This Privacy Policy explains how CULTUR (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit shop.cultur.fm, make a purchase, or interact with our services.
By using our website, you agree to the terms described in this policy.
If you have any questions, you can contact us at privacy@cultur.fm.

1. Information We Collect
We collect the following types of personal data when you use our website or place an order:

• Name
• Email address
• Billing and shipping address
• Phone number (if provided)
• Order details and purchase history
• Payment method information (we do not store full card numbers)
• IP address
• Device and browser details
• Cookies and tracking data
• Account login details (if you create an account)

We do not collect sensitive personal data.

2. How We Collect Your Information
We collect information in the following ways:

• When you place an order
• When you create an account
• When you sign up for marketing (e.g., Klaviyo email lists)
• When you interact with emails or ads
• Automatically through cookies and analytics tools
• From third-party marketing platforms where you have opted in

3. How We Use Your Information
We use your personal data for the following purposes:

• To process and deliver your orders
• To manage your account and customer profile
• To send order updates and communicate with you
• To provide customer support
• To operate and improve our website
• For fraud prevention and security
• To run analytics and understand website performance
• To send marketing emails (only with your consent)
• To run advertising and retargeting campaigns
• To comply with legal and tax obligations

4. Lawful Basis for Using Your Data
We only use your personal data when we have a legal basis to do so. This includes:

• Contract – to fulfil your order
• Legitimate interest – to protect our website, prevent fraud, and improve our services
• Consent – for marketing emails, analytics, and advertising cookies
• Legal obligation – storing order information for tax and accounting

5. Sharing Your Information
We share your personal data with trusted third parties who help us operate our business, including:

• Shopify (our e-commerce platform and data host)
• Payment providers: Shop Pay, Apple Pay, Google Pay
• Couriers and delivery partners
• Analytics tools: Google Analytics (GA4)
• Advertising platforms: Meta/Facebook, Google
• Email marketing tools: Klaviyo
• Fraud prevention and security systems 

We do not sell your personal data.
Some of these providers process data outside the UK. When this happens, we rely on standard contractual clauses or equivalent safeguards.

6. Retention Periods
We keep your personal data only for as long as necessary:

• Order and transactional data: 6 years (legal requirement)
• Marketing data: until you unsubscribe
• Analytics data: according to provider settings
• Account data: until you delete your account

After this, data may be deleted or anonymised.

7. Your Rights
You have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Request deletion of your data
• Object to marketing
• Withdraw consent at any time
• Restrict or limit certain processing
• Request a copy of your data in a portable format

To exercise any of these rights, email privacy@cultur.fm.

We aim to respond within the required legal timeframe.

We use cookies and similar technologies to operate the website, provide functionality, and improve your experience.

This includes:

For more information, please read our Cookie Policy.

We use Shopify’s secure infrastructure and industry-standard protections, including:

- SSL encryption

- Secure servers

- Limited access controls

- Fraud prevention systems

- Encrypted payment processing via third parties

No method of transmission is 100% secure, but we take all reasonable steps to protect your data.

Our website is not intended for anyone under the age of 16.

We do not knowingly collect personal data from children.

Some of our service providers may process your data outside the UK or the European Economic Area.

These transfers are protected by standard contractual clauses or equivalent safeguards.

We may update this Privacy Policy from time to time.

The “Last updated” date at the top of this page will always reflect the most recent version.

If you have questions, requests, or concerns about your personal data, email: