Privacy Policy

This policy explains what personal information we collect when you use TheatreMemorabilia.co.uk, why we collect it, who we share it with, how long we keep it and what your rights are. We have tried to keep it short and in plain English.

Last updated: October 2026

TheatreMemorabilia.co.uk is run by S-W-M-H, a UK business selling theatre programmes and theatre memorabilia. S-W-M-H is the “data controller” for the personal information described in this policy.

Postal address: S–W–M–H, PO BOX 4-0-3-7, Chester, C-H-1 9-X-Q, UK
For any privacy question or request, please use our contact page.

• When you place an order: your name, postal address, email address and phone number. We use these to process, post and support your order, and to send you order and delivery emails. Legal basis: to perform our contract with you.
• When you create an account: your username and email address, plus any addresses you save. This lets you log in, see your past orders and check out faster. Legal basis: contract.
• When you contact us: your name, email address and your message, so we can reply. Legal basis: our legitimate interest in answering your enquiry.
• Unfinished orders: if you enter your email address at checkout but do not complete your order, we may save your basket and send you a reminder email. If you complete your order, the reminder is cancelled. Legal basis: our legitimate interest in helping you complete a purchase you started.
• Visit statistics: we keep simple statistics about pages visited, the type of browser and device, the website you came from and your approximate country. Your IP address is scrambled (“hashed”) before it is stored, so we cannot identify you from these statistics. Legal basis: our legitimate interest in running and improving the website.
• Security: to protect the site and your account from hacking, spam and fraud, our security software records IP addresses and login attempts. Legal basis: our legitimate interest in keeping the site and our customers safe.

We do not see or store your card details. We do not sell, rent or trade your personal information.

Payments are handled securely by our payment providers. When you pay, they collect your payment details directly and use them under their own privacy policies:

• PayPal – for PayPal, credit and debit card and Google Pay payments (PayPal privacy statement)
• Amazon Pay – if you choose to pay with your Amazon account (Amazon Pay privacy notice)

If you use Google Pay, Google will also process your payment under its own privacy policy.

We only share your information with companies that help us run the shop, and only what they need:

• Payment providers – PayPal and Amazon Pay, to take your payment.
• Royal Mail and other postal services – your name and address, to deliver your order.
• Our web hosting and email providers – they store our website and send our emails.
• Cloudflare – our login, registration, checkout and contact forms use Cloudflare Turnstile to block spam and automated attacks.
• Google – our login pop-up uses Google reCAPTCHA, and our website fonts are loaded from Google Fonts. Both send your IP address and browser information to Google.
• Our security provider, Wordfence – IP addresses of suspicious visitors are checked against Wordfence’s threat list.

We may also share information if the law requires it, for example with HMRC or the police.

Some of these companies, such as PayPal, Amazon, Cloudflare and Google, may process information outside the UK. Where they do, they use legal safeguards approved under UK data protection law.

Cookies are small files stored by your browser. We use two kinds:

• Essential cookies – needed for the shop to work, such as your basket, logging in, checkout, security and remembering your cookie choice. These are always on.
• Visitor tracking cookies (optional) – these record how you found our site (for example from a search engine or a link) so we can see which pages and links lead to orders. They are only set if you click Accept all on our cookie banner.

When you first visit, we ask which cookies you are happy with. You can change your mind at any time: change my cookie settings. You can also block or delete cookies in your browser settings, but some parts of the shop may then stop working.

Our payment providers (PayPal, Amazon Pay and Google Pay) and our spam protection (Cloudflare and Google) may set their own cookies to process payments and prevent fraud.

• Orders and invoices: six years, because UK tax law requires us to keep sales records.
• Your account: until you ask us to close it.
• Messages you send us: for as long as needed to deal with your enquiry.
• Unfinished-order reminders, visit statistics and security logs: only for as long as they are needed for those purposes.

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong – you can also update your details yourself in My Account;
• ask us to delete your information (we may need to keep order records for tax purposes);
• object to, or ask us to limit, how we use your information;
• ask for your information in a format you can take elsewhere;
• withdraw your consent at any time, for example by changing your cookie settings.

To make a request, please contact us. We will reply within one month. There is no charge.

If you are unhappy with how we have used your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Our whole website is encrypted with SSL (the padlock in your browser), our site is protected by security software, and access to customer information is limited to the people who need it to run the shop. No website can be 100% secure, but we take sensible steps to protect your information.

Our site links to other websites. They have their own privacy policies, and we are not responsible for how they use your information.

You must be 18 or over to buy from TheatreMemorabilia.co.uk, and we do not knowingly collect information from children.

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.