Privacy policy


Privacy Policy

Effective Date: 9th September 2026

ColleXable Ltd registered in England and Wales (Company No. 17116045) with its registered office at 5th Floor, 16 Great Queen Street, Covent Garden, London WC2B 5DG. 

Introduction

At ColleXable, we believe that collecting is more than a hobby – it's about emotions and special moments that you want to cherish for a lifetime. Our mission is to support your passion by offering inspiring experiences and top-quality products.

To do this responsibly, we also care deeply about something equally important: your privacy. We also care about something equally valuable - your privacy!

We want every contact with ColleXable to be safe and trusting. That's why we've created this Privacy Policy to make it clear how we care for your data and how we protect it.

This Privacy Policy explains how ColleXable (“we”, “us”, “our”) collects, uses and protects your personal data when:

  • you join our waiting list,
  • sign up for updates or newsletters,
  • you use our website,
  • you contact us,
  • you buy our company's products

Full transparency and security are our priority. We comply with the UK GDPR (UK General Data Protection Regulation), the Data Protection Act 2018 and, where possible, the EU GDPR. In practice, this means that we treat your data as we would like ours to be treated – with respect, caution and responsibility. We want you to feel that you are in good hands because:

  • we respect your interest in offers - we contact you only with your consent,
  • we do not sell your data - never to anyone,
  • we work only with proven partners who ensure a high standard of safety,
  • we transparently inform you how we use your data,
  • we are open to exercising your rights, e.g. such as: access, correction or deletion of data.

The Privacy Policy clearly and specifically answers the following questions:

  • Who is the controller of your data
  • What information we collect about you
  • How We Use Your Information
  • What is the legal basis for data processing
  • Who we share your data with
  • How we secure your data
  • How long we keep your data
  • What rights do you have as a User and a customer of our company.
  • Cookies and Tracking Technologies
  • Children's Privacy
  • How we perform international data transfers
  • When we make changes to the Privacy Policy

Who is the controller of your data

The controller of your data is:

  • ColleXable Ltd,  registered in England and Wales (Company No. 17116045) with its registered office at 5th Floor, 16 Great Queen Street, Covent Garden, London WC2B 5DG. 

We are available to assist you with any data protection matters at the following email address: data@collexable.com

What information we collect about you

When you join a reserve list or sign up for brand updates, we collect your email address and optional preferences such as interests or categories of collectibles, as well as technical information in connection with your visit to our site, such as browser type, IP address and cookies – see our Cookie Policy for details. However, if you want to make a purchase from us, we will need certain personal information such as your name, phone number, email address, payment address, and the location where you want your purchase delivered. In addition, we may collect information about our customers from time to time through order forms, media advertisements, coupons, emails, surveys, contests, phone calls, and surveys.

How We Use Your Information

All data we process is stored on secure servers, in accordance with applicable data and consumer protection laws, and we treat all personal data as completely confidential.

Waiting List: We use your personal information to manage your waiting list registration, communicate you with relevant updates, send you marketing communications and newsletters with your consent, improve the relevance and quality of our communications and website, and keep records of user consent and preferences for compliance and service improvement.

If you make a purchase from us: We keep a record of what you have purchased to ensure that warranty periods are met, to keep a record of payments made, to send you information about the status of your order or other products that we think may be of interest. We use your data to receive, execute and handle orders for items and accessories, provide warranty services, conduct tax settlements related to purchases or issue purchase and sale documents, as well as in special situations the application of financial security measures and the assessment of the risk of money laundering and financing, the establishment, conduct or defence of legal claims.

Communications: We keep a short record of any correspondence or phone calls we may have had with you. To provide you with the best possible service, communication and interaction, we may use a text messaging system to notify you, for example, of the shipment of your order and payment reminders, if applicable.

Phone call: All of our calls are recorded and, where possible, we notify the data subject of this activity. If you call us, we will see your phone number. We will record your personal data that you provide to us during the call, such as your name, contact details, transaction information or other information that you provide to us. Phone calls can be transcribed (AI) to improve customer service, support internal training. This process does not involve automated decision-making that produces legal or material effects on you.

