where a change materially affects how we use personal data, we will take appropriate steps to bring the change to the attention of affected individuals where required.
18. Contact Us
For questions about this Privacy Policy or how Impala Records uses personal data, or to exercise your data protection rights, contact:
Impala Records Ltd
Company number: 17284449
Registered in England and Wales
Email: info@impalarecords.co.uk