Privacy policy
PRIVACY POLICY
Last Updated: 8 September 2026
Sanctified is operated by H.2.2 Merchants Ltd, trading as Sanctified.
Sanctified operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”).
Our store is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy explains how we collect, use, disclose and otherwise process your personal information when you visit or use our website, make a purchase or other transaction through the Services, or otherwise communicate with us.
If there is a conflict between our Terms of Service and this Privacy Policy in relation to the collection, use, processing or disclosure of your personal information, this Privacy Policy will apply.
Please read this Privacy Policy carefully. By using or accessing the Services, you acknowledge that you have read this Privacy Policy and understand how your personal information may be collected, used and disclosed as described below.
1. PERSONAL INFORMATION WE COLLECT OR PROCESS
When we use the term “personal information”, we mean information that identifies you or can reasonably be linked to you or another person.
Personal information does not include information that has been collected anonymously or properly de-identified so that it cannot reasonably be linked to an identifiable individual.
Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information:
- Contact details, including your name, billing address, shipping address, telephone number and email address.
- Financial and payment information, including payment card information, payment method, transaction details, payment confirmation and other payment-related information. Payment information may be processed directly by Shopify, payment providers or other payment service providers.
- Account information, including your username, password, preferences and settings.
- Transaction information, including products that you view, place in your basket, add to a wishlist, purchase, return, exchange or cancel, and information relating to your previous transactions.
- Communications with us, including information you provide when contacting us about an order, customer service matter, privacy request or other enquiry.
- Device information, including information about your device, browser, network connection, IP address and other unique identifiers.
- Usage information, including information about how and when you interact with or navigate the Services.
- Marketing and advertising information, including your marketing preferences and information relating to your interaction with advertisements or promotional communications.
2. SOURCES OF PERSONAL INFORMATION
We may collect personal information from the following sources:
- Directly from you, including when you create an account, use the Services, place an order, communicate with us or otherwise provide personal information to us.
- Automatically through the Services, including through your device and through cookies and similar technologies when you use our website.
- From Shopify and our service providers, including providers that enable us to operate our website, process payments, fulfil orders, provide customer support or perform other services on our behalf.
- From business, advertising or marketing partners, where permitted by applicable law.
- From other third parties, where permitted or required by law.
3. HOW WE USE YOUR PERSONAL INFORMATION
Depending on how you interact with us and the Services you use, we may use personal information for the following purposes.
Providing, Tailoring and Improving the Services
We use your personal information to provide the Services and perform our contract with you, including to:
- process payments;
- process and fulfil orders;
- arrange shipping and delivery;
- process returns and refunds;
- maintain and manage your account;
- remember your preferences;
- communicate with you about your account or orders;
- enable customer reviews or other store features; and
- improve and personalise your shopping experience.
Marketing and Advertising
Where permitted by applicable law, we may use personal information for marketing and promotional purposes, including to:
- send marketing or promotional communications by email or other permitted channels;
- show advertisements for our products or Services;
- measure the effectiveness of our advertising; and
- personalise advertisements based on your interactions with our store or other websites and services.
Where consent is required by law, we will obtain the necessary consent before using your information for these purposes.
Security and Fraud Prevention
We use personal information to:
- authenticate accounts;
- provide a secure shopping and payment experience;
- detect, investigate and prevent fraud;
- identify potentially unlawful, malicious or unsafe activity;
- protect our customers, business and Services; and
- maintain the security and integrity of our website.
If you create an account, you are responsible for keeping your account credentials secure. Please do not share your password or other account access details with other people.
Communicating With You
We use personal information to provide customer support, respond to enquiries, communicate about orders and maintain our relationship with you.
Legal and Regulatory Purposes
We may process personal information to:
- comply with applicable laws and legal obligations;
- respond to valid legal or regulatory requests;
- establish, exercise or defend legal claims;
- investigate actual or potential disputes;
- enforce our Terms of Service and other policies; and
- protect our legal rights and the rights of our customers and others.
4. LAWFUL BASES FOR PROCESSING
Where UK or European data protection law applies, we process personal information only where we have a lawful basis to do so.
Depending on the circumstances, our lawful bases may include:
- Contract, where processing is necessary to enter into or perform a contract with you, such as processing and delivering your order.
- Legal obligation, where processing is necessary to comply with a legal or regulatory requirement.
- Legitimate interests, where processing is necessary for our legitimate business interests or those of a third party and those interests are not overridden by your rights and freedoms. This may include fraud prevention, security, improving our Services and managing our business.
- Consent, where you have given us permission to process your personal information for a particular purpose, such as certain forms of marketing or the use of non-essential cookies where consent is required.
Where we rely on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before your consent was withdrawn.
5. HOW WE DISCLOSE PERSONAL INFORMATION
In certain circumstances, we may disclose personal information to third parties for legitimate business purposes and as permitted by applicable law.
This may include:
- Shopify, which hosts and supports our ecommerce store.
- Service providers and vendors that provide services such as payment processing, IT services, analytics, customer support, cloud storage, fulfilment and shipping.