Correspondence: We keep a record of correspondence from Clients or potential Clients, as well as responses to their inquiries (contact form, chat, letter, email) in order to provide Customers and users with complete information and to ensure a positive experience in their relationship with us.

We may also analyse feedback, opinions and comments shared by users or customers, for example via social media, review platforms, emails or phone calls.

Product Marketing: We may, from time to time, send you letters, emails, texts, or call you to let you know about our new products, services, and anything that's coming your way.

We will only send you marketing communications (such as email, SMS or phone calls) where you have given your consent, in line with the laws that apply in your country. You can withdraw your consent at any time. You can withdraw your consent at any time by contacting us by email, phone or post. If you opt out of marketing, we keep a record of your preference to ensure we respect your choice. We also keep a record of past offers that we have sent you to avoid sending you the same offer again. Occasionally, we may attach promotional materials from trusted business partners to correspondence.

What is the legal basis for data processing

The legal bases for processing your data include:

  • consent, where required, to receive marketing communications
  • to receive marketing communications when consenting to marketing emails, marketing SMS, marketing phone calls
  • our legitimate interests in operating our website, fulfilling contracts, maintaining security, analysing customer feedback, and meeting legal or regulatory obligations, in particular: conducting and defending legal claims, keeping a list of objections to data processing for marketing purposes, conducting correspondence and handling customer and potential customer inquiries (e-mail, telephone, contact form, chat)

Who we share your data with

In order to provide our services and provide you with products, there are several situations in which we need to disclose your personal information to others. We only work with trusted third-party service providers, such as Shopify, email marketing and analytics partners who process data on our behalf. All partners are bound by strict contractual obligations to protect your data and may not use it for their own purposes.

Your data may be entrusted to trusted contractors, such as:

  • warehouses where we store and pack shipments,
  • printing houses producing marketing materials or documents attached to shipments,
  • outsourced to logistics and postal partners,
  • banks and debt collection agencies,
  • Logistics Centre,
  • Marketing service providers (e.g. marketing agencies)
  • providers of hosting services, IT systems and services,
  • Legal service providers

We may only transfer your personal data to others in situations where we believe it is necessary and reasonable to:

  • Comply with legal obligations – when required by law, e.g. when a court, police or other state institution requests data in accordance with the regulations.
  • Enforce its rules and regulations- If someone violates the terms of service, the company can provide the data needed to clarify the matter.
  • Prevent abuse, fraud, and security issues – data can be exposed if there is a suspicion of fraud, hacking, security breach, etc.
  • Protect the safety of the company, customers and the public – the company can transfer data when it is necessary to prevent damage or threat, e.g. in the event of a serious risk to people or property.

How we secure your data

We are committed to protecting the personal information of our users and customers from unauthorized access, unauthorized alteration, disclosure or destruction of the information we hold by, among other things:

  • Encrypt many of our services with SSL,
  • We regularly review our data collection, storage, and processing practices, including physical security measures, to prevent unauthorized access to systems.
  • We limit access to personal data to only employees, contractors and agents who need to know this information in order to process it for us. These individuals are subject to strict contractual confidentiality obligations and may be disciplined or dismissed if they fail to comply with these obligations.

How long we keep your data

We only retain your personal data for as long as it is necessary to fulfil the purpose for which it was collected. If you opt out or request deletion, your data will be securely deleted, unless we are required by law to keep the data.

Depending on the purpose, we may process your data:

  • conducting direct marketing contact – until you withdraw your consent to such contact or object to the processing of your data for marketing purposes;
  • performance of concluded contracts for the supply of products (sales) – for the period of performance of the contract, then in connection with our legal obligations (including liability for compliance of goods with the sales contract) and later for the period of limitation of claims, but not for a total of 6 years;
  • tax settlement of sales, accounting documents – for a period of up to 6 years;
  • pursuing claims or defending against claims – until the case is resolved or the limitation period for claims expires;
  • keeping a list of objections to data processing for marketing purposes – until you withdraw your objection
  • answers to questions asked via the contact form, chat and telephone conversations – for the period of the correspondence itself, then until the statute of limitations for claims does not exceed 5 years
  • analytical and statistical activities in the use of the Online Store – for the next 24 months.

