summer collection - shop now Free DELIVERY OVER £125
  • Technical & Legal

Privacy Policy

Celtic & Co. is operated by Celtic Sheepskin and Co. Ltd (company number 08860746). A member of the Refined Brands Group (company number 13175575).

We are committed to protecting your privacy. It is important that you understand how we look after your personal data and how we make sure that we meet our legal obligations to you under the data protection rules and regulations in the relevant territory (including associated guidance) (the "Data Protection Laws"). This privacy policy outlines how Celtic & Co. will collect, use, store and share your personal data.

Celtic & Co., of Units 2 & 2a Indian Queens Industrial Estate, Indian Queens, St. Columb, England, TR9 6TF (referred to as “Celtic & Co.”, “we”, “us” and/or “our” in this privacy notice) is the controller and responsible for your personal data collected through the www.celticandco.com website (the “website”). Details of our Data Protection Officer responsible for overseeing questions in relation to this privacy notice, and our details are set out in the “How to Contact Us” section at the end of this notice.

GROUP OVERVIEW

INFORMATION COLLECTION, PURPOSE AND SHARING

DATA WE COLLECT

DATA WE RECEIVE

LEGITIMATE INTERESTS AND CONSENTS

SHARING YOUR DATA

USING YOUR DATA OUTSIDE THE EEA AND UK

HOW LONG DO WE KEEP YOUR DATA?

DATA PROTECTION

YOUR RIGHTS

CHANGING YOUR PREFERENCES

COOKIES

CONTACT US

GROUP OVERVIEW

Refined Brands Limited is a collection of companies championing sustainable, ethical fashion. As a group we aim to increase the use of high quality natural and recycled fibres to minimise the impact fashion has on our planet. Data may be shared between members of the group as outlined in this privacy policy.

The controller of your information for the purposes of the Data Protection Laws will be Celtic & Co.

Call us on +44 (0)333 400 0044
(Mon-Fri: 9am-5pm)
Email us at: [email protected]

Write to us at:
The Data Protection Officer,

Celtic & Co.,
Units 2 & 2A Lodge Way,
Indian Queens Industrial Estate,
Saint Columb,
Cornwall,
TR9 6TF
United Kingdom

Our brands each have their own websites. This central policy provides information to you about the basis on which Celtic & Co. as a whole collects, uses, stores and shares your information. We will use your personal data fairly, lawfully and in a transparent manner and in accordance with the Data Protection Laws.

INFORMATION COLLECTION, PURPOSE AND SHARING

  • We collect information when you register online or update your account, log-in, place an order, and when communicating online with our customer service representatives. This information may include your name, email address, billing / shipping addresses and phone number. Data is used to verify the payment, delivery, returns or refunds assigned to your orders. If you create an online account, you also have the option of providing your product preferences and demographic information.
  • The contact information we collect is used for promotional and marketing activity, to include customer opt-in to receive our emails, request a catalogue, participate in a sweepstake, special offers, contest, promotion or survey, or join our social networking sites. This will include the use of a customer's name, home address and/or email address.
  • Data retrieved can be used to improve products and services provided by our website, marketing and customer service teams and tailor this to you and your preferences.
  • With the purpose of ensuring a smooth and efficient management of any registered account(s) a customer may hold with Celtic & Co., our customer service team are able to access specific information provided by a customer to include name, email address, billing / shipping addresses and phone number to aid their interaction. 
  • If you have entered a competition with one of our friends or partners, and have said that you wouldn’t mind hearing from us, they may have sent us your details so that we can get in touch with you. We work with third party data co-operative partners who provide us with personal data for individuals who may be interested in our products.
  • In some cases information is retained and shared with authorities for crime and fraud prevention, detection and related purposes.
  • There may be times where we have a legal right or duty to disclose information (for example in relation to an investigation by a public authority or in a legal dispute).

