Privacy Notice
Last updated: 2 May 2026
This Privacy Notice explains how THE WORLD OF CERES LTD, trading as Ceres Shop, collects, uses, stores and protects your personal data when you visit our website, create an account, place an order, subscribe to marketing, or contact us.
This notice is designed to explain clearly what personal data we collect, why we use it, who we may share it with, how long we keep it, and the rights you have under UK data protection law.
1. Who We Are
Ceres Shop is operated by:
THE WORLD OF CERES LTD
Company number: 06750391
The Old Exchange, 521 Wimborne Road East,
Ferndown, England, BH22 9NH
If you have any questions about this Privacy Notice or your personal data, contact us at:
Email: info@worldofceres.com
2. The Information We Collect
We may collect, use, store and transfer the following types of personal data:
- Identity data: name and account details.
- Contact data: email address, phone number, billing address and delivery address.
- Account data: login details, account preferences and order history.
- Transaction data: products ordered, payment confirmation, delivery details and refund records.
- Technical data: IP address, browser type, device information, pages visited and website usage data.
- Marketing and communications data: marketing preferences, email engagement and communication history.
We do not intentionally collect special category personal data through this website.
3. How We Collect Your Data
- When you place an order.
- When you create or use an account.
- When you contact us by email, phone, form or other communication method.
- When you subscribe to marketing communications.
- When you browse or interact with our website.
- Through cookies, analytics tools and tracking technologies, where permitted.
4. How We Use Your Information
We use personal data for the following purposes:
- To process, fulfil and deliver orders.
- To manage your account.
- To communicate with you about orders, enquiries, delivery and support.
- To process payments, refunds and account credits.
- To improve our website, products and services.
- To prevent fraud, protect our business and maintain website security.
- To send marketing communications where permitted.
- To comply with legal, tax and accounting obligations.
5. Legal Basis for Processing
UK data protection law requires us to have a lawful basis for using personal data. The ICO states that privacy information should explain the purposes of processing and the lawful basis relied on. [oai_citation:0‡ICO](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/a-guide-to-lawful-basis/?utm_source=chatgpt.com)
| Purpose | Legal basis |
|---|---|
| Processing and delivering orders | Contract |
| Customer service and order support | Contract / legitimate interests |
| Payment, refund and transaction records | Contract / legal obligation |
| Accounting, tax and legal record keeping | Legal obligation |
| Website security and fraud prevention | Legitimate interests |
| Service improvement and basic business analysis | Legitimate interests |
| Email marketing | Consent, or soft opt-in where permitted |
| Analytics and advertising cookies | Consent |
6. Payments
Payments are processed by third-party payment providers. We do not store your full card details on our own systems. Payment providers may process your payment information in accordance with their own privacy and security terms.
7. Marketing
If you opt in to marketing, or where we are otherwise permitted to contact you, we may send you emails about products, offers, updates and useful information.
You can unsubscribe at any time using the unsubscribe link in our emails or by contacting us at info@worldofceres.com.
8. Cookies and Tracking
We use cookies and similar technologies to operate our website, improve user experience, understand website usage and measure advertising performance.
This may include:
- Essential cookies: required for the website, basket and checkout to work.
- Google Analytics: used to understand website usage and performance.
- Meta Pixel: used to measure advertising performance.
- Klaviyo: used for email marketing, customer communications and marketing performance.
We only use non-essential cookies where you have given consent through our cookie banner or cookie settings.
9. Sharing Your Data
We may share personal data with trusted third parties where necessary to operate our website, fulfil orders, provide services and comply with legal obligations.
- Payment processors.
- Delivery providers and couriers.
- Email marketing platforms, including Klaviyo.
- Analytics and advertising platforms, including Google and Meta.
- Website, hosting and technology providers.
- Professional advisers, insurers, accountants or legal advisers where required.
- Regulators, tax authorities or law enforcement where legally required.
We do not sell your personal data.
10. International Transfers
Some service providers may process personal data outside the UK. Where this happens, appropriate safeguards are used where required, such as adequacy regulations, approved contractual protections, or other legally recognised safeguards.
11. Data Retention
We keep personal data only for as long as necessary for the purpose it was collected. The ICO recommends documenting retention periods for different categories of personal data. [oai_citation:1‡ICO](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-protection-principles/a-guide-to-the-data-protection-principles/storage-limitation/?utm_source=chatgpt.com)
- Order and transaction records are usually kept for accounting, tax and legal purposes.
- Account data is kept while your account remains active, unless you request deletion and we are not legally required to retain it.
- Marketing data is kept until you unsubscribe, withdraw consent or ask us to stop contacting you.
- Customer service communications may be kept where needed to manage enquiries, complaints or disputes.
- Cookie and analytics data is retained according to the settings of the relevant platform and your cookie preferences.
12. Data Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure. Access to personal data is limited to those who need it for business purposes.
13. Your Rights
Under UK data protection law, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete personal data.
- Request deletion of your personal data.
- Restrict or object to certain processing.
- Withdraw consent where processing is based on consent.
- Request transfer of your personal data where applicable.
- Object to direct marketing at any time.
These rights are not always absolute and may depend on the legal basis for processing and our legal obligations. To exercise your rights, contact us at info@worldofceres.com.
14. Complaints
If you have concerns about how we use your personal data, please contact us first so we can try to resolve the issue.
You also have the right to complain to the UK Information Commissioner’s Office (ICO).
Website: ico.org.uk
15. Changes to This Notice
We may update this Privacy Notice from time to time. Any updates will be posted on this page with a revised “Last updated” date.