What rights do you have as a User and a customer of our company.

Under current law, you have a number of rights that you can exercise, as long as you are not exempt. The UK and European GDPR guarantees you:

  • The right to be informed – this refers to knowing how your personal data is used by the company
  • Right of access – this applies to access to the personal data we hold about you
  • Right to rectification – refers to the correction of any inaccuracies in this information
  • Right to erasure – this applies to the deletion of personal data that we hold
  • Right to restriction of processing – applies to the retention of processing or collection of data
  • Right to data portability – applies to the transfer of data to oneself or to someone else
  • Right to object – applies to the cessation of direct marketing
  • Right to lodge a complaint – if you are in any way dissatisfied with the way your personal data is processed or with how we have fulfilled your data subject request. You can file a complaint:
  • to the Information Commissioner's Office (ICO) - Website: https://ico.org.uk, Email: casework@ico.org.uk, Phone: 03031231113, Position: Information Commissioners' Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 9AF
  • and if you live in the EEA, you also have the right to lodge a complaint with your local supervisory authority or ColleXable, email: data@collexable,com, ColleXable Ltd registered in England and Wales (Company No. 17116045) with its registered office at 5th Floor, 16 Great Queen Street, Covent Garden, London WC2B 5DG, is authorised to deal with matters related to the EU GDPR, including liaising with the EEA supervisory authorities.

You can exercise your rights and make a request by contacting us at data@collexable.com as well as at our registered office at 5th Floor, 16 Great Queen Street, Covent Garden, London WC2B 5DG. 

Individual rights related to data processing may have their limitations, e.g. they may be granted only in situations described in detail in the law. The customer's rights can only be exercised if the data is no longer necessary for the purposes for which it was collected and processed and there are no overriding legitimate grounds for the processing of this data by the company.

You can withdraw your consent (for marketing) at any time. The withdrawal of consent does not affect the lawfulness of data processing until its withdrawal.

Our Privacy Policy is governed by the laws of England and Wales. If you are a consumer residing outside the UK, you may have rights under local data protection or consumer laws that cannot be restricted by this Policy. None of the information contained in the document limits these rights.

Whether We Use Cookies and Tracking Technologies

On the website, we use cookies and other similar technologies that collect and process information about how the website is used (to personalize your experience, analyse traffic and improve performance). Cookies and similar technologies are not typically used to collect information about a specific, identifiable individual. However, in some cases, the information they obtain may constitute personal information. You can manage or disable cookies at any time in your browser settings. For more detailed information on the policy on the use of cookies and similar technologies, please visit Cookie Policy.

How We Protect Children's Privacy

Our marketing communications, and products are designed for people aged 18 and over. We do not knowingly collect or process personal data from children under the age of 18. If we become aware that we have collected such data without consent, we will delete it immediately.

How we perform international data transfers

If you are located outside of the UK, we may transfer your personal data to servers or partners operating in other countries. In such cases, we implement lawful transfer mechanisms, such as the UK International Data Transfer Agreement, the EU Contractual Clauses, or other appropriate safeguards to provide further protection. Some providers operate outside of the UK or EEA. In such cases, we provide appropriate safeguards, including approved Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement, or other legal mechanisms.

When we make changes to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law or our business. Any updates will be posted here with the new effective date. We will also keep earlier versions of the Privacy Policy in an archive for your viewing. If changes to the privacy policy are material, we will provide a more prominent notice (including, for some services, an email notification of changes to the document).

ColleXable ALWAYS protects your privacy while building your collection.

 

 

0800 884 0926   |   collexable.com

ColleXable · 5th Floor, 16 Great Queen Street, Covent Garden

London, United Kingdom, WC2B 5DG

Company number: 17116045   |   VAT number: GB516581387