DATA WE COLLECT

  • In order to process your orders, send you email confirmations of your order, send you parcels, verify your payment details, or process returns and refunds, we may use your name, address, email address and payment card information. If you submit your mobile phone number we will use this to provide courier updates. (contractual performance).
  • We like to keep you up to date with companies in Celtic & Co. so from time to time we’ll send you catalogues, special offers and promotions by post, email or SMS messages (legitimate interest/consent) using your name, address, email address, and/or mobile number.
  • We also use your name, address, email address and payment card information for fraud prevention purposes. (legitimate interest).
  • We use your name, address, email address and telephone number in order to respond to your queries (contractual performance; legitimate interest). We may also keep a record of these to inform any future communication with us and maintain our high service levels.
  • We may use your email address, postcode and date of birth to send you survey and feedback requests to help improve our services. (legitimate interest).
  • Sometimes, we may need to use your name, email address and/or address to send you communications that are required by law or necessary to inform you about our changes to the services we provide you (legal obligation; contractual performance).
  • In order to improve our products and services, we may use your personal data to invite you to participate in market research (legitimate interest).
  • Celtic & Co. may share your information between relevant companies within the group in order to introduce you to relevant products and services (legitimate interest).
  • You may elect to receive text messages from us. When you sign up to receive text messages, we will send you information about promotional offers and more. These messages may use information automatically collected based on your actions while on our sites and may prompt messaging such as cart abandon messages. To the extent you voluntarily opt to have Text notifications sent directly to your mobile phone, we receive and store the information you provide, including your telephone number or when you read a text message. You may opt out of receiving text messages at any time by texting “STOP” to our text messages.
  • If you’ve signed up to receive text messages from us either via our website or by sending a text message indicating your consent, you are providing your prior express written consent to receive recurring marketing or promotional Text messages from us. We will send you information about promotional offers and more. These messages may use information automatically collected based on your actions while on our sites and may prompt messaging such as cart abandon messages. To the extent you voluntarily opt to have Text notifications sent directly to your mobile phone, we receive and store the information you provide, including your telephone number or when you read a text message (consent).
  • We like to know your date of birth so we can help you celebrate with a special offer (legitimate interest). This is entirely optional.
  • We always need to confirm that you’re over 18 so that we can legally enter into a contract with you (legal obligation).
  • We do not knowingly collect any personal information from a child under 16. We do not sell products for purchase by children and all children's products we sell are for purchase by adults only. We require customers to verify that they are 18 or over before we can process an order, and customers must verify that they are 18 or over before speaking to our Customer Service team 
  • We may use your date of birth data for fraud prevention and detection, and research purposes (legitimate interests).
  • We keep records of our live chats, telephone calls, emails and postal correspondence from you so we can provide you with great customer service (contractual performance). We may also use this data for staff training (legitimate interests).
  • We use information about your device and how you use our website (including your IP address, device type) to continuously improve our website, to set default options for you, and to show you the correct content (for example language and currency). We may also use it to develop, test and improve the systems, services and products we provide to you by say, recording your browser’s Session ID to help us understand more when you leave us online feedback about any problems you’re having. This data is also used to prevent and detect fraud. We collect your IP address to learn more about how you use our website. IP address data allows us to analyse site usage and visitor numbers and see how our advertising performs (so we can understand what you like). We also use this information to improve our website, which makes our marketing more relevant to give you the best experience we can (legitimate interests).
  • When you participate in a competition, survey or promotion, we use your data to run the activity. We may also use this data in order to fulfil your prize if you’re a winner (legitimate interest/consent).
  • If you interact with us on social media, we use your social media username or identifier to help us respond to your comments, questions or feedback (legitimate interest).
  • There may be situations where we are legally required to share your personal data, for example, when a court order is submitted to share it with law enforcement agencies or a court of law (legal obligation).
  • Every now and then, we love to surprise and delight our customers by sending unexpected presents or treats. We may use your name, address or email address to do this (legitimate interest).
  • If you place an order on behalf of another person (for example, if you buy a gift for another person and provide their name and address for delivery), please ensure you have obtained their permission before agreeing for them to receive marketing from Celtic & Co. during checkout.
  • If you don’t want to give us your data, you don’t have to. However, if you don’t, you may not be able to buy products from our website and catalogue. 

DATA WE RECEIVE

We may receive personal data from the following third parties:

  • We may receive your data from the following data brokers, where these brokers will have received your name from another company that has indicated you do not mind receiving catalogues from third parties. You can ask us to remove you from these mailing lists at any time by contacting our customer services team or using this unsubscribe page.

