Anvil Arms
Glenswinton, Parton, Castle Douglas, Scotland DG7 3NL, UK
Company No: 1673693 (England)
Email: [email protected]
Last updated: June 2026
What we collect
When you use our website or place an order, we collect:
- Contact details: name, email, phone, billing/delivery address
- Order information: products purchased, payment confirmation (we do not store card details)
- Account data: password (encrypted), order history (if you create an account)
- Technical data: IP address, browser type, device info (via essential cookies only)
- Communications: emails or messages you send us
Why we need it
| Purpose | Lawful basis |
|---|---|
| Process and deliver your order | Contract |
| Confirm payment | Legitimate interest (fraud prevention) |
| Comply with tax/accounting laws | Legal obligation |
| Send order updates | Contract |
| Website functionality (cookies) | Legitimate interest (essential functions) |
How long we keep it
- Order records: 6 years (HMRC requirement)
- Account data: Until you delete your account or 2 years of inactivity
- Technical logs: 30 days
Who we share with
- Shipping providers: Royal Mail/couriers — to deliver orders
- Accountants/HMRC: — for tax compliance
Our website and payment system (BTCPay Server) are hosted on our own servers. Your data is not shared with third-party hosting providers.
We do not sell your data. We do not use third-party analytics or tracking services.
Cookies
We use only essential cookies required for the shop to function (shopping cart, checkout). We do not use analytics or tracking cookies.
See our Cookie Policy for details.
Your rights
Under GDPR you have the right to:
- Access: Request a copy of your data
- Rectification: Correct inaccurate information
- Erasure: Request deletion (subject to legal retention)
- Restriction: Limit how we use your data
- Portability: Receive data in a portable format
- Object: Object to processing based on legitimate interests
To exercise these rights, email: [email protected]
Security
We use industry-standard measures to protect your data. Our website and BTCPay Server payment system are self-hosted on our own infrastructure. We never see or store your Bitcoin wallet credentials.
Changes to this policy
We may update this policy. Check this page for the latest version.
Contact
Questions about privacy? Email: [email protected]