Privacy Policy

1. Introduction

Rollanddine respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains how we collect, use, store, disclose and manage personal information when you visit www.rollanddine.com, place an order or contact our customer service team.

We process personal information in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the EU General Data Protection Regulation (EU GDPR).

2. Data Controller

The data controller responsible for determining the purposes and means of processing personal information collected through our website is:

Company Name: EVERYTHING BRANDED LIMITED
Brand Name: Rollanddine
Company Registration Number: 07216411-GB 991307996
Registered Business Address: 3 Harcourt Way, Meridian Business Park, Leicester, England, LE19 1WP
Email: catalog@rollanddine.com
Telephone: +44 116 366 0052
Website: www.rollanddine.com

For questions concerning this Privacy Policy or requests relating to your personal information, please contact us using the details above.

3. Personal Information We Collect

Depending on how you interact with our website, we may collect the following categories of information:

Contact information: Name, email address, telephone number and billing or delivery address.
Order information: Items purchased, order reference, transaction status, order history and delivery details.
Payment-related information: Payment status, transaction reference, payment method and limited payment details supplied to us by our payment processor. Full payment card details are handled through the relevant payment processing arrangements and are not ordinarily stored by us.
Customer communications: Messages, enquiries, correspondence and information you provide when requesting assistance.
Website usage information: IP address, browser type, device information, access times, pages visited and relevant diagnostic records.
Cookie information: Preferences and identifiers collected through cookies or similar technologies, subject to applicable consent requirements.

We collect only information that is relevant to the purposes described in this Policy.

4. How We Use Personal Information

We may use personal information for the following purposes:

To receive, confirm and fulfil orders.
To process payments and maintain transaction records.
To arrange packaging and dispatch and provide order updates.
To respond to enquiries and provide customer service.
To maintain business, accounting and tax records.
To administer our website and improve its operation.
To identify suspicious transactions, investigate potential misuse and maintain appropriate website controls.
To comply with applicable legal obligations and establish, exercise or defend legal claims.
To send marketing communications where permitted by law and where any required consent has been obtained.

We do not use personal information for purposes incompatible with those disclosed in this Policy without an appropriate legal basis.

5. Legal Bases for Processing

Where UK GDPR or EU GDPR applies, we process personal information under one or more of the following legal bases:

Contract: Processing necessary to accept and fulfil your order or take steps requested before entering into a contract.
Legal obligation: Processing required to comply with applicable accounting, tax, record-keeping or other legal requirements.
Legitimate interests: Processing necessary for proportionate business purposes, such as responding to customer enquiries, maintaining website records, preventing misuse and managing legal claims, where those interests are not overridden by your rights and interests.
Consent: Processing based on your freely given consent, including non-essential cookies and marketing activities where consent is required.

Where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Payment Processing and Stripe

We use Stripe to process payments made through our website. When you complete a purchase, relevant information may be transmitted to Stripe to facilitate the transaction.

Depending on the payment method and transaction, this information may include your name, email address, billing details, transaction amount, payment method details and order-related identifiers.

Stripe processes payment information in accordance with its applicable privacy terms and data protection obligations. Stripe may act as our processor when providing payment processing services and may act as an independent data controller for certain activities it determines, including activities carried out to meet its own legal and regulatory obligations.

We receive transaction-related information necessary to manage your order and maintain our records. We do not ordinarily receive or retain your complete payment card number or card security code.

For further information about Stripe’s handling of personal information, please consult Stripe’s Privacy Policy at stripe.com/privacy.

7. Disclosure of Personal Information

We may disclose relevant personal information to the following categories of recipients where necessary:

Stripe: To process payments and provide transaction-related services.
Website and hosting providers: To operate and maintain our website.
Delivery and fulfilment providers: To prepare, dispatch and deliver orders.
Customer service and operational providers: To assist with enquiries and order administration.
Professional advisers: Such as accountants, auditors and legal advisers, where reasonably necessary.
Public authorities and legal bodies: Where disclosure is required by law or necessary for legal proceedings.

We limit disclosures to information reasonably required for the relevant purpose. Service providers receiving personal information on our behalf must handle it in accordance with applicable contractual and legal requirements.

We do not sell personal information to third parties.

8. International Data Transfers

Some of our service providers, including payment processing or website service providers, may process personal information in countries outside the United Kingdom or European Economic Area.

Where a transfer is subject to UK GDPR or EU GDPR, we will use an applicable lawful transfer mechanism where required. This may include an adequacy decision, an approved standard contractual clause or another legally recognised safeguard, together with any additional measures required in the circumstances.