  • We may receive your information from third parties such as fraud detection agencies to verify your details when transacting with us.

  • We may have obtained your details if another person has placed an order under your name.
  • We may receive your details if you take part in a competition run by one of our partners and indicate that you would be happy to receive communications from us.
  • We work with Epsilon Abacus (registered as Epsilon International UK Ltd), a company that manages the Abacus Alliance on behalf of UK retailers and charities. The participating retailers are active in the clothing, collectables, food & wine, gardening, gadgets & entertainment, health & beauty, household goods, home interiors and travel categories.

LEGITIMATE INTEREST AND CONSENT

General

Celtic & Co. collects and uses customers’ personal information as set out in this privacy policy to enable us to carry out:

  • The pursuit of our legitimate interests (as set out below);
  • The purposes of complying with our duties and exercising our rights under a contract for the sale of goods to a customer; or
  • Complying with our legal obligations.

Our Legitimate Interests

The normal legal basis for processing customer data, is that it is necessary for the legitimate interests of Celtic & Co. including:-

  • Selling and supplying goods and services to our customers;
  • Protecting customers, employees and other individuals and maintaining their safety, health and welfare;
  • Promoting, marketing and advertising our products and services;
  • Sending promotional communications which are relevant and tailored to individual customers. Our communications are designed to tell you about the benefits we can offer, so that you have exclusive access to our best deals. We use the information we have about you to tailor the content and try to ensure that the offers are as relevant to you as possible;
  • Understanding our customers’ behaviour, activities, preferences, and needs;
  • Improving existing products and services and developing new products and services;
  • Complying with our legal and regulatory obligations;
  • Preventing, investigating and detecting crime, fraud or anti-social behaviour and prosecuting offenders, including working with law enforcement agencies;
  • Handling customer contacts, queries, complaints or disputes;
  • Managing insurance claims by customers;
  • Protecting Celtic & Co., its employees and customers, by taking appropriate legal action against third parties who have committed criminal acts or are in breach of legal obligations to Celtic & Co.;
  • Effectively handling any legal claims or regulatory enforcement actions taken against Celtic & Co. and
  • Fulfilling our duties to our customers, colleagues, shareholders and other stakeholders.

Consent

As set out above, we will send you marketing communications where you have not told us that you wish to unsubscribe and where you have purchased similar products and/or services from Celtic & Co.. You will also receive marketing communications from us where you have signed up, or otherwise consented, to receive marketing messages from a brand or entity within Celtic & Co..

You have the right to withdraw your consent to processing of this nature at any time by contacting the relevant brand's customer care team.

SHARING YOUR DATA

We will share your information with other members of our group company, Refined Brands Limited (registered company number 13175575)  but only for the purposes specified in this privacy policy. In particular:

  • We will share your information with other members of Refined Brands Limited where we have a legitimate interest, or you have consented for us to do so for the purposes of receiving marketing from those other Refined Brands Group members;
  • We will share your information with other members of Refined Brands Limited for group analysis and business information purposes, to improve our products and services.

Third parties

There are circumstances where we may share some of your data with others. Celtic & Co. only allows its service providers to handle your personal data when we have confirmed that they apply appropriate data protection and security controls.

Aside from our service providers, Celtic & Co. will not disclose your personal information to any third party, except as set out below. We will never sell or rent our customer information to other organisations for marketing purposes. 

We may share your personal information with:

  • Similar companies to those in Celtic & Co. whose products we think will be of interest to you. We send a single catalogue to their customers and in return they can send a single catalogue to our customers.  (legitimate interest, consent)
  • Marketing Services Providers - We will share your data with the Marketing Services Providers listed below, who will use it to help direct marketing organisations such as ourselves better understand the likely characteristics of their customers, communicate with them more effectively, and also identify prospective customers. This should mean that you receive direct marketing that is more relevant to you. (legitimate interest, consent)

To understand more please click through to the websites of the companies below: 

Other:

  • Payment and Fraud Prevention providers - Adyen are the data controller in respect of the Personal Information that you give to them (and which they hold about you) when you sign up for, access, or use services, features, technologies or functions offered on the Adyen website (including when using Adyen to pay for goods or services offered on the Cetlic & Co. website) and in relation to Personal Information collected during the course of business as set out in their Privacy Policy (Adyen privacy policy) (contractual performance).
  • Payment and Credit Agencies (contractual performance)
  • Credit reference agencies where necessary for card payments (contractual performance)
  • Governmental bodies, regulators, law enforcement agencies, courts/tribunals and insurers where we are required to do so (contractual performance): -
    • to comply with our legal obligations;
    • to exercise our legal rights (for example in court cases);
    • for the prevention, detection, investigation of crime or prosecution of offenders;
    • for the protection of our employees and customers;
  • Sale of Business Assets - Upon any sale of our business assets to another company our data records will be included. (legal obligation)
  • Competition Partners (consent)
  • Email and SMS providers (consent)
  • Delivery Partners (e.g Royal Mail, DPD, Evri) (contractual performance)
  • Global logistics partner for international order fulfilment "Global-e" (contractual performance)

USING YOUR DATA OUTSIDE THE EEA AND UK

International transfers:

  • We may transfer data outside the EEA, if we did, this would be subject to special rules under data protection laws. We would ensure that transfers would take place in the presence of appropriate safeguards, including standard data protection clauses adopted by the EU Commission.

HOW LONG DO WE KEEP YOUR INFORMATION?

Celtic & Co. retains your data for 10 years from your last order. This is so we can comply with our legal and contractual obligations.

DATA PROTECTION

Celtic & Co. is committed to keeping your personal data safe and secure.

Our security measures include:

  • Encryption of data;
  • Regular scenario planning and crisis management exercises to ensure we are ready to respond to cyber security attacks and data security incidents;
  • Security controls which protect Celtic & Co. IT infrastructure from external attack and unauthorised access; and
  • Internal policies setting out our data security approach and training for employees.

Credit card encryption

  • We accept online payment in a secure environment using Secure Socket Layering technology (SSL). All of the information sent to us as you browse our site, including payment and address information, is encrypted to safeguard your details. Encryption prevents other internet users from accessing this information. You can check that you are shopping in a secure environment by looking for either a locked padlock icon or an image of a key in the grey bar at the bottom of your screen.
  • The encryption technique we use is the highest standard available for e-commerce and is certified by Thawte, part of the Verisign group - the world's most respected certification body for Internet firms. If you have questions regarding our credit card security policies, please call us on 0333 400 0044.

Celtic & Co. will never ask you to confirm any bank account or credit card details via email. If you receive an email claiming to be from a company with Celtic & Co. asking you to do so, please ignore it and do not respond. If you are using a computing device in a public location, we recommend that you always log out and close the website browser when you complete an online session.

In addition, we recommend that you take the following security measures to enhance your online safety both in relation to Celtic & Co. and more generally:

  • Keep your account passwords private. Remember, anybody who knows your password may access your account.
  • When creating a password, use at least 8 characters. A combination of letters and numbers is best. Do not use dictionary words, your name, email address, or other personal data that can be easily obtained. We also recommend that you frequently change your password. You can do this within your account section on our website.
  • Avoid using the same password for multiple online accounts.

YOUR RIGHTS

You have the right to request that we disclose certain information to you about our collection and use of your personal information. We will deal with any subject access request within 30 days. Please contact our Data Protection Officer using the details listed in the Contact Us section.

Once we receive and verify your request, we will disclose to you:

  • The right to ask what personal information that we hold about you at any time
  • The right to ask us to update and correct any out-of-date or incorrect personal information that we hold about you; and
  • The right to opt out of any marketing communications that we may send you.

You have the right to ask us to stop or pause processing your data, erase your data or amend your data. Please get in touch with us via any of the methods listed in our Contact Us section if you’d like us to do any of these things, and as far as we’re able to (when taking into account our own legal obligations) we’ll make it happen. You can also amend your own personal data by accessing ‘Your Account’ on our website.

You have the right to stop receiving direct marketing. Just ask us to take you off the list, via any of the methods in our Contact Us section.

