Privacy Policy
Last updated: 10 November 2026
The Skull Coven ("we", "us") respects your privacy. This policy explains what personal information we collect when you use theskullcoven.co.uk and how we use it, in line with the UK GDPR and the Data Protection Act 2018.
Who we are
The Skull Coven is the data controller for your information. Contact us at magic@theskullcoven.co.uk.
What we collect
- Name, email address, phone number and delivery address when you place an order.
- Account details (email and password, or your Google sign-in) if you create an account.
- Order and subscription history.
- Card payments are handled by our payment provider, Stripe. We never see or store your full card details.
Why we use it
- To process, deliver and support your orders and monthly boxes (performance of a contract).
- To keep records required for tax and accounting (legal obligation).
- To prevent fraud and keep the site secure (legitimate interests).
We do not sell your information, and we only send marketing if you have asked to receive it.
Who we share it with
Only with services that help us run the shop: our payment provider (Stripe), our website and database host, and the delivery service carrying your parcel. Some may process data outside the UK under approved safeguards.
How long we keep it
Order records are kept for 6 years for tax purposes. Account details are kept until you ask us to delete your account.
Your rights
You can ask to see, correct, delete or move your information, or object to how we use it, by emailing magic@theskullcoven.co.uk. You can also complain to the Information Commissioner's Office (ico.org.uk).