- Business and marketing partners that assist with advertising, marketing and measuring the performance of our campaigns.
- Delivery and fulfilment partners where information is required to process, fulfil and deliver your order.
- Third parties you direct us to interact with, including social media platforms or other services you choose to use.
- Our affiliates or companies within our corporate group, where applicable.
- Authorities, regulators, courts or other third parties where disclosure is required by law or is reasonably necessary to protect our rights, enforce our policies, respond to legal proceedings, investigate fraud or protect our customers and others.
- Parties involved in a business transaction, such as a merger, acquisition, restructuring or sale of all or part of our business.
Some of our marketing partners may use information relating to your online activity to provide personalised or targeted advertising. Depending on where you live, you may have the right to opt out of certain forms of sharing or targeted advertising.
6. US STATE PRIVACY RIGHTS
Depending on the state in which you live, you may have certain rights regarding your personal information under applicable US state privacy laws.
These rights may include the right to:
- request access to or information about the personal information we hold about you;
- request correction of inaccurate personal information;
- request deletion of your personal information;
- request a copy of certain personal information;
- opt out of the sale or sharing of personal information, where applicable;
- opt out of the use of personal information for targeted advertising, where applicable;
- limit certain uses or disclosures of sensitive personal information, where required by law;
- appeal certain decisions we make regarding a privacy rights request, where applicable; and
- exercise your privacy rights without unlawful discrimination.
The particular rights available to you depend on the privacy laws that apply in your state. Certain rights may be subject to legal exceptions.
Do Not Sell or Share My Personal Information
Where required by applicable law, you may opt out of the sale or sharing of your personal information and certain uses of your information for targeted advertising by using the “Do Not Sell or Share My Personal Information” or “Your Privacy Choices” option available on our website.
Where supported and required by applicable law, we also recognise browser-based opt-out preference signals, including Global Privacy Control (GPC).
We may need to verify your identity before processing certain privacy requests.
Where permitted by applicable law, you may also appoint an authorised agent to submit a privacy request on your behalf.
Nothing in this section limits any privacy rights available to you under applicable US state law.
7. RELATIONSHIP WITH SHOPIFY
The Services are hosted by Shopify.
Shopify collects and processes certain personal information relating to your access to and use of the Services in order to provide and improve the Services.
Information you submit through our store may be transmitted to and processed by Shopify and other service providers, including providers located in countries other than the country in which you live.
We may also use Shopify features that use information obtained from your interactions with our store, other merchants and Shopify to help protect, operate, improve and grow our business.
In certain circumstances, Shopify is responsible for its own processing of your personal information, including responding to requests relating to information processed by Shopify for its own purposes.
You can learn more about Shopify's privacy practices in the Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/app-users
Depending on where you live, you may also exercise certain privacy rights directly through the Shopify Privacy Portal:
8. COOKIES AND SIMILAR TECHNOLOGIES
We and our service providers, including Shopify, use cookies and similar technologies to operate our website, remember preferences, understand how visitors use the Services, provide functionality, measure performance and, where permitted, support advertising and marketing.
Where required by applicable law, non-essential cookies and similar technologies will not be used until you have provided the required consent.
You can manage your cookie preferences using the cookie controls available on our website. Where applicable, you may withdraw or change your consent at any time.
For further information about the cookies and similar technologies used on our website, please read our Cookie Policy, available through the footer of our website.
9. THIRD-PARTY WEBSITES AND LINKS
The Services may contain links to websites or other online platforms operated by third parties.
If you follow a link to a website or service that is not operated or controlled by Sanctified, you should review that third party's privacy and security policies and other applicable terms.
We are not responsible for the privacy or security practices of third-party websites or platforms.
Information you choose to make available through public or semi-public areas, including third-party social media platforms, may be visible to other users of those platforms.
The inclusion of a third-party link on our website does not, by itself, mean that Sanctified endorses that third party, its website or its content.
10. CHILDREN'S DATA
Our Services are intended for a general adult shopping audience and are not directed at children under 13.
We do not knowingly collect personal information from children under 13 in the United States or the United Kingdom without appropriate authorisation where required by law.
In parts of the European Economic Area, a higher age may apply to a child's ability to provide their own consent to certain online processing. Where applicable, we do not knowingly rely on the consent of a child under the relevant age, which may be as high as 16, without any parental or guardian authorisation required by law.
We do not knowingly sell or share, as those terms are defined under applicable US privacy laws, personal information belonging to children under 13.
If you are a parent or guardian and believe that a child has provided personal information to us in circumstances where they should not have done so, please contact us at support@sanctifiedvessels.com. We will take appropriate steps to investigate and, where required, delete the information.
11. DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing our Services, processing and fulfilling orders, maintaining business and financial records, resolving disputes, preventing fraud, enforcing our agreements and complying with our legal obligations.
Our general retention periods are:
- Order and transaction information: generally retained for up to 7 years after the relevant transaction where necessary for accounting, tax, legal and record-keeping purposes.