You have the right of portability over your data (i.e. you can ask us to pass the data we hold on you to a third party in machine-readable format). Let us know if you want us to do this using the details in our Contact Us section.If you have any complaints, you can contact us (see details below) and we’ll do our utmost to get to the bottom of things. If, after contacting our Data Protection Officer you feel your complaint has not been dealt with satisfactorily, you have the right to contact the supervisory authority. The supervisory authority for data protection in the UK is the Information Commissioner’s Office (ICO) which you can contact on 0303 123 1113 or via their website at ico.org.uk.

To make such a request, please contact us via any of the methods listed in the ‘Contact Us’ section.

Verifiable Requests. Only you or a person that you authorize to act on your behalf may make a verifiable consumer request related to your personal information. However, you may also make a verifiable consumer request on behalf of your minor (under 16) child.

In order to respond to your requests, we must perform some verification. For example, this would be necessary in order for us to respond to any requests to disclose or delete your data. Our verification methods will differ depending on the following circumstances:

Password-protected accounts – if you have a password-protected account with us, we will use password authentication to verify you. If your request is for the deletion of personal information, we will need to re-verify you before we delete your information.

CHANGING YOUR PREFERENCES

Emails: If you no longer wish to receive emails from a member of Celtic & Co., please either click the ‘Unsubscribe’ button on an email that you receive from us, contact the relevant brands Customer Services or visit the relevant preference centre page listed at the top of this privacy policy. It may take around five working days to unsubscribe you.

Posted Mailing:  If you do not wish to receive any further posted mailings from us get in touch with us via any of the methods in our Contact Us section. Our catalogues are printed in advance so it can take up to eight weeks for you to unsubscribe.

Third Parties: If you don’t want us to share your data with third parties, you can change this at any time by contacting us via any of the methods in our Contact Us section.

SMS: You may opt out of receiving text messages at any time by texting “STOP” to our text messages. Or tell us via any of the methods in our Contact Us section.

COOKIES

Ordering from Celtic & Co.’s website does require functional cookies to be enabled as a minimum; without them, you can browse the site and check the stock status but you cannot add items to your basket or wishlist.

No personal data is stored in any of the cookies used, just unique numbers which, depending on the type of cookie, are used to analyse site usage or references which can then be associated with your account once you’ve signed in. If you’d prefer to restrict, block or delete cookies from celticandco.com, or any other website, you can use your browser to do this. Each browser is different, so check the ‘Help’ menu of your particular browser (or your mobile phone’s handset manual) to learn how to change your cookie preferences, or use the following guides for the most popular browsers:

Internet Explorer: http://windows.microsoft.com/en-GB/windows-vista/Block-or-allow-cookies

Google Chrome: http://support.google.com/chrome/bin/answer.py?hl=en&answer=95647

Mozilla Firefox: http://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences?redirectlocale=en-US&redirectslug=Enabling+and+disabling+cookies

For more information about cookies and instructions on how to manage or disable cookies see http://www.allaboutcookies.org

THIRD PARTY SHARING

We currently use third party cookies and pixels to allow us to track visitor behaviour and offer certain website services.

If you would like to disable 'third party' cookies, you can turn them off by going to the third party's website and getting them to generate a one-time 'no thanks' cookie that will stop any further cookies being written to your machine. Below are links to the third parties we use:

Celtic & Co. may contact you via email to invite you to review any services and/or products you received from us [in order to collect your feedback and improve our services [and products]] (the “Purpose”). We use an external company, Trustpilot A/S (“Trustpilot”), to collect your feedback which means that we will share your name, email address and reference number with Trustpilot for the Purpose. If you want to read more about how Trustpilot process your data, you can find their Privacy Policy  here

Celtic & Co.may also use such reviews in other promotional material and media for our advertising and promotional purposes.

CONTACT US

Call us on +44 (0)333 400 0044
(Mon-Fri: 9am-5pm, Sat: 10am-4pm)

Email us at:  [email protected]

Write to us at:
The Data Protection Officer,

Celtic & Co.,
Units 2 & 2A Lodge Way,
Indian Queens Industrial Estate,
Saint Columb,
Cornwall,
TR9 6TF
United Kingdom

You have the right to lodge a complaint with the Information Commissioner’s Office. Further information, including contact details, is available at https://ico.org.uk.