Privacy Policy

1. Who We Are

RomanBronze.com (“we”, “our”, “us”) sells authentic ancient Roman coins online. Our website is romanbronze.com. For privacy enquiries contact us at contact@romanbronze.com.

2. What Data We Collect

• Account information — name, email address, and password when you create an account.
• Order information — billing and shipping address, items purchased, and order total.
• Payment information — processed securely by Stripe. We never see or store your full card number.
• Contact form messages — name, email address, and message content when you use our contact form.
• Technical data — IP address, browser type, and pages visited, collected automatically via server logs and cookies.

3. How We Use Your Data

• To process and fulfil your orders.
• To send order confirmations and shipping updates.
• To respond to your contact form enquiries.
• To maintain and improve our website.
• To prevent fraud and comply with legal obligations.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-Party Services

We use the following third-party services that may process your data:

• Stripe — payment processing. See Stripe's Privacy Policy.
• Royal Mail / postal carriers — shipping and delivery of orders.

5. Cookies

We use strictly necessary cookies to make the site function:

• Shopping cart cookie — remembers your cart contents while browsing.
• Authentication cookie — keeps you signed in to your account.

These cookies are essential for the site to work and cannot be disabled. We do not use advertising or tracking cookies.

6. Data Retention

We retain your account and order data for as long as your account is active and for up to 6 years afterwards to comply with UK tax and accounting regulations. Contact form messages are retained for up to 12 months. You may request deletion of your data at any time by contacting us.

7. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access a copy of your personal data.
• Rectify inaccurate or incomplete data.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Data portability.

To exercise any of these rights, email contact@romanbronze.com. We will respond within 30 days.

8. Security

We use HTTPS encryption across our entire website. Payment data is handled exclusively by Stripe (PCI DSS Level 1 certified). Passwords are stored using secure one-way hashing. We take reasonable precautions to protect your data, but no method of transmission over the internet is 100% secure.

9. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with a revised date. We encourage you to review this policy periodically.

10. Contact

For any privacy-related questions, please contact us at contact@romanbronze.com or via our contact form.