Privacy Policy

Last Updated: September 2026

1. Introduction

1.1 This Privacy Policy explains how Durham Coins Ltd (“Durham Coins”, “we”, “us” or “our”) collects, uses, stores, discloses and otherwise processes personal data relating to individuals who visit or use our website, purchase or enquire about our products or services, communicate with us, visit our premises, or otherwise interact with us.

1.2 Durham Coins Ltd is a coin and bullion dealer operating in England and Wales.

1.3 We operate our website at www.durhamcoins.co.uk (the “Site”) for the purposes of providing information concerning our products and services and enabling customers and prospective customers to communicate and transact with us.

1.4 For the purposes of applicable data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, Durham Coins Ltd is a data controller in respect of the personal data processed by us.

1.5 As data controller, we determine the purposes and means by which personal data is processed and are responsible for ensuring that such processing is undertaken in accordance with applicable data protection legislation.

1.6 We are committed to protecting the privacy, security and confidentiality of personal data entrusted to us. This Privacy Policy sets out the circumstances in which we collect personal data, the purposes for which we process it, the legal bases upon which we rely, the circumstances in which we may disclose it, the periods for which we retain it and the rights available to individuals in relation to their personal data.

1.7 By accessing or using the Site, submitting information to us, creating an account, communicating with us or entering into a transaction with us, you acknowledge that your personal data may be processed in accordance with this Privacy Policy and applicable law.

1.8 This Privacy Policy should be read together with any applicable Cookies Policy, Recording Policy, terms and conditions and any supplementary privacy or fair-processing notices which we may provide from time to time.

1.9 Our Site, products and services are not directed towards children. We do not knowingly collect personal data relating to children. If you believe that a child has provided personal data to us, please contact us using the details set out below so that we may take appropriate action.

2. Data Controller and Contact Details

2.1 The data controller responsible for your personal data is:

Durham Coins Ltd
12 High Street
Durham
DH1 3UJ

2.2 For all enquiries concerning this Privacy Policy, the processing of your personal data, or the exercise of your data protection rights, you may contact us using the following details:

Email: sales@durhamcoins.co.uk
Telephone: 0191 722 1421
Postal Address: 12 High Street, Durham, DH1 3UJ

2.3 We will use reasonable efforts to respond to privacy and data protection enquiries promptly and in accordance with the requirements of applicable data protection legislation.

3. Definitions

3.1 For the purposes of this Privacy Policy, “personal data” means any information relating to an identified or identifiable living individual.

3.2 Personal data does not include information which has been irreversibly anonymised so that an individual can no longer be identified.

3.3 “Processing” has a broad meaning and includes collecting, recording, organising, structuring, storing, adapting, altering, retrieving, consulting, using, disclosing, transmitting, disseminating, restricting, combining, deleting or otherwise dealing with personal data.

3.4 “Data Controller” means the person or organisation which determines the purposes and means of processing personal data.

3.5 “Data Processor” means a person or organisation which processes personal data on behalf of a data controller.

4. Categories of Personal Data We Collect

4.1 Depending upon the nature of our relationship with you and the manner in which you interact with us, we may collect and process the following categories of personal data.

4.1.1 Identity Data

Information which identifies you, including your name, title, username and date of birth.

4.1.2 Contact Data

Your contact information, including residential address, delivery address, billing address, email address and telephone number.

4.1.3 Profile Data

Information associated with your customer profile or account, including username, password, preferences, interests, feedback and other information provided through your account.

4.1.4 Verification Data

Information required to verify your identity where necessary or legally required, including date of birth, residential address, passport details, driving licence details and other identification information.

4.1.5 Financial Data

Information relating to bank accounts, payment cards and other financial information necessary to process transactions or payments.

We do not ordinarily retain complete payment-card details where such information is processed by a third-party payment provider.

4.1.6 Transaction Data

Information relating to transactions between you and us, including products purchased from or sold to us, transaction values, payments, deliveries, returns and other transaction-related information.

4.1.7 Social Media Data

Where you interact with us through social media platforms, we may receive information which you make available through those platforms, subject to the privacy settings and policies of the relevant platform.

This may include your social media username, profile information, photograph, location, interests and other information made available through your account.

4.1.8 Marketing and Communications Data

Information concerning your preferences regarding receiving marketing communications from us and records of communications sent to or received from you.

