Privacy policy

Last Updated: May, 2026

This Privacy Policy describes how AP Media Lab LTD ("we," 
"us," or "our"), a company registered in England and Wales trading as Elliot & Stone, with registered office at 71-75 Shelton Street, Covent Garden, 
London WC2H 9JQ, United Kingdom, collects, uses, and discloses 
your personal information when you visit, use, or make a 
purchase from our website or otherwise communicate with us 
(collectively, the "Services").

For the purposes of UK GDPR and the Data Protection Act 2018, 
AP Media Lab LTD is the data controller for the personal 
information processed through elliotandstone.com.

We are committed to protecting your privacy and handling your personal data responsibly. By using and accessing any of the Services, you acknowledge that you have read and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

1. Personal Information We Collect

We collect personal information when you interact with our website, including when you browse our collections, place an order, or contact our support team.

Information You Provide Directly to Us:

  • Contact Details: Name, billing address, shipping address, phone number, and email address.

  • Financial Information: Payment card details, transaction confirmations, and secure billing information (processed directly and securely by our third-party payment providers).

  • Customer Support Communications: Any information or correspondence you include when contacting us regarding inquiries, orders, or support.

Information Collected Automatically:

  • Device Information: Information about your device, browser, or network connection, your IP address, and other unique system identifiers.

  • Usage Information: Information regarding your interactions with our website, including pages visited, items added to your cart, items added to your wishlist, time spent on the site, and referring/exit pages.

  • Cookies and Tracking Technologies: We utilize cookies and similar data collection technologies to power shopping cart functionality, analyze website traffic, and support targeted marketing efforts (including Google Ads). You can manage or disable cookies through your browser settings.

2. How We Use Your Personal Information

Depending on how you interact with our website, we use your personal information to fulfill our contract with you, optimize our services, and comply with legal requirements:

  • Order Fulfillment: To process payments, arrange shipping, facilitate returns or exchanges, and manage your transactional account.

  • Customer Communications: To provide responsive support, send order confirmations, and maintain our business relationship with you.

  • Marketing & Advertising: To send promotional communications (such as newsletters or text updates) and to display tailored advertisements based on your browsing habits.

  • Security & Fraud Prevention: To authenticate account activity, ensure secure payment environments, and detect or investigate malicious or illegal behavior.

  • Legal Compliance: To comply with applicable tax, data protection, and consumer privacy laws.

3. How We Disclose Personal Information

We do not sell your personal information for monetary consideration. However, certain marketing activities (such as targeted advertising through partners like Google Ads, Meta, and Klaviyo) may be considered a "sale" or "sharing" under specific privacy laws, including the California Consumer Privacy Act (CCPA). You may opt out of these activities at any time by following the instructions in Section 7 below.

We may also disclose your data to trusted third parties for legitimate operational purposes under this Privacy Policy, including:

  • Platform Providers: Our e-commerce system is powered by Shopify, which securely collects, transmits, and processes your data to host our store, handle analytics, and process enhanced payment mechanisms.

  • Operational Service Providers: Third-party partners who provide technical management, secure payment processing, data analytics, cloud storage, and automated customer service systems.

  • Fulfillment & Logistics Partners: Trusted independent shipping networks and delivery couriers tasked with packing, transporting, and delivering your orders to your destination.

  • Marketing and Advertising Partners: Networks that assist us in showing you online advertisements and tailored promotions based on your online activity.

4. International Data Transfers

Elliot & Stone serves a global customer base, including the United Kingdom and the United States. To provide the Services, your data may be transferred, stored, and processed outside the country in which you reside.

When transferring data across international boundaries, we ensure appropriate data transfer mechanisms are utilized (such as the European Commission's Standard Contractual Clauses, or equivalent legal protocols verified by the United Kingdom) to protect your personal data, unless the destination country is officially recognized as providing an adequate level of data protection.

5. Security & Retention of Your Information

We implement reasonable administrative, technical, and physical safeguards to protect your personal data against unauthorized access. However, please be aware that no electronic storage method or transmission over the internet is completely impenetrable.

We retain your personal information only as long as necessary to fulfill operational processing needs, provide reliable customer support, comply with global legal and regulatory requirements, and resolve contract disputes. Specifically:

Order and transaction records are retained for 7 years to comply with tax and accounting obligations in both the United Kingdom and the United States.

Customer account information is retained while your account remains active, and for up to 3 years after your last interaction with us, after which it is anonymized or deleted.

Marketing communication records (including newsletter subscriptions) are retained until you unsubscribe or request deletion, plus up to 12 months thereafter to confirm your opt-out preference.

Customer support correspondence is retained for up to 3 years from the date of resolution.

After these periods, your data is securely deleted or fully anonymized unless extended retention is required by applicable law.

6. Children's Data

Our website and services are not directed to anyone under the age of 16, and we do not knowingly collect personal information from anyone under the age of 16. If a parent or guardian believes that a child under 16 has submitted personal information to us, they may contact us using the details in Section 9 to request immediate deletion. Where applicable laws set a different minimum age in your jurisdiction (for example, the United States Children's Online Privacy Protection Act sets a threshold of 13), we will apply the higher standard.

7. Your Rights and Choices

Depending on your regional jurisdiction (such as the United Kingdom, European Union, or select US states), you may hold some or all of the following statutory privacy rights:

  • Right to Access / Know: Request a copy of the personal information we hold about you.

  • Right to Delete: Request that we erase or remove your personal data from our operational databases.

  • Right to Correct: Request the correction of inaccurate or incomplete personal profile fields.

  • Right to Opt-Out of Targeted Advertising: You may direct us not to process your details for customized advertising. If you visit our store with a Global Privacy Control (GPC) opt-out preference signal enabled, our website will automatically recognize and treat it as a valid request to opt out for that browser and device.

  • Managing Marketing Preferences: You may opt out of receiving promotional marketing emails at any time by selecting the "Unsubscribe" option found at the bottom of our correspondence.

    California Residents (CCPA / CPRA): If you are a California resident, you have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. To exercise this right, email support@elliotandstone.com with the subject line "CCPA Opt-Out Request" and we will process your request within 15 business days. You may also enable the Global Privacy Control (GPC) signal in your browser; our website will recognize and honor it as a valid opt-out request for that browser and device. You also have the right to designate an authorized agent to make a request on your behalf.

To learn more about your data processing options or to access external portals, you can view the Shopify Consumer Privacy Policy.

8. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect shifts in our operational, security, or legal obligations. The "Last Updated" date at the top of this page will change accordingly whenever revisions occur.

9. Contact Us

If you have any questions about our data security practices, this Privacy Policy, or if you would like to exercise your statutory consumer rights, please contact our support desk:

Email Contact: support@elliotandstone.com

Corporate Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

Phone: +44 7943 885599

Customer Support Hours: Monday - Friday, 9:00 AM - 5:00 PM EST