Privacy Policy

1. Introduction

The Junk Shop (“we”, “us”, “our”) is dedicated to upholding your privacy rights in accordance with UK GDPR. This policy outlines how we collect, use, retain, and share personal data when you visit our website, contact us, make a booking, or visit our physical location at 9 Greenwich South Street, London, SE10 8NW.

2. Data Controller & Contact

The Junk Shop & Spreadeagle Antiques
9 Greenwich South Street, London, SE10 8NW
020 8305 1666 ·  tobiasthespreadeagle@gmail.com
Services include: antiques & vintage sales, a tearoom, and house-clearance offerings.

3. Personal Data We Collect

• Enquiry/booking forms: name, contact details, booking type (e.g., tea-room, house clearance), dates, and optional photos.

• Communications: details shared in conversations, phone calls, or emails.

• Website analytics: anonymised IPs, device/browser info, pages viewed, dwell time—collected via essential and performance cookies only, no advertising or profiling cookies.

4. How We Use Your Data

We use your data to:

• Manage and confirm bookings (tea-room, house clearance, dealer enquiries).

• Send confirmations, reminders, invoices, or follow-up communications.

• Deliver house-clearance services with care and respect for items and clients’ homes.

• Improve our site and customer experience via anonymised analytics.

• Fulfil legal, financial, and insurance obligations.

5. Legal Basis for Processing

• Contractual necessity: for booking and provision of services.

• Legitimate interests: to operate, optimise, and protect our business and website.

• Consent: for optional marketing or event invitations.

• Legal obligation: to retain records for VAT, insurance, and legal compliance.

6. Data Sharing

Your data is never sold or rented. We share it only with authorised:

• Service providers (hosting, email, analytics)—under GDPR-compliant agreements.

• Regulatory, insurance, or emergency services, if legally required.

7. Cookies & Web Tracking

We use:

• Essential cookies: for booking systems and site functionality.

• Performance cookies: anonymised analytics (e.g., Google Analytics) only.
  No advertising, profiling, or third-party tracking cookies are used.

8. Data Retention

• Booking/enquiry records: kept for up to 7 years for legal and financial purposes.

• Analytics session data: deleted after 24 months; aggregated metrics retained as needed.

9. Your Rights

Under UK GDPR, you can:

• Access, correct, delete, restrict, or export your data.

• Withdraw consent or object to processing.

• Lodge a complaint with the ICO.
  Please contact us via phone or email to exercise your rights.

10. Security

We employ SSL encryption, secure UK-based hosting, access controls, and staff training. While no system is infallible, we adhere to industry-standard protections.

11. International Transfers

All data is processed and retained within the UK—no overseas transfers occur.

12. Policy Updates

We may update this policy; the Effective Date indicates the current version. Continued use of our website implies acceptance of changes.