Privacy Policy

Last updated: 3 August 2026

The Good Season ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share and safeguard personal information when you visit https://thegoodseason.co.uk, purchase from our store, sign up to our mailing list, or otherwise interact with us.

We act as the data controller for the personal information described here. This policy is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

The Good Season is the trading name of The Good Season Co. Ltd, a company registered in England & Wales under company number 14988350, with its registered office at 15 Surrey Close, Corby, England, NN17 2TG. We are a UK-based luxury photography house. For data protection enquiries or to exercise any of your rights, please contact us at privacy@thegoodseason.co.uk.

2. Information we collect

We collect the following categories of personal information:

Information you give us

Account and order details: name, billing and shipping address, email address, telephone number, password, and order history.
Payment information: card details are collected and processed by our payment providers (Shopify Payments, PayPal, Apple Pay, Google Pay, Klarna). We do not store full card numbers on our servers.
Marketing preferences: the email address you provide to our newsletter or The Monaco Club, and your choices about which subjects you wish to hear about.
Consent records: when you opt in to marketing email we keep a record of that act: your email address, the page or form you used, the date and time, the subjects you agreed to, and the IP address and browser identification of the request. We are required to be able to demonstrate that you consented, and this is how we do it. You can ask us for a copy, or to erase it, at any time.
Customer service correspondence: messages you send us via our contact form, email, or social channels, including any files you attach.

Information we collect automatically

Device and browsing data: IP address, browser type and version, operating system, device identifiers, referring URL, and pages viewed.
Usage data: products viewed, time on page, search terms, cart activity, and Art Swipe interactions. Collected via our analytics provider (PostHog). Until you consent to analytics cookies this is measured anonymously, with nothing stored on your device; with your consent it is linked to a first-party analytics cookie so repeat visits can be recognised.
Cookies and similar technologies: see our Cookie Policy for a full list.

Information from third parties

Payment confirmations and fraud checks from Shopify and our payment processors.
Authentication details if you sign in via a third-party account.
Delivery and tracking data from our logistics partners (tracked next-working-day couriers and international air-mail providers).

3. How we use your information

We use personal information for the following purposes, each supported by a lawful basis under the UK GDPR:

To process your orders: to take payment, arrange delivery, handle returns, and provide customer service. (Lawful basis: performance of a contract.)
To manage your account: to authenticate you, store your preferences, and honour your Monaco Club benefits. (Lawful basis: performance of a contract.)
To send marketing communications: newsletters, product launches, and editorial recommendations, where you have opted in. You can unsubscribe at any time. (Lawful basis: consent.)
To improve the site: product analytics, A/B testing, and diagnosing bugs (via PostHog and Sentry). (Lawful basis: legitimate interests for anonymous, cookie-free visit measurement and strictly necessary error tracking; consent for analytics cookies and session recordings.)
To prevent fraud: screening orders and detecting abuse. (Lawful basis: legitimate interests and legal obligation.)
To comply with the law: including tax, accounting, and consumer-rights obligations. (Lawful basis: legal obligation.)

4. Who we share your information with

We share personal information only with trusted service providers who process it on our behalf, or where we are required to by law:

Shopify: our e-commerce platform, hosting store data and processing payments.
Sanity: our content management system. It holds our editorial content, and also the messages you send through our contact form and the consent records described above.
Cloudflare / Shopify Oxygen: edge hosting and security.
PostHog: product analytics, hosted in the EU. Without your consent it receives only anonymous, cookie-free visit data; session recordings and repeat-visit cookies require consent.
Sentry: error monitoring. IP addresses are truncated and no form contents are captured.
Resend: delivery of both transactional email (such as an enquiry acknowledgement or an appointment confirmation) and marketing email. Resend holds your email address, your name where you have given it, and your choices about what you wish to hear about.
Payment providers: Shopify Payments, PayPal, Klarna, Apple Pay, Google Pay.
Logistics partners: the tracked, insured couriers we use to deliver framed pieces in the UK and internationally.
Professional advisers: accountants, lawyers, and insurers, under duties of confidentiality.
Regulators and law enforcement: where we are required to disclose information by law or to protect our rights.

We never sell your personal information.

5. International transfers

Some of our providers process data outside the UK, including in the European Economic Area and the United States. Where this is the case we rely on UK adequacy regulations, Standard Contractual Clauses with the UK International Data Transfer Addendum, or equivalent safeguards to ensure your data remains protected.

6. How long we keep your information

We retain personal information only for as long as we need it:

Order records: 7 years, to comply with UK tax and accounting rules.
Account data: for as long as your account is active, then deleted or anonymised on request or after 3 years of inactivity.
Marketing data: until you unsubscribe, then suppressed to ensure we honour your request.
Consent records: for as long as you are subscribed and for 3 years afterwards, which is the period in which we could be asked to demonstrate that you agreed.
Analytics data: up to 12 months in identifiable form, aggregated thereafter.
Support correspondence: 3 years.

7. Your rights

Under UK data protection law you have the right to:

Access the personal information we hold about you.
Ask us to correct inaccurate information.
Ask us to erase your information ("right to be forgotten").
Restrict or object to our processing.
Receive a portable copy of the information you gave us.
Withdraw consent at any time, where consent is the lawful basis.
Lodge a complaint with the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email privacy@thegoodseason.co.uk. We will respond within one month.

8. Security

All traffic to our site is encrypted using TLS. Payment data is handled by PCI-DSS compliant providers. We use access controls, secure hosting, and regular audits to protect your information. No system is perfectly secure, so we encourage you to use a strong, unique password and to log out of shared devices.

9. Children

The Good Season is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us with data, please contact us and we will remove it.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will change when we do, and material changes will be notified to account holders by email.

11. Contact us

Data protection enquiries: privacy@thegoodseason.co.uk
General enquiries: hello@thegoodseason.co.uk
Customer service: +44 333 880 8242 (Monday to Friday, 9am to 6pm UK time).