Privacy Policy | YardRange

Last updated: 14 October 2026

This policy explains how YardRange (a trading name of Raphaël Ollivier, sole trader, 47 rue Vivienne, 75002 Paris, France) collects and uses your personal data when you visit or buy from yardrange.co.uk. We are the data controller of your personal data.

1. Personal information we collect

When you buy from our store, we collect the personal information you give us, such as your name, address, email address and phone number.

When you browse our store, we also automatically receive your device's IP address, which tells us about your browser and operating system.

Email marketing: with your permission, we may send you emails about our store, new products and other updates.

2. Why we use it, and our legal basis

To process and deliver your order, handle returns and answer your questions: to perform our contract with you.
To prevent fraud and keep the site secure: our legitimate interests.
To keep invoices and records: our legal obligations.
To send marketing emails, and to use analytics and advertising cookies: your consent, which you can withdraw at any time.

3. Consent

How do you get my consent?

When you give us your personal information to complete a transaction, verify your card, place an order, arrange a delivery or return a purchase, we use it for that purpose only.

If we ask for your personal information for another reason, such as marketing, we will ask you directly for your consent, or give you the opportunity to say no.

How do I withdraw my consent?

If you change your mind, you can withdraw your consent for us to contact you, or to collect, use or disclose your information, at any time by emailing contact@yardrange.co.uk, or by using the unsubscribe link in our emails. In the UK, you can also register with the Telephone Preference Service (TPS) to opt out of unsolicited sales calls.

4. Disclosure

We may disclose your personal information if the law requires us to, or if you breach our Terms of Service.

We share your name, address and order details with the partners who prepare and deliver your order, and with our payment providers.

5. Shopify

Our store is hosted on Shopify, which provides the e-commerce platform that allows us to sell our products to you. Your data is stored in Shopify's data storage, databases and general application, on secure servers protected by a firewall. To learn more about how Shopify uses personal information, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal (privacy.shopify.com).

Payment

If you pay through a direct payment gateway, Shopify stores your card details. They are encrypted under the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is kept only as long as needed to complete your order. We never see or store your full card details.

All direct payment gateways follow PCI-DSS standards, managed by the PCI Security Standards Council, a joint effort of brands such as Visa, Mastercard, American Express and Discover. These requirements help ensure the secure handling of card information by our store and its service providers.

6. Third-party services

In general, the third-party providers we use only collect, use and disclose your information to the extent needed to perform the services they provide to us.

Some providers, such as payment gateways and other payment processors, have their own privacy policies for the information we must provide to them for your transactions. We recommend that you read them.

Some providers may be located in, or have facilities in, a different country from yours or ours, including outside the UK and the European Economic Area. Where your data is transferred, we rely on recognised safeguards such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.

The main providers we use are:

Shopify (store hosting, checkout and payments);
Klarna and PayPal (payment and instalment options, if you choose them);
Google (analytics and advertising measurement, with your consent);
our delivery partners and suppliers (to prepare and deliver your order).

Once you leave our store or are redirected to a third-party website or app, you are no longer covered by this Privacy policy or our Terms of Service. We are not responsible for the privacy practices of other sites, and we encourage you to read their privacy statements.

7. Security

To protect your personal data, we take reasonable precautions and follow industry best practices to make sure it is not lost, misused, accessed, disclosed, altered or destroyed inappropriately.

If you give us your card details, they are encrypted using Secure Socket Layer (SSL) technology and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

8. Cookies

Here is a list of the cookies we use, so that you can choose whether to accept them. Strictly necessary cookies are set automatically; analytics and advertising cookies are only set if you accept them in the cookie banner. You can change your choice at any time.

_session_id: unique session token that allows Shopify to store information about your session (referrer, landing page, etc.).
_shopify_visit: no data held, lasts 30 minutes from the last visit. Used by our website provider's internal statistics tracker to record the number of visits.
_shopify_uniq: no data held, expires at midnight (relative to the visitor) the next day. Counts the number of visits to a store by a single customer.
cart: unique token, lasts 2 weeks, stores information about the contents of your basket.
_secure_session_id: unique session token.
storefront_digest: unique token, used to check whether the current visitor has access if the store has a password.
Google analytics and advertising cookies (for example _ga, _gcl_au), with your consent: measure visits and the performance of our ads.

9. How long we keep your data

We keep order and invoice data for 10 years, as French accounting law requires (article L123-22 of the French Commercial Code). We keep your customer account data for as long as your account is active, and enquiry and customer service data for 3 years after your last contact with us. We keep marketing data until you unsubscribe or withdraw your consent, and no longer than 3 years after your last interaction with us. Analytics and advertising cookies are kept for a maximum of 13 months.

10. Age of consent

By using this site, you confirm that you are at least the age of majority in your country of residence, or that you have given your consent for any minor in your care to use this site.

11. Changes to this privacy policy

We may change this privacy policy at any time, so please review it frequently. Changes take effect as soon as they are posted on the website. If we make material changes, we will tell you here that the policy has been updated, so that you know what information we collect, how we use it, and in what circumstances, if any, we disclose it.

If our store is acquired or merged with another company, your information may be transferred to the new owners so that we can continue to sell products to you.

12. Your rights (UK GDPR)

You have the right to access, correct, update or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. To exercise these rights, email contact@yardrange.co.uk. We may ask you for information to confirm your identity, and we will reply within one month.

13. Questions and contact

If you want to access, correct, amend or delete any personal information we hold about you, make a complaint, or simply want more information, contact our data protection contact, Raphaël Ollivier, at contact@yardrange.co.uk, or by post at YardRange, 47 rue Vivienne, 75002 Paris, France.

You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint, or, if you live in the EU, to your local data protection authority (in France, the CNIL).