Information about applicable transfer safeguards may be requested by contacting us at catalog@rollanddine.com.

9. Data Retention Periods

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, meet applicable legal obligations and establish, exercise or defend legal claims.

Our intended retention periods are as follows:

Order, invoicing and accounting records: Generally six years after the end of the relevant financial year, where this period is applicable to the relevant record under UK record-keeping requirements.
Customer service correspondence: Generally up to three years after the enquiry has been closed, unless a longer period is necessary to resolve an ongoing matter or address a legal claim.
Marketing preferences and contact records: Until consent is withdrawn or an objection is received, with inactive records reviewed periodically and generally after 24 months of inactivity where appropriate.
Website access and diagnostic logs: Generally up to 12 months, unless a longer period is reasonably necessary to investigate an incident or comply with a legal obligation.
Cookie information: For the duration specified for each cookie or preference, subject to applicable consent and legal requirements.
Payment-related records: For the period necessary to administer transactions, reconcile payments and meet applicable accounting, legal and dispute-handling requirements. Stripe may retain information under its own retention practices and legal obligations.

These periods are applied according to the type of record and the purpose for which it is held. Where information is no longer required, it will be deleted or anonymised, unless continued retention is permitted or required by law.

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support website functions, remember preferences, understand website usage and, where enabled, support analytics or marketing activities.

Cookies may include:

Essential cookies: Required for functions such as shopping basket operation, checkout and session management.
Preference cookies: Used to remember choices you make on the website.
Analytics cookies: Used to understand how visitors interact with the website.
Marketing cookies: Used to support relevant marketing activities where applicable.

Non-essential cookies will be used only where the required consent has been obtained. You may change or withdraw your cookie preferences through the available cookie settings. Disabling certain cookies may affect some website functions.

Third-party services, including Stripe where applicable, may place or access cookies or similar technologies in accordance with their role and the relevant settings. Please refer to our Cookie Policy for further information about cookie categories and retention periods.

11. Data Protection and Confidentiality

We apply appropriate organisational and technical measures intended to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.

Access to personal information is limited to those who need it for legitimate business purposes. Where service providers process personal information on our behalf, we take appropriate steps to establish relevant data protection obligations.

No method of transmitting or storing information is entirely free from risk. We review our practices as appropriate and respond to identified data protection concerns in accordance with applicable requirements.

12. Your Data Protection Rights

Subject to the applicable legal conditions and exceptions, you may have the right to:

Request access to your personal information.
Request correction of inaccurate or incomplete information.
Request erasure of personal information where the legal conditions are met.
Request restriction of processing in specified circumstances.
Object to processing based on legitimate interests.
Object to direct marketing at any time.
Request a copy of certain personal information in a portable format.
Withdraw consent where processing is based on consent.
Lodge a complaint with the relevant data protection supervisory authority.

These rights are not absolute in every circumstance. For example, information may need to be retained where required by law or where necessary to establish, exercise or defend legal claims.

To exercise your rights, contact catalog@rollanddine.com. We may request reasonable information to verify your identity before responding. We will handle requests within the time limits prescribed by applicable law.

If you are in the United Kingdom, you may complain to the Information Commissioner’s Office (ICO). If you are in the European Economic Area, you may contact the relevant national data protection supervisory authority.

13. Marketing Communications

We may send information about our products or offers where permitted by applicable law.

Where consent is required, we will obtain it before sending marketing communications. You may unsubscribe using the instructions provided in the communication or contact us directly.

Unsubscribing from marketing will not prevent us from sending necessary service messages relating to an existing order or customer enquiry.

14. Children’s Privacy

Our website is intended for general retail customers and is not specifically directed at children. We do not knowingly seek to collect personal information from children in circumstances where parental authorisation or another legal basis is required.

If you believe that a child has provided personal information inappropriately, please contact us so that we can assess the matter and take appropriate action.

15. Changes to This Privacy Policy

We may revise this Privacy Policy when our processing practices, website functions or applicable legal requirements change.

The latest version will be published on this page with its updated revision date. Where required by law, we will provide additional information or seek renewed consent before implementing changes that require it.

16. Contact Us

For questions about this Privacy Policy, requests concerning your personal information or other privacy-related enquiries, please contact:

Rollanddine
Data Controller: EVERYTHING BRANDED LIMITED
Company Registration Number: 07216411-GB 991307996
Address: 3 Harcourt Way, Meridian Business Park, Leicester, England, LE19 1WP
Email: catalog@rollanddine.com
Telephone: +44 116 366 0052
Website: www.rollanddine.com

Please include sufficient details about your request to help us identify the relevant information and respond appropriately.