Legal
Privacy policy
Last updated: 25 October 2026
Who we are
Cottonmill Holdings Ltd (company number 12610999, The Bank Building, 34 Burnley Road, Padiham, Lancashire, BB12 8BW) runs onepairleft.co.uk. We are the controller of your personal data. Contact us about privacy at hello@onepairleft.co.uk.
What we collect
- Order details: your name, delivery and billing address, email address, phone number (if you give it), what you bought, and order and payment status. We don't receive or store your full card details.
- Account details, if you create an account: your login email and order history.
- Messages you send us, including returns and complaints.
- Marketing preferences, if you sign up for emails.
- Technical data: IP address, device and browser type, and the pages you visit, collected through cookies (see below).
How we use it, and our lawful basis
- To take, deliver and support your order, including returns and refunds - to perform our contract with you.
- To send order and delivery emails - to perform our contract with you.
- To keep records for tax and accounting - legal obligation.
- To prevent fraud and keep the site secure - our legitimate interests.
- To understand how the site is used and improve it - your consent, for non-essential cookies.
- To send marketing emails - your consent, or our legitimate interest in emailing existing customers about similar products. You can unsubscribe at any time using the link in every email.
Who we share it with
We share personal data only with providers that help us run the shop, under contracts that protect your data:
- Shopify - our shop and checkout platform.
- Payment providers - Shopify Payments, and any other payment provider you choose at checkout.
- Royal Mail - to deliver your order.
- Our email provider - only if you sign up for marketing emails.
- Our accountants and professional advisers, and authorities where the law requires.
We never sell your personal data.
International transfers
Some of our providers, including Shopify, may process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum to protect it.
How long we keep it
- Order and transaction records: 6 years from the end of the financial year, for tax purposes.
- Customer service messages: up to 2 years.
- Marketing data: until you unsubscribe, after which we keep only what we need to make sure we don't email you again.
Cookies
We use essential cookies to make the shop work - for example, your basket and checkout. With your consent, we also use analytics cookies to understand how the site is used. We don't use advertising cookies. You can change your choice at any time through the cookie settings link at the bottom of every page.
Your rights
You have the right to access, correct or delete your data, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. To use any of these rights, email us. We'll reply within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put it right first.