Privacy policy

Last updated: 31 August 2026

Martyrdom, a trading name of Spearhead Studios Ltd, operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Martyrdom is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in it.

Personal Information We Collect or Process

When we use the term "personal information," we mean information that identifies or can reasonably be linked to you or another person. It does not include information collected anonymously or that has been de-identified so it can no longer identify you. Depending on how you interact with the Services, we may collect or process:

Contact details — name, address, billing address, shipping address, phone number, and email address.
Payment details — your card and payment details are collected and processed directly by our payment provider (Shopify Payments or an equivalent processor); we retain a record of the transaction (amount, date, order reference, payment status) but do not store your full card number.
Account information — username, password, security questions, preferences and settings.
Transaction information — items you view, add to your cart or wishlist, purchase, return, exchange or cancel, and your past order history.
Communications with us — the content of any support enquiry or other message you send us.
Device information — your device, browser, network connection, IP address, and other unique identifiers.
Usage information — how and when you interact with the Services.

Personal Information Sources

We may collect personal information:

Directly from you — when you create an account, place an order, sign up to hear about the Kickstarter, or contact us.
Automatically through the Services — from your device when you use the site, and through cookies and similar technologies (see Cookies below).
From our service providers — including Shopify and our payment processor, when they collect or process information on our behalf.
From our partners or other third parties.

Cookies and Similar Technologies

We use cookies and similar technologies to run the Services, remember your cart and preferences, understand how the site is used, and, where you've consented, show relevant marketing.

Where required by UK law, we ask for your consent to non-essential cookies (such as analytics and marketing cookies) through the consent banner shown when you first visit the site. You can change your preferences at any time via that banner, or through your browser settings. Essential cookies needed to operate the store (such as keeping items in your cart) don't require consent and can't be switched off without affecting how the site works.

This banner governs cookies and tracking added through Shopify's built-in tools. If we later add third-party marketing or analytics tools, we'll ensure they're integrated with our consent settings so they honour your choice, and we'll update this policy to reflect any new tracking in use.

How We Use Your Personal Information, and Our Legal Basis for Doing So

Under UK GDPR, we can only use your personal information where we have a lawful basis to do so. Depending on the purpose, we rely on:

Performance of a contract — processing your order, taking payment, arranging shipping, handling returns and exchanges, and managing your account.
Legitimate interests — securing the Services and preventing fraud, improving the Services, and marketing to existing customers about similar products, balanced against your right to privacy.
Consent — non-essential cookies, and marketing communications where consent is the basis for sending them (for example, newsletter sign-ups).
Legal obligation — keeping the records tax and company law require us to keep (see Retention below), and responding to valid legal requests.

The purposes we use your information for are:

Providing, tailoring and improving the Services — fulfilling orders, processing returns and exchanges, remembering your preferences, managing your account, and enabling you to post reviews.
Marketing and advertising — sending marketing communications by email where you've agreed to receive them, and showing relevant advertising based on your activity on the Services.
Security and fraud prevention — authenticating your account and protecting the Services and our users. You're responsible for keeping your account credentials safe; please don't share them with anyone else.
Communicating with you — customer support and general correspondence.
Legal reasons — complying with the law, responding to valid legal requests, and enforcing our terms and policies.

How We Disclose Personal Information

We may disclose your personal information to:

Shopify and other service providers who perform services on our behalf, such as payment processing, data analytics, customer support, cloud storage, and fulfilment.
Marketing partners, to support advertising. Depending on where you live, you may have a right to opt out of this — see Your Rights and Choices below.
Third parties you direct us to share with — for example, delivery couriers, or where you use a social login integration.
Our affiliates, within our corporate group.
Others, where necessary in connection with a business transaction such as a merger, to comply with a legal obligation, to enforce our terms or policies, or to protect the Services, our rights, or the rights of others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit will be transmitted to and shared with Shopify and, where relevant, third parties located outside the UK. We also use certain Shopify features that draw on data from your interactions with our store alongside other merchants using Shopify. For those purposes, Shopify acts as the party responsible for that processing, including responding to your requests about it. You can read more, and exercise relevant rights, at the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may link to websites or platforms operated by third parties. If you follow those links, we recommend you review their own privacy and security terms — we don't control them, and we're not responsible for their content, privacy practices, or security. Anything you share on public or semi-public platforms, including third-party social networks, may be visible to others without limitation as to its further use.

Children's Data

The Services are not intended for children, and we do not knowingly collect personal information from anyone under 13. If you're the parent or guardian of a child who has provided us with their personal information, please contact us using the details below and we'll delete it.

Security and Retention

No security measures are perfect, and information sent to us may not be secure while in transit — please avoid using unsecured channels to send us sensitive information.

How long we keep personal information depends on why we hold it. As a guide:

Order and financial records are kept for at least 6 years, as required by UK tax law.
Account information is kept for as long as your account is active, and for a reasonable period after in case you return.
Marketing preferences are kept until you unsubscribe or ask us to delete them.

We only keep information for as long as we have a genuine business or legal reason to.

Your Rights and Choices

If you're in the UK or the EEA, you have the following rights over your personal information, subject to certain exceptions:

Access — request a copy of the personal information we hold about you.
Deletion (erasure) — request that we delete it.
Correction (rectification) — request that we correct inaccurate information.
Portability — request a copy in a portable format, or that we transfer it to a third party, in certain circumstances.
Objection — object to our processing your information for certain purposes, including direct marketing.
Restriction — ask us to limit how we use your information while a request is resolved.
Withdraw consent — where we rely on your consent, withdraw it at any time, without affecting the lawfulness of processing carried out before you withdrew it.

If you're outside the UK or EEA, you may have some or all of these rights depending on local law.

Marketing preferences. You can opt out of marketing emails at any time using the unsubscribe link in the email. We'll still send you non-promotional emails, such as order confirmations and account notices.

To exercise any of these rights, contact us using the details below. We may need to verify your identity first, and we won't discriminate against you for making a request. You can authorise someone else to make a request on your behalf, but we'll need proof of that authorisation and may still need to verify your identity directly. For more on rights relating to data Shopify processes, see the Shopify Privacy Portal.

Complaints

If you're unhappy with how we've handled your personal information, please contact us first using the details below so we can try to put it right.

You also have the right to complain to your data protection authority. In the UK, this is the Information Commissioner's Office (ICO) — ico.org.uk, 0303 123 1113. If you're in the EEA, you can find your local authority here.

International Transfers

We may transfer, store and process your personal information outside the country you live in, including with Shopify's infrastructure and other service providers.

Where we transfer personal information out of the UK, we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or transfers to a country the UK government has recognised as providing adequate protection. Where we transfer information out of the EEA, we rely on equivalent EU mechanisms.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes in our practices or for legal or operational reasons. We'll post the revised version here and update the date at the top.

Contact

Questions about this Privacy Policy, or requests to exercise your rights, can be sent to info@martyrdom.co.uk, or by post to:

Martyrdom, a trading name of Spearhead Studios Ltd Company number: 16571640, registered in England and Wales 167-169 Great Portland Street, London, W1W 5PF, United Kingdom

For the purposes of UK data protection law, we are the data controller of your personal information.