4.1.9 Customer Service Data

Information contained in correspondence and communications between you and us, including enquiries, complaints, emails, online chats, telephone communications and other customer-service interactions.

4.1.10 Usage Data

Information concerning how you use the Site and our services, including navigation information, interactions with Site functionality and information concerning technical difficulties encountered when using the Site.

4.1.11 Technical Data

Information automatically collected through our systems, which may include your IP address, login information, browser type and version, time-zone setting, approximate location, browser plug-in types and versions, operating system and platform, and other technical information concerning the devices used to access the Site.

4.1.12 Recorded Data

Information obtained through CCTV systems and telephone call-recording systems operated by or on behalf of Durham Coins Ltd.

Further information concerning telephone recording and CCTV may be contained within our applicable Recording Policy.

5. How We Collect Personal Data

5.1 Information Provided Directly by You

5.1.1 We may collect personal data directly from you when you:

(a) place an order for products or services;

(b) purchase goods from us or sell goods to us;

(d) complete an online or paper form;

(e) submit an enquiry;

(f) communicate with our customer-service team;

(g) use any live-chat facility made available through the Site;

(h) communicate with us by telephone, email, post or other electronic means;

(i) visit our premises;

(j) interact with us through social media;

(k) subscribe to receive marketing communications;

(l) provide feedback or submit a review; or

(m) otherwise communicate or transact with us.

5.2 Information Collected Automatically

5.2.1 When you access or use the Site, certain information may be collected automatically through cookies, server logs, tracking pixels and similar technologies.

5.2.2 Such information may include Technical Data and Usage Data.

5.2.3 Further information concerning cookies and similar technologies is set out in our applicable Cookies Policy.

5.3 Information Obtained from Third Parties

5.3.1 We may receive personal data concerning you from third parties where permitted by law.

5.3.2 Such third parties may include payment providers, delivery providers, fraud-prevention organisations, identity-verification providers, analytics providers, advertising platforms, social-media platforms, IT providers, live-chat providers and publicly available sources.

5.3.3 We may also obtain information from public registers and other publicly available sources where this is necessary for legitimate business, legal, regulatory or verification purposes.

6. Purposes for Which We Process Personal Data

6.1 We may process personal data for the following purposes:

(a) establishing and administering customer relationships;

(b) responding to enquiries and requests;

(d) processing orders and transactions;

(e) receiving and making payments;

(f) arranging delivery and collection;

(g) verifying identity;

(h) complying with legal and regulatory obligations;

(i) preventing and detecting fraud, money laundering and other financial crime;

(j) administering customer accounts;

(k) maintaining the security and functionality of the Site;

(l) monitoring and improving our products and services;

(m) analysing customer behaviour and Site usage;

(n) administering CCTV and telephone-recording systems;

(o) communicating with customers and prospective customers;

(p) administering marketing communications;

(q) obtaining customer feedback;

(r) maintaining business records;

(s) enforcing contractual rights;

(t) establishing, exercising or defending legal claims;

(u) managing business operations;

(v) protecting our premises, property, employees, customers and other persons;

(w) conducting audits and internal investigations;

(x) complying with requests from law-enforcement agencies, regulators, government authorities and other public bodies where legally required or permitted; and

(y) any other purpose expressly notified to you at the time the personal data is collected or otherwise permitted by law.

7. Lawful Bases for Processing

7.1 We will process personal data only where we have a lawful basis for doing so under applicable data protection legislation.

7.2 Depending upon the circumstances, our lawful bases may include the following:

7.2.1 Performance of a Contract

Processing may be necessary for the performance of a contract with you or to take steps at your request before entering into a contract.

7.2.2 Compliance with a Legal Obligation

Processing may be necessary for us to comply with a legal or regulatory obligation to which we are subject.

7.2.3 Legitimate Interests

Processing may be necessary for our legitimate interests, or those of a third party, provided that such interests are not overridden by your interests, rights or freedoms.

Our legitimate interests may include operating and developing our business, providing customer services, maintaining security, preventing fraud, managing our systems, maintaining appropriate records and improving our products and services.

7.2.4 Consent

Where required by applicable law, we may rely upon your consent.

Where processing is based upon consent, you may withdraw that consent at any time. Withdrawal of consent shall not affect the lawfulness of processing undertaken prior to such withdrawal.

7.3 We may rely upon more than one lawful basis in respect of the same personal data where appropriate.

8. Marketing and Direct Communications

8.1 Subject to applicable law, we may send you marketing communications concerning our business, products, services, special offers, company news and information relating to the precious-metals market.

