Privacy Policy

Last updated: October 2026

1. Who we are

This website (normalshoes.co.uk) is run by Normal Shoes, a small UK business that masters and packages films onto Blu-ray. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), Normal Shoes is the “controller” of the personal information described in this policy.

• Business name: Normal Shoes
• Postal address: Flat 113, Mariner Point, 83 Brighton Road, Shoreham-by-Sea, BN43 6DH
• Email: normalshoeseditions@gmail.com

If you have any questions about this policy or how we use your information, email us at the address above.

2. What we collect, and why

We only collect what you choose to give us through the forms on this site or when you email us. We don't ask for more than we need.

Form	What we collect	What we use it for	Lawful basis
Contact form	First and last name, email address, institution or course (optional), the role you select, and your message.	To reply to your enquiry and, if you ask, to quote for or discuss a project.	Legitimate interests (responding to people who contact us); and, where you're asking about a project, taking steps at your request before entering into a contract.
Brighton Rocks and Hastings Rocks film sign-up forms	First and last name, email address, film title, festival edition or year, runtime (optional), anything else you choose to tell us, and (Hastings Rocks) a record that you saw our note that registering interest grants no rights to your film.	To record your interest in having your film considered for a festival Blu-ray collection, and to contact you about it. Registering interest does not give us any rights to your film — a separate written agreement is always needed.	Taking steps at your request before entering into a contract; and legitimate interests (running the festival collections).
Pre-order forms (Hastings Rocks Collection and Archive releases)	First and last name, email address, number of copies, delivery address, any message you add, and confirmation that you've read our Terms and this Privacy Policy.	To record your pre-order request, email you to confirm your order and send payment details, fulfil and deliver your order, and handle cancellations, returns or refunds.	Contract (taking steps at your request before entering into a contract, and then performing it).
Emails you send us	Your email address, name and whatever you include in your message or attachments.	To reply and deal with your request.	Legitimate interests; or contract, where it relates to an order or project.

Once an order is completed, we also keep records of sales (for example your name, what you bought, the amount and the date) because tax and accounting law requires us to. The lawful basis for this is legal obligation.

Like almost every website, our hosting provider automatically records basic technical information when you visit — such as your IP address, browser type and the pages requested — to deliver the site and keep it secure. The lawful basis for this is our legitimate interests in running a secure, working website.

We will never sell your information, and we don't send marketing emails. If we ever want to, we'll ask for your consent first.

Please don't send us sensitive information (for example, health details) through the forms — we don't need it.

3. Who we share it with

We don't share your information with anyone except the service providers we need to run the business, who act on our behalf and only use it as we instruct:

• Netlify, Inc. (United States) hosts this website and receives and stores the information you submit through our forms, before passing it on to us by email.
• Google (Gmail) provides our email account, normalshoeseditions@gmail.com. Form submissions and emails you send us are stored there.
• Postal and courier services receive your name and delivery address when we send you an order.
• Stripe processes card payments. If you pay by card on our website, Stripe's secure payment window appears on the page, and your card details are entered with Stripe and processed by Stripe, not by us. We never see or store your full card number — we only receive confirmation of payment and limited details such as your name, email, amount paid and the last four digits of your card. Stripe also uses payment information to prevent fraud and meet its own legal obligations, under its own privacy policy. If you register a pre-order request instead and pay by bank transfer, we receive the name and bank details shown on your transfer through our bank. No payment is taken through the request forms on this website.

We may also disclose information if the law requires us to, or to protect our legal rights.

4. International transfers

Netlify, Google and Stripe may store and process information on servers in the United States and other countries outside the UK. Where that happens, the transfer is protected by safeguards recognised under UK data protection law — such as the UK–US “data bridge” (the UK Extension to the EU–US Data Privacy Framework) where the provider is certified, or the International Data Transfer Agreement / UK Addendum to the Standard Contractual Clauses in the provider's data processing terms. You can ask us for more information about these safeguards.

5. How long we keep it

• General enquiries and film sign-ups: for up to 2 years after our last contact with you, unless they turn into a project or agreement.
• Pre-order requests that don't go ahead: up to 12 months.
• Orders and sales records: 6 years from the end of the tax year they relate to, as required for tax and accounting purposes.
• Copies held by Netlify: we periodically delete form submissions from our Netlify account once they've reached our inbox.

After these periods we delete the information or, where that isn't possible, keep it securely and out of use until it can be deleted.

6. Cookies and tracking

This website does not use cookies, analytics, advertising or tracking tools of any kind. The only thing it stores on your device is your light/dark theme choice, which is saved in your browser's local storage so the site remembers your preference. It never leaves your device and isn't sent to us. If we ever add analytics or other non-essential cookies, we'll update this policy and ask for your consent first.

Links to other sites (such as Instagram or the festival websites) are covered by those sites' own privacy policies.

7. Your rights

Under UK data protection law you have the right to:

• Access — ask for a copy of the personal information we hold about you.
• Rectification — ask us to correct information that's wrong or incomplete.
• Erasure — ask us to delete your information (unless we have to keep it, for example for tax records).
• Restriction — ask us to limit how we use your information.
• Objection — object to us using your information where we rely on legitimate interests.
• Data portability — ask for information you gave us in a commonly used electronic format.
• Withdraw consent — where we rely on your consent, withdraw it at any time.

To use any of these rights, email normalshoeseditions@gmail.com. There's no charge, and we'll respond within one month. We may need to confirm your identity first.

8. Complaints

If you're unhappy with how we've handled your information, please tell us first so we can try to put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO):

• Website: ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

9. Keeping your information secure

Our website is served over an encrypted (HTTPS) connection, and we use reputable providers with strong security for hosting and email. Access to your information is limited to the people at Normal Shoes who need it.

10. Changes to this policy

We'll update this page if the way we handle personal information changes. The date at the top shows when it was last revised.

See also our Terms of Sale.