Privacy Policy

Last updated: 2 January 2026

MapShop (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data responsibly and transparently. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit or make a purchase from https://map-shop.co.uk.

We comply with the latest UK Data (Use and Access) Act 2025 (DUAA), UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable UK privacy laws.

1. Who We Are

Data Controller:
MapShop
United Kingdom

If you have any questions about this policy or how we use your data, you can contact us via the website contact form or by email using the address published on the site.

2. What Personal Data We Collect

We may collect and process the following information:

a) Information You Provide

  • Name
  • Billing and delivery address
  • Email address
  • Telephone number
  • Payment details (processed securely by third-party payment providers, not stored by us)
  • Account login details (if you create an account)
  • Communications with us (emails, contact forms)

b) Information Collected Automatically

  • IP address
  • Browser type and version
  • Device information
  • Pages visited and time spent on the site
  • Referring website

This data is collected using cookies and similar technologies (see Section 9).

3. How We Use Your Data

We use your personal data to:

  • Process and fulfil orders
  • Deliver products and manage returns or enquiries
  • Communicate with you about your order
  • Provide customer support
  • Improve our website, products, and services
  • Send marketing communications where you have consented
  • Meet legal, accounting, and tax obligations
  • Prevent fraud and ensure site security

4. Lawful Bases for Processing

We process your personal data under the following lawful bases:

  • Contract – to fulfil your order and provide purchased products
  • Legal obligation – to comply with UK law (e.g. tax records)
  • Legitimate interests – improving services, preventing fraud, site analytics
  • Consent – for marketing communications and non-essential cookies

You may withdraw consent at any time.

5. Sharing Your Data

We only share your personal data where necessary, including with:

  • Payment processors (e.g. card payment provider PayPal)
  • Delivery and fulfilment partners
  • Website hosting and IT service providers
  • Analytics and marketing platforms (e.g. Google Analytics, email services)

All third parties are required to handle your data securely and in accordance with UK GDPR.

We do not sell your personal data.

6. International Data Transfers

Some service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as UK-approved contractual clauses, to protect your data.

7. Data Retention

We retain personal data only for as long as necessary:

  • Order and transaction data: up to 7 years for tax and legal purposes
  • Customer accounts: until you request deletion
  • Marketing data: until you unsubscribe or withdraw consent

8. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please contact us.

9. Cookies

We use cookies to:

  • Enable core website functionality
  • Analyse website traffic and performance
  • Improve user experience

You can manage or disable cookies via your browser settings. For more information, please see our Cookie Policy (or request one if not yet published).

10. Security

We take appropriate technical and organisational measures to protect your personal data, including secure hosting, encryption where appropriate, and restricted access to personal information.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices or content of those websites.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with the updated date.