Privacy policy

First & Only Retail

Last updated: 19 January 2026

First & Only Retail ("we", "us", "our") operates this store and website, including all related information, content, features, tools, products and services (the "Services"). Our store is hosted on Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, disclose and otherwise process your personal information when you visit, use, or make a purchase from our Services, or otherwise communicate with us.

If there is any conflict between our Terms & Conditions and this Privacy Policy, this Privacy Policy will control only to the extent of matters relating to personal information.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood this Privacy Policy.

1) Personal information we collect

When we use the term "personal information" we mean information that identifies you, relates to you, describes you, is reasonably capable of being associated with you, or could reasonably be linked to you. It does not include information that has been anonymised or de-identified.

Depending on how you interact with the Services, we may collect the following categories:

A. Contact and order details

  • Name

  • Email address

  • Telephone number

  • Billing address

  • Shipping address

B. Account information (if you create an account)

  • Account login details (e.g., email and password)

  • Preferences and settings

C. Payment and transaction information

  • Payment method type and payment confirmation

  • Transaction details (items purchased/returned/cancelled)

Note: Payment card details are processed by Shopify and/or our payment providers. We do not receive or store full payment card numbers.

D. Customer support and communications

  • Messages you send to us (e.g., emails, contact form enquiries)

E. Device and usage information

  • IP address

  • Browser type and device identifiers

  • Pages viewed, interactions, and approximate location derived from IP

F. Reviews and user-generated content (if you choose to post it)

  • Content you submit (e.g., product reviews)

2) Sources of personal information

We collect personal information from:

  • You directly (e.g., when you place an order, create an account, contact support)

  • Automatically (e.g., cookies and similar technologies when you browse)

  • Service providers (e.g., Shopify, payment providers, shipping and fulfilment partners)

  • Marketing/analytics partners (where enabled, e.g., advertising platforms or analytics tools)

3) How we use personal information

We use personal information to:

A. Provide and operate the Services

  • Process orders, payments, shipping, returns and exchanges

  • Communicate about your order and account

  • Provide customer support

B. Improve and personalise the Services

  • Remember preferences

  • Understand how customers use the site

  • Recommend products and improve the shopping experience

C. Marketing and advertising (where permitted)

  • Send marketing communications (where you have opted in or where permitted by law)

  • Show you relevant advertising or measure the effectiveness of advertising

D. Security and fraud prevention

  • Protect accounts, transactions, and our business

  • Detect and investigate suspicious activity

E. Legal and compliance

  • Comply with legal obligations

  • Enforce our terms and policies

  • Respond to lawful requests by authorities

4) Legal bases for processing (UK/EU)

If you are in the UK or EEA, we rely on the following legal bases (as applicable) under UK GDPR/EU GDPR:

  • Contract: to process orders and provide the Services

  • Legitimate interests: to operate, improve and secure our business (balanced against your rights)

  • Consent: for certain marketing and cookies (where required)

  • Legal obligation: where we must keep records or comply with law

5) How we disclose personal information

We may share personal information with:

  • Shopify (our ecommerce platform host)

  • Payment providers (to process payments)

  • Delivery and fulfilment partners (to ship your order)

  • IT, analytics, and customer support providers (to operate the store)

  • Marketing and advertising partners (where enabled and permitted)

  • Professional advisers (e.g., accountants, insurers, legal advisers) where necessary

  • Authorities where required by law, or to protect rights, safety and security

We do not sell your personal information in the ordinary sense of “selling data for money”. If you are in certain jurisdictions (e.g., some US states), online advertising sharing may be treated as “sale” or “sharing” under local law. Where applicable, you can opt out using the options described in Section 10.

6) Relationship with Shopify

Our store is hosted by Shopify. Shopify processes personal information about your access to and use of the Services to provide and improve Shopify’s services.

Information you submit to the Services will be shared with Shopify and may be processed in countries other than where you live.

Shopify may also provide optional “enhanced features” (such as analytics or personalisation) that use data from your interactions with our store and other stores on Shopify. Where these features are enabled, Shopify may act as an independent controller for certain processing and can handle certain privacy requests directly.

You can learn more via Shopify’s consumer privacy information and privacy portal.

7) Cookies and similar technologies

We use cookies and similar technologies to:

  • Keep the site working

  • Remember preferences

  • Understand site usage

  • Support marketing and advertising (where enabled)

You can manage cookies through your browser settings. Where required by law, we will request your consent for non-essential cookies.

8) Third-party websites

Our Services may link to third-party sites. We are not responsible for the privacy practices of those third parties. Please review their policies before providing personal information.

9) Children’s data

Our Services are not intended for children, and we do not knowingly collect personal information from children under the age of 16. If you believe a child has provided personal information to us, please contact us and we will take appropriate steps.

10) Your rights and choices

Depending on where you live, you may have rights to:

  • Access the personal information we hold about you

  • Correct inaccurate information

  • Delete information (subject to legal exceptions)

  • Receive a copy of your information (portability)

  • Object to, or restrict, certain processing

  • Withdraw consent at any time (where we rely on consent)

Marketing preferences: You can opt out of marketing emails at any time using the unsubscribe link in our emails. You may still receive non-marketing messages about your orders or account.

To exercise your rights, contact us using the details in Section 13.

11) International transfers

We may transfer, store and process personal information outside the UK/EEA. When we do, we rely on recognised safeguards such as adequacy decisions and/or standard contractual clauses, as applicable.

12) Security and retention

No security measure is perfect, but we use reasonable safeguards designed to protect your personal information.

We keep personal information only as long as needed for the purposes described in this policy, including to:

  • Provide the Services

  • Maintain business and tax records

  • Resolve disputes

  • Enforce our agreements

13) Complaints and contact

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

Email: info@firstandonlyretail.co.uk
Address: Swinton Hall Industrial Estate, Unit 5, Manchester, M27 4AJ, United Kingdom

If you are in the UK, you also have the right to complain to the Information Commissioner’s Office (ICO).

14) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date above.