Privacy policy
Last updated: 2 September 2026
This Privacy Policy explains how R&R Investigations collects, uses, stores and shares personal information when you visit our website, make a purchase, contact us, subscribe to marketing communications or otherwise interact with us.
R&R Investigations is operated by R. Thirteen Graves, sole trader.
For the purposes of UK data protection law, R. Thirteen Graves trading as R&R Investigations is the data controller responsible for the personal information described in this policy.
You can contact us about privacy or data protection at:
R&R Investigations
Email: RandRInvestigate@gmail.com
1. Personal information we collect.
Depending on how you interact with our store, we may collect information including your name, email address, telephone number, billing and delivery address, order details, products purchased or viewed, correspondence with us, account information where customer accounts are used, and marketing preferences.
When you visit the website, technical information may also be collected automatically. This can include your IP address, device and browser information, network connection, pages viewed, searches, interactions with the store and information collected through cookies or similar technologies.
When you make a payment, payment information is processed by Shopify and/or the relevant payment provider. We do not normally receive or store your complete payment card details.
2. How we use your information and our lawful bases.
We process personal information only where we have a lawful basis for doing so.
Processing and fulfilling orders.
We use information such as your name, contact details, address and order information to process your purchase, take payment, dispatch your order, provide order updates and deal with returns or refunds.
Our lawful basis is generally performance of a contract with you.
Customer service and enquiries.
We use information you provide when contacting us to respond to enquiries, investigate problems, deal with damaged or missing orders and provide customer support.
Depending on the circumstances, our lawful basis is performance of a contract or our legitimate interests in operating the business and providing effective customer service.
Accounting, tax and legal obligations.
We may retain and use transaction and customer information where necessary for accounting, taxation, fraud prevention, regulatory or other legal requirements.
Our lawful basis is compliance with a legal obligation and, where appropriate, our legitimate interests in maintaining proper business records and protecting our legal rights.
Preventing fraud and keeping the store secure.
We and our service providers may process technical, transaction and account information to identify suspected fraud, abuse, security threats or other unlawful activity.
Our lawful basis is our legitimate interests in protecting our customers, our business and our website.
Improving the website and our services.
We may use information about how visitors interact with the website to understand store performance, troubleshoot problems and improve the customer experience.
Where the processing requires consent, for example through certain non-essential cookies or tracking technologies, we rely on your consent.
Where consent is not required and the processing is otherwise permitted by law, we may rely on our legitimate interests in improving and operating our business.
Marketing
If you subscribe to our mailing list, we may use your contact details to send you news, new-product announcements, offers and other R&R Investigations marketing.
Where required, we rely on your consent.
In circumstances where UK electronic-marketing rules allow us to contact an existing customer about similar products or services without separate prior consent, we may rely on the permitted existing-customer or “soft opt-in” rules, provided the required conditions are met.
You can unsubscribe at any time using the unsubscribe link in our emails or by contacting us.
3. Shopify
Our online store is hosted using Shopify.
Shopify provides the ecommerce platform that enables us to operate the store and may process personal information in connection with services such as checkout, payments, store functionality, security, analytics and customer interactions.
Shopify may also process information independently for certain purposes in accordance with its own privacy documentation.
4. Who we share information with.
We may share personal information where reasonably necessary with organisations that help us operate the store, including Shopify, payment processors, delivery and postal providers, website and technology providers, email or marketing providers, professional advisers such as accountants, and other service providers we use to run the business.
We may also disclose information where required by law, court order or regulatory authority, or where reasonably necessary to establish, exercise or defend legal rights or to prevent fraud or unlawful activity.
We do not sell customer contact information to third parties for them to use for their own direct marketing.
5. Delivery providers
Where you place an order, we provide the information reasonably necessary to the relevant postal or delivery provider so that your parcel can be delivered.
This will normally include information such as your name and delivery address and, where required for the delivery service, your email address or telephone number.
6. Cookies and similar technologies
Our website uses cookies and similar technologies.
Some are necessary for the website and checkout to function properly. Others may be used for analytics, personalisation, advertising or other non-essential purposes.
Where consent is required by law, non-essential cookies or tracking technologies will only be used in accordance with the choices you make through our cookie/privacy controls.
You can review or change your preferences using the privacy or cookie settings made available on the website.
7. International transfers
Some of the service providers we use, including Shopify and associated technology providers, may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we seek to ensure that appropriate lawful safeguards are used where required. These may include transfers to countries recognised as providing an adequate level of protection or contractual and other safeguards permitted under UK data protection law.
Further information about safeguards used by individual service providers may be available through their own privacy documentation.
8. How long we keep information
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, accounting, tax and regulatory requirements.
Order and transaction records may therefore be retained for a number of years after a purchase.
As a sole trader, we are required to retain relevant business and tax records for the periods prescribed by HM Revenue & Customs.
Customer-service correspondence will normally be retained only for as long as reasonably necessary to resolve the enquiry and maintain appropriate business records.
Marketing information is retained until you unsubscribe, withdraw consent where applicable, or we determine that it is no longer appropriate to retain it.
Information may sometimes be retained for longer where reasonably necessary to establish, exercise or defend legal claims.
9. Your data protection rights
Depending on the circumstances, UK data protection law may give you rights to request access to personal information we hold about you, ask us to correct inaccurate information, request deletion of information, restrict certain processing, receive certain information in a portable format and object to certain uses of your information.
Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
Some rights are subject to legal conditions and exemptions, so they do not apply in every circumstance.
Your right to object
Where we process your personal information on the basis of our legitimate interests, you may have the right to object to that processing.
You also have the right to object at any time to the use of your personal information for direct marketing purposes.
To exercise a data protection right, contact us at RandRInvestigate@gmail.com.
We may need to request information to verify your identity before acting on a request.
10. Complaints
If you have concerns about how we use your personal information, please contact us first at RandRInvestigate@gmail.com so that we can investigate.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
11. Children
Our website and products are not specifically directed at children and we do not knowingly seek to collect personal information directly from children for the purpose of providing our services.
If you believe that a child has provided us with personal information inappropriately, please contact us.
12. Automated decision-making
We may use automated systems provided by Shopify, payment providers or other service providers to assist with fraud prevention, security and transaction screening.
We do not ordinarily make decisions about customers based solely on automated processing that produce legal or similarly significant effects.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, services, legal requirements or data-protection practices.
The current version will be published on this page and the “last updated” date will be amended when appropriate.
14. Contact
For privacy enquiries, data-protection requests or complaints, please contact:
R&R Investigations
Operated by: R. Thirteen Graves, sole trader.
Email: RandRInvestigate@gmail.com
Business address: 24 Bishopton Ln, Stockton-on-Tees TS18 2AA