Privacy policy

Last updated: 25 February 2026

BookYork.com is operated by Book York Limited (“we”, “us”, “our”). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit, use, or make a purchase or booking through our website and related services (together, the “Services”).

Our store is powered by Shopify, which enables us to provide ecommerce functionality. Shopify also processes certain personal information to provide and improve its services. Where there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls in relation to personal information.

We are registered with the ICO (registration number ZB016103).

1) Who we are and how to contact us

Data Controller: Book York Limited

  • Email: info@bookyork.com
  • Phone: 07395 198812
  • Address: 44 Kirkgate, Ripon, England, HG4 1PB

You can also use our contact form: https://bookyork.com/pages/contact

2) Personal information we collect

Depending on how you use the Services, we may collect the following categories of personal information:

  • Contact details: name, email, phone number, billing address, shipping address
  • Order and transaction details: items purchased, order history, returns, cancellations, customer service interactions
  • Account details: login details and preferences (if you create an account)
  • Payment information: payment method details are processed by our payment providers and Shopify. We do not store full card details.
  • Service-related details: where you purchase advertising/post-slot services, we may process campaign details you provide (for example, content to post, brand/business info, website links, preferred dates and times, and communications about approvals)
  • Device and usage data: IP address, browser type, device identifiers, pages visited, time spent, referring links, and interactions with the site

3) Sources of personal information

  • Directly from you when you place an order, request a service, fill out forms, or contact us
  • Automatically via cookies and similar technologies when you use the website
  • From service providers such as Shopify, analytics providers, payment processors, and email platforms
  • From partners/third parties where you ask us to integrate or where permitted by law

4) How we use your personal information

We use personal information for the following purposes:

  • Provide and operate the Services (processing orders, delivering goods/digital products, providing customer support, managing accounts)
  • Deliver services you purchase (for example, scheduling and administering advertising/post-slot services, approvals, invoicing, and support)
  • Communicate with you about orders, service delivery, changes, and enquiries
  • Marketing (where permitted, including email updates and offers). You can opt out at any time.
  • Improve and secure the Services (site performance, analytics, fraud prevention, and account security)
  • Legal compliance (tax, accounting, and responding to lawful requests)

5) Legal bases for processing (UK GDPR)

We process personal information under one or more of the following legal bases:

  • Contract (to fulfil orders and deliver services you request)
  • Legitimate interests (to run and improve our business, prevent fraud, maintain security, and respond to enquiries)
  • Consent (for certain marketing and cookie/trackers where required)
  • Legal obligation (record keeping and compliance)

6) Cookies and similar technologies

We use cookies and similar technologies to operate the website, remember preferences, analyse performance, and support marketing where enabled. For more details, please see our Cookies Policy.

7) How we share personal information

We may share personal information with:

  • Shopify to provide ecommerce hosting and store functionality
  • Payment processors (for example, Shopify Payments, Stripe, PayPal) to process payments
  • Delivery and fulfilment providers to ship physical goods
  • IT, analytics and security providers to run, monitor, and protect the site
  • Marketing partners where you have consented or where lawful (for example, email service providers)
  • Legal and regulatory bodies where required by law or to protect rights and safety

8) Shopify relationship

The Services are hosted by Shopify. Information you submit may be transmitted to and processed by Shopify and its sub-processors, which may operate in countries outside the UK. Shopify may also use certain data to provide and improve Shopify’s services. You can learn more via Shopify’s consumer privacy resources.

9) International transfers

Some of our service providers may process personal information outside the UK. Where required, we rely on recognised safeguards for international transfers (for example, UK Addendum to Standard Contractual Clauses or other lawful mechanisms) unless the destination has an adequacy decision.

10) Data retention

We keep personal information only as long as necessary for the purposes described in this policy, including fulfilling orders/services, maintaining records, resolving disputes, and meeting legal obligations (for example, tax and accounting retention rules).

11) Your rights

Subject to applicable law, you may have rights including:

  • access to your personal information
  • correction of inaccurate information
  • deletion (in certain circumstances)
  • restriction or objection to processing (in certain circumstances)
  • data portability (in certain circumstances)
  • withdraw consent (where processing is based on consent)

To exercise rights, contact us using the details above. We may need to verify your identity.

12) Marketing preferences

You can opt out of marketing emails at any time by using the unsubscribe link in our emails or by contacting us at info@bookyork.com. You may still receive non-promotional messages about orders or service delivery.

13) Children’s privacy

Our Services are not intended for children. We do not knowingly collect personal information from children under the age of 18.

14) Security

We take reasonable technical and organisational measures to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

15) Third-party links

Our website may include links to third-party websites or platforms. We are not responsible for their content, privacy practices, or security. Please review their policies before providing personal information.

16) Complaints

If you have concerns about how we process personal information, contact us first so we can try to resolve it. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

17) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date and post the revised policy on this page.