top of page

Privacy Policy

Last Updated: August 2026

At Small Scale Models (smallscalemodels.co.uk), we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, make a purchase, or communicate with us.

If you have any questions regarding this policy or how your data is handled, please contact us at andy.ward@smallscalemodels.co.uk

1. Who We Are (Data Controller)

Small Scale Models is the data controller responsible for your personal information collected through this website.

2. Information We Collect About You

We collect and process personal data to fulfill orders, improve our site, and provide customer support. The information we collect includes:

  • Identity Data: Your full name and title.

  • Contact Data: Your billing address, shipping address, email address, and telephone number.

  • Transaction Data: Details about products you have purchased, order history, basket contents, and payment status (note: full credit card numbers are processed securely by payment providers and are never stored on our servers).

  • Technical Data: IP address, browser type, operating system, time zone settings, and website navigation patterns via cookies.

  • Marketing & Communications Data: Your preferences in receiving updates or newsletters (where explicit consent has been provided).

3. How We Use Your Personal Data & Legal Basis

Under UK GDPR, we must have a legal basis to process your personal data. We use your data for the following purposes:

4. Third-Party Data Sharing & Service Providers

We never sell, rent, or trade your personal data to third parties for marketing purposes. To fulfill your orders and operate our store, we share necessary data with trusted third-party service providers:

  1. Website Platform: Wix.com, which hosts our store database, shopping cart, and secure checkout environment.

  2. Payment Processors: Wix Payments, PayPal, Stripe, Apple Pay (as applicable) to securely process your transactions.

  3. Delivery Couriers: Royal Mail, Evri, DHL, UPS, or other shipping services to deliver your packages to your nominated address.

  4. Analytics & Search Engines: Aggregate, non-identifying technical data (e.g., Google Analytics) to optimize site performance.

All third-party partners are required to respect the security of your personal data and treat it in accordance with UK data protection laws.

5. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, keep track of items in your shopping basket, and analyze site traffic.

  • Essential Cookies: Necessary for the website to function, allowing you to log in, add items to your cart, and check out securely.

  • Performance & Analytics Cookies: Help us understand how visitors interact with the store so we can improve site speed and navigation.

You can manage or disable non-essential cookies at any time through your browser settings or our site cookie consent banner.

6. Data Security & Storage

We implement appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed, or altered without authorization.

  • All transactions are encrypted via Secure Socket Layer (SSL/TLS) technology.

  • Our website host, Wix.com, operates Level 1 PCI-DSS compliant infrastructure to protect customer payment data.

  • Access to your personal data is restricted strictly to authorized personnel who require it for operational purposes.

7. How Long We Keep Your Data

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (such as retaining sales receipts for tax purposes under UK law, typically up to 6 years).

8. Your Legal Rights Under UK GDPR

Under UK data protection laws, you have the following rights regarding your personal information:

  • Right of Access: You have the right to request a copy of the personal data we hold about you.

  • Right to Rectification: You can request that we correct any inaccurate or incomplete information.

  • Right to Erasure ("Right to be Forgotten"): You can ask us to delete your personal data where there is no good reason for us continuing to process it.

  • Right to Restrict Processing: You have the right to ask us to suspend or restrict how we use your data.

  • Right to Data Portability: You can request the transfer of your personal data to you or a third party.

  • Right to Withdraw Consent: Where we rely on consent to process your data (such as marketing emails), you may withdraw it at any time.

To exercise any of these rights, please email us at andy.ward@smallscalemodels.co.uk. We aim to respond to all legitimate requests within 30 days.

9. International Data Transfers

Where data is processed outside the UK (for example, by server infrastructure provided by Wix or global payment gateways), we ensure a similar degree of protection is afforded by verifying that appropriate safeguards, standard contractual clauses, or adequacy decisions are in place.

10. External Links

Our site may contain links to external third-party websites (e.g., courier tracking links or social media pages). We are not responsible for the privacy policies or practices of third-party sites and encourage you to read their privacy notices upon visiting.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in legal requirements or operational practices. Any updates will be published on this page with an updated "Last Updated" date.

12. Contact Us & Complaints

If you have any questions or concerns about this policy or our data practices, please contact us first so we can resolve the issue:

Small Scale Models Privacy Policy information
bottom of page