1. Who we are
This Privacy Policy applies to personal data collected by Colour Roll Ltd, a company registered in England & Wales, when you use our website or place an order with us.
- Registered office: 6 Wendover Place, Staines-Upon-Thames, TW18 3DG
- Company number: 17078267
- Contact: team@colourroll.com
- Website: www.colourroll.com
For the purposes of UK data protection law, Colour Roll Ltd is the "controller" of the personal data we hold about you.
2. The personal data we collect
2.1 Information you provide
- Order details — your name, email address, phone number, billing and shipping address, and the items you've purchased.
- Payment details — payment information is handled by our payment provider; we do not store full card numbers on our systems.
- Contact form messages — your name, email, subject, message and (if relevant) order number.
2.2 Information collected automatically
- IP address, device type, browser type and operating system.
- Pages visited, time spent on pages, and how you navigated the Site.
- Cookies and similar technologies — see Section 5.
2.3 Information from third parties
We may receive information from payment processors, fulfilment partners or analytics providers acting on our behalf.
3. How we use your personal data
We use your personal data to:
- Process, fulfil and deliver your orders.
- Provide customer support and respond to your enquiries.
- Send marketing communications where you have chosen to receive them.
- Detect, prevent and address fraud, abuse and security incidents.
- Improve our website, products and services through aggregated analytics.
- Comply with our legal and regulatory obligations.
3.1 Marketing communications
Where you choose to subscribe to our newsletter or marketing updates, we will use your email address to send information about Colour Roll products, special offers, product launches and company news.
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link included in our emails or by contacting us directly.
4. Legal basis for processing
Under UK GDPR we rely on one or more of the following legal bases to process your personal data:
- Contract — to fulfil your order and the contract of sale.
- Legitimate interests — to improve our website, prevent fraud and run our business efficiently.
- Legal obligation — to comply with applicable laws, including tax and accounting record-keeping.
- Consent — where required, including for marketing communications and non-essential cookies. You can withdraw your consent at any time.
5. Cookies & tracking
We use cookies and similar technologies to operate the Site, remember your preferences and understand how the Site is used. Cookie categories we may use:
- Strictly necessary — required for the Site to function (e.g. cart, checkout). Cannot be disabled.
- Functional — remember preferences such as your selected delivery option.
- Analytics — help us understand how visitors use the Site so we can improve it.
- Marketing — used only with your consent to measure marketing performance.
You can manage cookies through your browser settings. Where applicable, you can also adjust your preferences via our cookie preferences panel on first visit.
6. Sharing your data
We share your personal data only with trusted parties who help us run our business:
- Payment processors — to take payment securely.
- Shipping & fulfilment partners — to dispatch and deliver your order.
- Email & analytics providers — for transactional emails and aggregated website analytics.
- Legal authorities — where required by law or to protect our rights.
We do not sell your personal data to third parties.
7. International transfers
Where your personal data is transferred outside the UK or European Economic Area, we ensure appropriate safeguards are in place — including UK International Data Transfer Agreements and Standard Contractual Clauses where required.
8. How long we keep your data
We keep your personal data only for as long as we need it for the purposes set out in this policy, or to comply with our legal and accounting obligations. Order records are typically retained for at least six years to meet UK tax and accounting requirements.
9. Your rights under UK GDPR
You have the following rights in relation to your personal data:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your data, subject to legal exceptions.
- Restriction — ask us to limit how we use your data.
- Objection — object to processing based on legitimate interests.
- Portability — request your data in a portable, machine-readable format.
- Withdraw consent — withdraw any consent you've given, at any time.
- Complain — lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).
To exercise any of these rights, contact us at team@colourroll.com.
10. Children's privacy
Colour Roll products are designed for children, but our website is intended for use by adults purchasing products for children. We do not knowingly collect personal data directly from children. If you believe we have collected personal data from a child, please contact us and we will delete it promptly.
11. Data security
We take appropriate technical and organisational measures to protect your personal data — including encryption in transit, restricted access, and reputable third-party service providers. No system is 100% secure, but we work to maintain a high standard.
12. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the bottom of this page shows when changes were made. Significant changes will be communicated through the Site or, where appropriate, by email.
13. Contact us
If you have any questions about this Privacy Policy or how we handle your personal data:
- Email: team@colourroll.com
-
Alternatively, you can contact us using the contact form on our website. contact form.
-
Website: www.colourroll.com
Last Updated: 15 June 2026
