Privacy Policy

1. Who we are

This website, digitsale.uk, is operated by DIGITSALE LTD, a company registered in England and Wales under company number 17353550, with its registered office at 128 City Road, London, United Kingdom, EC1V 2NX. We sell acoustic musical instruments and accessories for beginners to private customers in the United Kingdom.

DIGITSALE LTD is the data controller for the personal data described in this policy. You can reach us at [email protected] or on +44 7704 118362.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data we collect

• Order and delivery details: your name, email address, telephone number, delivery address, town or city, postcode and any note you add to the order. These are entered when you place an order and are needed to fulfil and deliver it.
• Correspondence: the content of emails, calls or messages you send us, including questions about instrument sizing, setup, delivery or returns.
• Newsletter data: your email address, if you choose to sign up for stock and product news.
• Technical data: IP address, browser type, device type and pages visited, collected by our hosting provider in server logs for security and reliability.

Payment data. Card and other payment details are collected and processed by our payment provider. We do not receive or store full card numbers, CVV codes or bank credentials; we receive only the confirmation of payment and a masked reference.

Instruments for children. When you buy a child-sized instrument we do not ask for the child's name, age or date of birth. Sizing is chosen from general height and age guidance published on the site, and no personal data about the child is collected.

We do not collect special category data such as health, biometric, racial or ethnic origin, political opinions, religious beliefs or data about sex life or sexual orientation.

3. Purposes and legal bases

• Performance of a contract: processing and fulfilling your order, arranging delivery, handling cancellations, returns and refunds, and contacting you about the details of your order.
• Consent: sending the newsletter, and setting any non-essential cookies if we introduce them.
• Legitimate interests: answering enquiries, keeping the website secure and available, preventing fraud, and improving the range and the sizing guidance we publish. We balance these interests against your rights and freedoms.
• Legal obligation: keeping accounting and tax records, and complying with consumer law, including the Consumer Contracts Regulations 2013.

4. Sharing with third parties

We share personal data only with the categories of recipient needed to run the shop:

• Courier and delivery partners — your name, delivery address, postcode and telephone number, so that the instrument can be delivered and, for large or fragile items, the delivery slot arranged.
• Payment providers — they process your payment under their own privacy terms and as controllers of the payment data.
• Website hosting and email providers — they store the site and our correspondence on our behalf as processors.
• Accountants and professional advisers — where needed for bookkeeping, tax returns and legal advice.
• Public authorities — where we are legally required to disclose information.

We do not sell personal data and we do not share it for third-party marketing.

5. International transfers

We aim to keep personal data within the United Kingdom and the European Economic Area. If a provider stores or accesses data outside the UK, we rely on UK adequacy regulations or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional safeguards required. You may ask us for details of the safeguards used.

6. Retention

• Order, invoice and payment records: six years after the end of the financial year in which the order was placed, to meet tax and accounting obligations.
• Delivery and customer service correspondence: up to two years after the enquiry is closed.
• Newsletter data: until you unsubscribe or ask us to delete it.
• Server logs: up to twelve months.

When a retention period ends, data is deleted or irreversibly anonymised.

7. Security

The site is served over an encrypted connection. Access to order records is limited to the people who need it to prepare, dispatch and support your order, and is protected by individual accounts and strong authentication. We review our providers and keep systems up to date. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take the measures appropriate to the risk and will notify you and the ICO of a qualifying personal data breach where the law requires it.

8. Cookies

This website uses only what is strictly necessary to work. The basket exists in your browser's memory while the page is open and is cleared as soon as you close or reload the page; we do not store it in cookies, local storage or session storage. We do not use advertising, profiling or third-party analytics cookies. Fonts are loaded from Google Fonts, which receives your IP address in order to serve the font files. If we introduce non-essential cookies in future, we will ask for your consent first and offer a way to withdraw it.

9. Your rights

Under the UK GDPR you have the right to:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — ask us to delete data we no longer have a lawful reason to keep.
• Restriction — ask us to limit how we use your data while a query is resolved.
• Portability — receive data you gave us in a structured, commonly used, machine-readable format, or have it sent to another controller.
• Objection — object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent — where processing is based on consent.

To exercise a right, email [email protected]. We respond within one month and may ask for information to confirm your identity. Exercising your rights is free of charge unless a request is manifestly unfounded or excessive.

10. Withdrawing consent

Where we rely on consent, you can withdraw it at any time by emailing us or by using the unsubscribe link in any newsletter. Withdrawal does not affect the lawfulness of processing carried out before it, and does not affect data we must keep for an order you have already placed.

11. Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, by telephone on 0303 123 1113 or at ico.org.uk.

12. Age restriction

Our shop is intended for adults. Orders may be placed only by people aged 18 or over, and we do not knowingly collect personal data from children. Instruments intended for children are bought by a parent or guardian, whose details we process as the customer. If you believe a child has given us personal data, contact us and we will delete it.

13. Changes to this policy

We may update this policy to reflect changes in our services or in the law. The current version is always published on this page with the date it was last updated. Where a change materially affects you, we will tell you by email if we hold your address.

14. Contact us

DIGITSALE LTD, 128 City Road, London, United Kingdom, EC1V 2NX. Company number 17353550.
Email: [email protected]
Telephone: +44 7704 118362