Privacy policy

Last updated: 23 September 2026

This policy explains what personal information Club Sourced collects, why we collect it, and what you can do about it. It covers everyone whose information we hold: people who browse clubsourced.com, customers, newsletter subscribers, and anyone who gets in touch with us.

Who we are

Club Sourced Ltd is a company registered in England and Wales (company number 16109608). Our registered office is Office Suite 3, Shrieves Walk, Stratford upon Avon, CV37 6GJ.

We are the controller of your personal information, which means we decide how it is used and are responsible for looking after it. For anything to do with your information, email hello@clubsourced.com.

What we collect

  • Contact and order details: your name, email address, phone number, delivery and billing addresses, what you have bought from us, and any returns.
  • Payment details: payments are handled by our payment providers, such as Shopify Payments and Klarna. We never see or store your full card details.
  • Account details: if you create an account on our website.
  • Newsletter details: your email address, when you signed up, and whether you open or click our emails.
  • Messages and sourcing requests: anything you send us, including details of pieces you have asked us to look out for.
  • Website usage: information about your device and browser, your approximate location based on your IP address, and the pages you visit. Some of this is collected through cookies and similar technologies (see "Cookies" below).

How we use it, and why we are allowed to

Data protection law requires us to have a lawful basis for each way we use your information. Ours are:

  • To take and deliver your order, handle returns and answer your questions. Basis: performing our contract with you.
  • To keep business, tax and accounting records. Basis: legal obligation.
  • To send you our newsletter and drop announcements. Basis: your consent, which you can withdraw at any time using the unsubscribe link in every email.
  • To show you our adverts on Instagram and Facebook, and to find new people who might like what we sell. Basis: our legitimate interests. See "Advertising on Instagram and Facebook" below.
  • To understand how our website and adverts perform, using analytics and marketing cookies. Basis: your consent, given through our cookie banner.
  • To keep our website secure and prevent fraud. Basis: our legitimate interests.

Advertising on Instagram and Facebook

If you have bought from us or joined our mailing list, we may share your email address and phone number with Meta, the company behind Instagram and Facebook, so that we can:

  • show you our adverts, for example when a new drop goes live;
  • avoid showing you adverts that are not relevant to you, such as asking you to join a list you are already on; and
  • ask Meta to find other people with similar interests to our customers (known as "lookalike audiences").

Your details are converted into a scrambled code, a process called hashing, before they are sent. Meta uses these codes only to match them to its own users and deletes any that do not match. The lists we upload contain contact details only, not what you bought or how you paid.

When Meta builds a lookalike audience from our list, we and Meta share responsibility for that use of your information. Meta explains how it handles data in its privacy policy.

We rely on legitimate interests for this. We sell one-of-a-kind pieces, and reaching the people who already know us, and people like them, is how those pieces find the right home before they go to someone else. We believe this is what you would reasonably expect from a shop you have bought from or subscribed to. We never include anyone who has unsubscribed or opted out.

How to opt out. You can stop us using your details for advertising at any time, and you do not need to give a reason:

We will remove you before the next time we update our advertising lists. You can also hide our adverts yourself from within Instagram or Facebook.

Cookies

Essential cookies make the website work, for example by keeping items in your basket and processing checkout. These are always on.

Analytics and marketing cookies, including the Meta pixel, help us understand how people use the website and whether our adverts work. If you are in the UK or Europe, we only use these if you accept them in our cookie banner. Our website also respects the Global Privacy Control signal if your browser sends one.

You can change your choice at any time using the "Cookie preferences" link at the bottom of every page.

Who we share information with

We only share what each provider needs to do its job:

  • Shopify, which runs our website and checkout;
  • payment providers, to take payment;
  • couriers, delivery partners and international shippers, to get your order to you;
  • our email and IT providers;
  • our accountants and bookkeeping software;
  • Meta, for advertising as described above; and
  • authorities such as HM Revenue & Customs, where the law requires it.

Shopify also uses some information about your activity on our store to provide its own services. You can see and control how Shopify uses your information at privacy.shopify.com.

We do not sell your personal information for money.

If you subscribe to Clubstack, our newsletter on Substack, Substack's own privacy policy applies to that subscription.

If you are in the United States

Some US state laws treat sharing information for targeted advertising as a "sale" or "sharing" of personal information. You can opt out using our Your privacy choices page, and we honour the Global Privacy Control signal.

Transfers outside the UK

Some of our providers, including Shopify and Meta, process information outside the UK, including in the United States and Canada. Where they do, the transfer is protected by UK adequacy regulations or approved contract terms, such as the UK International Data Transfer Addendum.

How long we keep it

  • Order and accounting records: six years after the end of the financial year they relate to, as required for tax purposes.
  • Newsletter details: until you unsubscribe.
  • Advertising lists: rebuilt each time we update them; you are removed as soon as you opt out.
  • Messages and sourcing requests: up to two years after we last hear from you.

Your rights

You have the right to:

  • ask for a copy of the information we hold about you;
  • ask us to correct it or delete it;
  • ask us to limit how we use it, or to send it to you in a portable format;
  • object to us using it on the basis of our legitimate interests, and in particular to stop any use for marketing or advertising, which we will always honour; and
  • withdraw your consent at any time where we rely on it.

Email hello@clubsourced.com to use any of these rights. We will reply within one month.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Children

Our website is not aimed at children, and we do not knowingly collect information from anyone under 16.

Changes to this policy

We will update this page if anything changes. If a change affects how we use your information, we will email customers and subscribers before it takes effect.