Privacy policy

How we collect, use, and protect your information

 

Sanctum Noctis operates this store and website, including all related information, content, features, tools, products and services, in order to provide you with a curated shopping experience (the “Services”). This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using the Services or otherwise communicate with us.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.

 

❖  A Note on Shopify Our store is hosted by Shopify. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information. To learn more about how Shopify uses your data and to exercise any rights related to Shopify’s processing, visit privacy.shopify.com.

 

 

When we use the term “personal information,” we mean information that identifies or can reasonably be linked to you. We may collect or process the following categories, depending on how you interact with the Services and as permitted by applicable law:

❖  Contact details — your name, address, billing and shipping address, phone number, and email address.

❖  Financial information — payment card details, transaction information, payment confirmation and other payment details.

❖  Account information — username, password, security questions, preferences and settings.

❖  Transaction information — items you view, add to your cart or wishlist, purchase, return, exchange, or cancel, and your past transaction history.

❖  Communications with us — information you include when contacting us, for example in a customer support enquiry.

❖  Device information — information about your device, browser or network connection, IP address, and other unique identifiers.

❖  Usage information — how and when you interact with or navigate the Services.

 

We may collect personal information directly from you, automatically through the Services (including via cookies and similar technologies), from our service providers, and from our partners or other third parties.

 

 

Depending on how you interact with us, we may use your personal information for the following purposes:

❖  Providing and improving the Services — processing payments, fulfilling orders, managing your account, arranging shipping, facilitating returns, remembering your preferences, and creating a personalised shopping experience.

❖  Marketing and advertising — sending marketing communications by email, text, or post, and showing relevant online advertisements based on your activity on the Services or elsewhere.

❖  Security and fraud prevention — authenticating your account, providing a secure shopping experience, and detecting or acting on potentially fraudulent or malicious activity.

❖  Communicating with you — responding to your enquiries, providing customer support, and maintaining our business relationship.

❖  Legal compliance — complying with applicable law, responding to legal process, and enforcing or investigating potential violations of our terms or policies.

 

 

We may disclose your personal information to third parties in the following circumstances:

❖  Service providers — vendors and third parties who perform services on our behalf, including IT management, payment processing, data analytics, customer support, cloud storage, fulfilment, and shipping.

❖  Business and marketing partners — to support personalised advertising with third-party services based on your online activity. Our partners will use your information in accordance with their own privacy notices.

❖  At your direction — when you direct or consent to our disclosure, for example to ship you products or through your use of social media or login integrations.

❖  Within our corporate group — with our affiliates or otherwise within our corporate structure.

❖  Legal or business reasons — in connection with a merger, bankruptcy, or legal obligation; to comply with subpoenas, search warrants, or similar requests; to enforce applicable terms; or to protect the Services, our rights, and the rights of our users.

 

❖  Shopify & Your Data Our Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services. Information you submit may be transmitted to and shared with Shopify, as well as third parties in countries other than where you reside. To learn more about how Shopify uses your data and to exercise any rights you may have, visit privacy.shopify.com.

 

 

The Services may provide links to websites or online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy or reliability of information found on them.

Information you share on public or semi-public venues, including third-party social networking platforms, may be viewable by other users without limitation as to its use by us or a third party. Our inclusion of such links does not imply endorsement of the content, owners, or operators of those platforms, except as disclosed on the Services.

 

 

The Services are not intended for use by children, and we do not knowingly collect personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, please contact us using the details below to request its deletion.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as defined by applicable law) personal information of individuals under 16 years of age.

 

 

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee absolute security. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need it to maintain your account, to provide the Services, to comply with legal obligations, or to resolve disputes or enforce applicable contracts and policies.

 

 

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. These rights are not absolute, may apply only in certain circumstances, and in certain cases we may decline your request as permitted by law.

 

RIGHT	WHAT IT MEANS
Access / Know	You may request access to the personal information we hold about you.
Delete	You may request that we delete personal information we maintain about you.
Correct	You may request that we correct inaccurate personal information we hold about you.
Portability	You may request a copy of the personal information we hold and ask us to transfer it to a third party, subject to certain exceptions.
Marketing opt-out	You may opt out of promotional emails at any time via the unsubscribe link. We may still send non-promotional emails, such as those about your account or orders.
Object / Restrict	UK & EEA residents: You may ask us to stop or restrict our processing of personal information for certain purposes.
Withdraw consent	UK & EEA residents: Where we rely on consent to process your personal information, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

 

To exercise any of these rights, please contact us using the details below or use the options indicated on the Services. We will not discriminate against you for exercising your rights. We may need to verify your identity before processing your request.

If you have complaints about how we process your personal information, you may also have the right to lodge a complaint with your local data protection authority. For UK residents, this is the Information Commissioner’s Office (ICO) at ico.org.uk.

 

 

We may transfer, store, and process your personal information outside the country you live in. Where personal information is transferred out of the UK or European Economic Area, we rely on recognised transfer mechanisms such as the European Commission’s Standard Contractual Clauses, or any equivalent contracts issued by the relevant UK authority, unless the transfer is to a country determined to provide an adequate level of protection.

 

 

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the “Last updated” date, and provide notice as required by applicable law.

For the purpose of applicable data protection laws, Sanctum Noctis is the data controller of your personal information.

 

QUESTIONS OR REQUESTS

If you have questions about our privacy practices or wish to exercise any of your rights, please contact us.

alchemy@sanctumnoctis.co.uk

 

Last updated: May 2026   ·   sanctumnoctis.co.uk/policies/privacy-policy