- Customer account information: retained while your account remains active and for a reasonable period afterwards where necessary for legal, fraud prevention or record-keeping purposes.
- Customer service and correspondence: generally retained for up to 3 years after the matter has been resolved, unless a longer period is reasonably necessary because of a dispute, legal claim or other legal obligation.
- Marketing information: retained until you unsubscribe, withdraw your consent where consent is the applicable legal basis, or we determine that the information is no longer required for marketing purposes. We may retain limited information necessary to record and respect your opt-out.
- Website, cookie and analytics information: retained according to the lifespan of the relevant cookie or technology and the retention practices of the applicable service. Further information is provided in our Cookie Policy.
- Privacy rights requests: records relating to privacy or data protection requests may be retained for a reasonable period after completion where necessary to demonstrate compliance with applicable law.
- Fraud, security and legal records: retained for as long as reasonably necessary to protect our Services, establish or defend legal claims, comply with legal obligations or respond to regulatory requirements.
Where we do not specify a fixed retention period, we determine how long to retain personal information by considering:
- the nature and sensitivity of the information;
- the purposes for which it was collected;
- whether we continue to need it for those purposes;
- the risk of harm from unauthorised use or disclosure; and
- applicable legal, accounting, tax and regulatory requirements.
When personal information is no longer reasonably required, we will delete or anonymise it unless applicable law requires or permits us to retain it for longer.
12. SECURITY OF YOUR INFORMATION
We use reasonable administrative, technical and organisational measures designed to protect personal information.
However, no method of transmission over the internet or method of electronic storage can be guaranteed to be completely secure.
Please avoid sending sensitive or confidential information to us through insecure communication channels.
13. YOUR RIGHTS AND CHOICES
Depending on where you live, you may have some or all of the following rights in relation to your personal information:
- Right to Access or Know: You may have the right to request access to personal information we hold about you.
- Right to Delete: You may have the right to request deletion of personal information we hold about you.
- Right to Correct: You may have the right to request correction of inaccurate personal information.
- Right to Data Portability: You may have the right to receive certain personal information in a portable format or request its transfer to another organisation, where applicable.
- Right to Object: You may have the right to object to certain processing of your personal information.
- Right to Restrict Processing: You may have the right to ask us to restrict certain processing of your personal information.
- Right to Withdraw Consent: Where we rely on your consent, you may withdraw that consent at any time.
- Marketing Choices: You may unsubscribe from promotional emails using the unsubscribe link contained in our marketing emails.
If you unsubscribe from marketing communications, we may still send you non-promotional communications relating to orders, your account, customer service matters or other necessary business communications.
These rights are not absolute and may apply only in certain circumstances. We may refuse or restrict a request where applicable law permits us to do so.
14. EXERCISING YOUR PRIVACY RIGHTS
You may exercise applicable privacy rights by contacting us at:
We may need to verify your identity before processing a request where permitted or required by law.
Where applicable law allows it, you may appoint an authorised agent to submit a request on your behalf. We may request evidence that you have authorised that person to act for you and may also need to verify your identity directly.
We will respond within the timeframe required by applicable law.
We will not unlawfully discriminate against you because you have exercised a privacy right.
Privacy rights relating specifically to information processed independently by Shopify may also be exercised through the Shopify Privacy Portal:
15. COMPLAINTS
If you have a complaint about how Sanctified processes your personal information, please contact us first at support@sanctifiedvessels.com so that we have an opportunity to investigate and respond.
If you are located in the United Kingdom and remain dissatisfied, you may have the right to lodge a complaint with the Information Commissioner's Office (ICO).
If you are located in the European Economic Area, you may have the right to lodge a complaint with the data protection supervisory authority in your country.
If you are located elsewhere, you may have the right to contact the relevant privacy or data protection regulator in your jurisdiction.
Nothing in this section prevents you from contacting an appropriate regulatory authority where you have the legal right to do so.
16. INTERNATIONAL TRANSFERS
We may transfer, store or process personal information outside the country in which you live.
Where personal information is transferred from the United Kingdom or European Economic Area to a country that has not been recognised as providing an adequate level of data protection, we will use an appropriate lawful transfer mechanism where required.
These mechanisms may include the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, or another lawful transfer mechanism recognised by the relevant authority.
17. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our practices, Services or legal and regulatory requirements.
When we make changes, we will publish the updated Privacy Policy on our website and revise the “Last Updated” date.
Where required by applicable law, we will provide additional notice of material changes.
18. CONTACT US
If you have questions about this Privacy Policy, our privacy practices or the personal information we hold about you, or if you wish to exercise a privacy right, please contact:
H.2.2 MERCHANTS LTD
Trading as Sanctified
82A James Carter Road
Mildenhall
IP28 7DE
United Kingdom
Email: support@sanctifiedvessels.com
Website: sanctifiedvessels.com
For the purposes of applicable data protection law, H.2.2 Merchants Ltd, trading as Sanctified, is the data controller of the personal information processed by Sanctified.