This policy explains how CENTRAL SURFACE RESTORATION LIMITED ("Revira", "we", "us") collects, uses, shares and protects personal data when you visit censurres.shop, place an order, contact us or subscribe to membership.
Who is responsible for your data
The data controller is CENTRAL SURFACE RESTORATION LIMITED, registered office 8 Wallace Place Cambusbarron, FK7 9PB, Scotland, United Kingdom. For any privacy question, or to exercise your rights, email support@censurres.shop or write to us at the registered address above.
What we collect
- Order and delivery data: name, email, phone, shipping address, delivery and billing address, the items you buy and order history for order fulfilment.
- Account and membership data: login email, membership tier and subscription status.
- Payment data: handled by our payment processor. We receive confirmation of payment, the last four digits and card type — never your full card number.
- Support and enquiry data: the content of messages you send us through the contact, wholesale or checkout forms.
- Technical and usage data: IP address, device and browser type, and pages visited, collected through cookies and similar technologies.
Collection sources: where we collect it from
Directly from you when you order, register, subscribe or contact us; automatically from your device when you browse; and from our processors (for example a payment confirmation from our payment provider or a delivery update from a carrier).
Why we use it and our legal bases
- To fulfil your order and provide membership — performance of a contract.
- To handle payments, returns, refunds and disputes — contract and legal obligation.
- To provide support and answer enquiries — legitimate interests and, where you contact us, your request.
- To send service messages (order and delivery updates) — contract; and marketing only where you have consented, which you can withdraw at any time.
- To keep the site secure and prevent fraud — legitimate interests and legal obligation.
- To meet accounting and tax duties — legal obligation.
Payment provider boundary
Card payments are processed on a secure, PCI-DSS-compliant hosted page operated by our payment provider. Revira does not receive or store your full card number, CVC or full card details. We receive only the result of the transaction and limited card metadata needed to identify a payment, process a refund or resolve a dispute.
Who we share it with
We share personal data only with processors that help us run the store, under contract and only as needed:
- Hosting and infrastructure — to serve the website and store data.
- Payment processing — to take payment, manage subscriptions and handle refunds and disputes.
- Delivery and logistics carriers — to ship your order and provide tracking; they receive the delivery name, address and contact details.
- Email and communications — to send order, support and (with consent) marketing messages.
- Analytics — to understand and improve site usage.
We do not sell your personal data. We may disclose data where required by law or to protect our legal rights.
International transfers
We are based in the United Kingdom and ship worldwide, so your data may be processed outside your country. Where data is transferred out of the UK or EEA, we rely on appropriate safeguards such as adequacy decisions or the UK International Data Transfer Agreement / EU Standard Contractual Clauses.
How long we keep it
We keep order and accounting records for as long as required by law (generally up to six years for tax and accounting). Support and enquiry records are kept for up to 24 months. Marketing data is kept until you unsubscribe. We then delete or anonymise the data.
Your rights (UK GDPR & EU GDPR)
- Access a copy of your data.
- Rectify inaccurate data.
- Erase data where there is no ongoing lawful reason to keep it.
- Restrict or object to certain processing, including direct marketing.
- Data portability.
- Withdraw consent at any time.
To exercise any right, email support@censurres.shop. You can also complain to the UK Information Commissioner's Office or your local supervisory authority.
California rights (CCPA/CPRA)
If you are a California resident, you may request the categories and specific pieces of personal information we have collected, request deletion, and correct inaccurate information. We do not sell or share personal information for cross-context behavioural advertising, and we will not discriminate against you for exercising your rights.
Do Not Sell or Share
We do not sell your personal information and we do not share it for cross-context behavioural advertising as those terms are defined under California law. No opt-out is needed, but you can still contact us with any preference at support@censurres.shop.
Cookies and analytics
We use strictly necessary cookies to run the cart and checkout, and analytics cookies to improve the site. See our Cookie Policy for details and how to manage them.
Automated decisions and children
We do not make decisions producing legal or similarly significant effects about you by solely automated means. The store is not intended for children: you must be at least 13 to register, and customers aged 13–17 must have the consent of a parent or guardian. We do not knowingly collect data from children under 13.
Security
We use technical and organisational measures — encryption in transit, access controls and reputable processors — to protect your data. No method of transmission is completely secure, so we cannot guarantee absolute security.
Changes and contact
We may update this policy and will change the "last updated" date above. For any privacy question, contact support@censurres.shop or +44 7391820614.