Privacy Policy

doLast updated: 25 September 2026

key is a trading name of Fairbairn Brands Ltd, a company registered in Scotland under number SC901288. Our registered office is 3 Yarrow Place, Edinburgh, Scotland, EH4 8FY. We are the data controller of your personal information for the purposes of UK data protection law.

If you have any questions about this policy or wish to exercise your rights, please contact us at hello@youarekey.co.uk.

What information we collect

Depending on how you interact with us, we may collect:

Contact details — your name, email address, postal address and phone number
Order and transaction information — items purchased, payment confirmation, delivery details and order history
Payment information — transaction reference and payment method; we do not store your full payment card details (payments are handled by our payment provider)
Account information — if you create an account, your login credentials and preferences
Communications — the content of any messages you send us, for example via our contact form or email
Device and usage information — your IP address, browser type, pages visited and how you navigate our website, collected automatically when you visit our store

Why we collect it and our lawful basis

We process your personal information for the following purposes:

Order fulfilment
We use your contact details, order information and delivery address to process and fulfil your order, arrange delivery and handle returns and exchanges. This processing is necessary to perform our contract with you.

Customer service
We use your contact details and any information you share with us to respond to your enquiries and resolve problems. This processing is necessary for our legitimate interests in providing effective customer support.

Legal record keeping
We retain certain transaction and account information to comply with our legal and tax obligations. This processing is necessary to comply with a legal obligation.

Fraud prevention and security
We use order, device and payment information to detect and prevent fraudulent or unauthorised activity. This processing is based on our legitimate interests in protecting our business and customers.

Marketing emails
If you sign up to receive marketing from us, we will send you emails about key products and news. We may also send marketing emails to existing customers about similar key products where permitted under the UK Privacy and Electronic Communications Regulations. You can unsubscribe from any marketing email at any time using the unsubscribe link in the email.

Website analytics and advertising
We may collect information about how visitors use our website to help us improve it. Where this involves cookies or similar technologies that are not strictly necessary, we will only do so in accordance with your cookie choices. You can update your preferences at any time using the cookie settings on our website.

Who we share your information with

We share personal information only where necessary and with appropriate protections in place. Recipients include:

Shopify — our store is hosted and powered by Shopify Inc., which processes personal information on our behalf as a data processor to provide the platform, payment infrastructure and related services. Shopify may also process information in its own capacity as a data controller for certain purposes; see Shopify's Privacy Policy for details.
Payment providers — payment processing is handled by Shopify Payments and associated providers (including support for Shopify Pay, Apple Pay and Google Pay). We do not store your full card details.
Delivery providers — we share your name and delivery address with Royal Mail to fulfil your order.
Professional advisers — we may share information with accountants, lawyers or insurers where necessary for our business operations.
Law enforcement or regulatory authorities — where we are required to do so by law or in response to a valid legal request.

We do not sell your personal information.

International transfers

Shopify operates globally, which means your personal information may be processed outside the United Kingdom. Shopify relies on recognised transfer mechanisms, including the UK's International Data Transfer Agreement and equivalent contractual safeguards, when transferring data internationally.

How long we keep your information

We keep your personal information for as long as necessary for the purposes described in this policy, including to fulfil orders, maintain our accounts, comply with legal obligations and resolve disputes.

Your rights

If you are based in the UK, you have the following rights under UK data protection law:

Access — you can ask us for a copy of the personal information we hold about you
Correction — you can ask us to correct inaccurate or incomplete information
Erasure — you can ask us to delete your personal information in certain circumstances
Restriction — you can ask us to restrict how we process your information in certain circumstances
Portability — you can ask us to provide your information in a portable format or transfer it to another controller in certain circumstances
Objection — you can object to processing based on legitimate interests
Withdrawal of consent — where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, contact us at hello@youarekey.co.uk. We will respond within one month.

Complaints

If you are unhappy with how we handle your personal information, please contact us at hello@youarekey.co.uk and we will do our best to help.

You also have the right to lodge a complaint directly with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Third-party links

Our website may contain links to third-party sites. We are not responsible for their privacy practices and recommend you read their privacy policies before sharing any personal information with them.

Changes to this policy

We may update this policy from time to time. The current version will always be available on this page, with the date it was last updated shown at the top.