Skip to content

Free delivery, every size, every order•Framed by hand. Ready in 14 working days.Free delivery, every size, every order · Framed by hand. Ready in 14 working days.Free delivery, every size, every order · Framed by hand. Ready in 14 working days.

Legal

Privacy Policy

Last updated: 12 May 2026

The Good Season ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share and safeguard personal information when you visit https://thegoodseason.co.uk, purchase from our store, sign up to our mailing list, or otherwise interact with us.

We act as the data controller for the personal information described here. This policy is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

The Good Season is the trading name of The Good Season Co. Ltd, a company registered in England & Wales under company number 14988350, with its registered office at 15 Surrey Close, Corby, England, NN17 2TG. We are a UK-based luxury photography house. For data protection enquiries or to exercise any of your rights, please contact us at privacy@thegoodseason.co.uk.

2. Information we collect

We collect the following categories of personal information:

Information you give us

  • Account and order details: name, billing and shipping address, email address, telephone number, password, and order history.
  • Payment information: card details are collected and processed by our payment providers (Shopify Payments, PayPal, Apple Pay, Google Pay, Klarna). We do not store full card numbers on our servers.
  • Marketing preferences: the email address you provide to our newsletter or The Monaco Club, and your consent choices.
  • Customer service correspondence: messages you send us via our contact form, email, or social channels.

Information we collect automatically

  • Device and browsing data: IP address, browser type and version, operating system, device identifiers, referring URL, and pages viewed.
  • Usage data: products viewed, time on page, search terms, cart activity, and Art Swipe interactions. Collected via our analytics provider (PostHog) where you have consented.
  • Cookies and similar technologies: see our Cookie Policy for a full list.

Information from third parties

  • Payment confirmations and fraud checks from Shopify and our payment processors.
  • Authentication details if you sign in via a third-party account.
  • Delivery and tracking data from our logistics partners (tracked next-working-day couriers and international air-mail providers).

3. How we use your information

We use personal information for the following purposes, each supported by a lawful basis under the UK GDPR:

  • To process your orders: to take payment, arrange delivery, handle returns, and provide customer service. (Lawful basis: performance of a contract.)
  • To manage your account: to authenticate you, store your preferences, and honour your Monaco Club benefits. (Lawful basis: performance of a contract.)
  • To send marketing communications: newsletters, product launches, and editorial recommendations, where you have opted in. You can unsubscribe at any time. (Lawful basis: consent.)
  • To improve the site: product analytics, A/B testing, and diagnosing bugs (via PostHog and Sentry). (Lawful basis: consent for analytics cookies; legitimate interests for strictly necessary error tracking.)
  • To prevent fraud: screening orders and detecting abuse. (Lawful basis: legitimate interests and legal obligation.)
  • To comply with the law: including tax, accounting, and consumer-rights obligations. (Lawful basis: legal obligation.)

4. Who we share your information with

We share personal information only with trusted service providers who process it on our behalf, or where we are required to by law:

  • Shopify: our e-commerce platform, hosting store data and processing payments.
  • Sanity: our content management system for editorial content (no customer PII stored here).
  • Cloudflare / Shopify Oxygen: edge hosting and security.
  • PostHog: product analytics, hosted in the EU, used only where you consent.
  • Sentry: error monitoring. IP addresses are truncated and no form contents are captured.
  • Klaviyo and similar providers: transactional and marketing email delivery.
  • Payment providers: Shopify Payments, PayPal, Klarna, Apple Pay, Google Pay.
  • Logistics partners: the tracked, insured couriers we use to deliver framed pieces in the UK and internationally.
  • Professional advisers: accountants, lawyers, and insurers, under duties of confidentiality.
  • Regulators and law enforcement: where we are required to disclose information by law or to protect our rights.

We never sell your personal information.

5. International transfers

Some of our providers process data outside the UK, including in the European Economic Area and the United States. Where this is the case we rely on UK adequacy regulations, Standard Contractual Clauses with the UK International Data Transfer Addendum, or equivalent safeguards to ensure your data remains protected.

6. How long we keep your information

We retain personal information only for as long as we need it:

  • Order records: 7 years, to comply with UK tax and accounting rules.
  • Account data: for as long as your account is active, then deleted or anonymised on request or after 3 years of inactivity.
  • Marketing data: until you unsubscribe, then suppressed to ensure we honour your request.
  • Analytics data: up to 12 months in identifiable form, aggregated thereafter.
  • Support correspondence: 3 years.

7. Your rights

Under UK data protection law you have the right to:

  • Access the personal information we hold about you.
  • Ask us to correct inaccurate information.
  • Ask us to erase your information ("right to be forgotten").
  • Restrict or object to our processing.
  • Receive a portable copy of the information you gave us.
  • Withdraw consent at any time, where consent is the lawful basis.
  • Lodge a complaint with the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email privacy@thegoodseason.co.uk. We will respond within one month.

8. Security

All traffic to our site is encrypted using TLS. Payment data is handled by PCI-DSS compliant providers. We use access controls, secure hosting, and regular audits to protect your information. No system is perfectly secure, so we encourage you to use a strong, unique password and to log out of shared devices.

9. Children

The Good Season is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us with data, please contact us and we will remove it.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will change when we do, and material changes will be notified to account holders by email.

11. Contact us

Data protection enquiries: privacy@thegoodseason.co.uk
General enquiries: hello@thegoodseason.co.uk
Customer service: +44 333 880 8242 (Monday to Friday, 9am to 6pm UK time).