8.2 Where consent is required by law, we will obtain your consent before sending such communications.

8.3 Marketing communications may be personalised based upon information we hold concerning your interests, preferences and previous interactions with us.

8.4 Our marketing service providers may use tracking technologies, including tracking pixels, to determine whether communications have been opened, which links or features have been accessed and whether an interaction results in a transaction.

8.5 You may withdraw your consent to marketing communications or otherwise object to direct marketing at any time.

8.6 Each marketing email will contain an appropriate mechanism for unsubscribing.

8.7 You may also contact us directly using:

Email: sales@durhamcoins.co.uk
Telephone: 01917 221421
Postal Address: 12 High Street, Durham, DH1 3UJ

8.8 Where you have opted out of marketing communications, we may retain limited information necessary to ensure that your preference is respected and that you do not inadvertently receive further marketing communications.

9. Change of Purpose

9.1 We will ordinarily process personal data only for the purposes for which it was originally collected.

9.2 Where we reasonably determine that personal data should be processed for another purpose, we will assess whether that purpose is compatible with the original purpose and whether an applicable lawful basis permits the further processing.

9.3 Where required by law, we will provide you with information concerning the new purpose and applicable lawful basis before undertaking the relevant processing.

9.4 We may process personal data without your knowledge or consent where this is required or permitted by law.

10. Failure to Provide Personal Data

10.1 Where we are legally required to collect particular personal data, or where such information is necessary to enter into or perform a contract with you, you may be required to provide that information.

10.2 If you fail to provide information which is necessary for us to comply with a legal obligation or perform a contract, we may be unable to provide the relevant product or service or complete the relevant transaction.

10.3 In such circumstances, we may be required to decline, suspend or cancel the relevant transaction or contractual relationship.

11. Security of Personal Data

11.1 We maintain appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access or other unlawful processing.

11.2 Such measures may include access controls, authentication procedures, encryption, secure communications, system monitoring, restricted access and appropriate organisational policies and procedures.

11.3 Access to personal data is restricted to authorised personnel who require access for legitimate business purposes.

11.4 Persons authorised to access personal data are required to maintain appropriate confidentiality and to process personal data only in accordance with applicable instructions, policies and procedures.

11.5 Notwithstanding the security measures described above, no electronic transmission or storage system can be guaranteed to be completely secure.

11.6 Accordingly, although we take appropriate steps to protect personal data, we cannot guarantee the absolute security of information transmitted to us through the internet or by email.

11.7 We maintain procedures for identifying, investigating and managing suspected personal data breaches.

11.8 Where required by applicable law, we will notify the Information Commissioner's Office and/or affected individuals of a personal data breach.

12. Retention of Personal Data

12.1 We will retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to comply with legal, regulatory, accounting, reporting or other legitimate business requirements.

12.2 When determining an appropriate retention period, we will consider:

(a) the nature, volume and sensitivity of the personal data;

(b) the potential risk of harm arising from unauthorised use or disclosure;

(d) whether those purposes can be achieved through other means;

(e) applicable legal and regulatory requirements;

(f) contractual requirements; and

(g) our legitimate business requirements.

12.3 Where appropriate, personal data may be anonymised. Properly anonymised information may thereafter be retained and used indefinitely for legitimate statistical, analytical, research or business purposes.

12.4 We may retain personal data contained within business records for longer than the duration of a customer relationship where this is necessary to comply with legal obligations, regulatory requirements, accounting requirements, audit requirements, insurance requirements or legitimate business purposes.

12.5 We may retain personal data where necessary to establish, exercise or defend legal claims.

12.6 Where applicable law requires us to retain identity, verification or transaction information for a specified period, we will retain such information for the period prescribed by law.

12.7 We may retain personal data for longer periods where required or permitted by law, including for the purposes of compliance with HM Revenue & Customs requirements, anti-money-laundering legislation, regulatory requirements or legal proceedings.

12.8 Where you have opted out of marketing communications, we may retain sufficient information to record and enforce your marketing preference.

13. Disclosure of Personal Data to Third Parties

13.1 We do not sell personal data to third parties.

13.2 We may disclose personal data to third parties where necessary for the purposes described in this Privacy Policy and where such disclosure is lawful.

13.3 Such third parties may include:

(a) payment service providers;

(b) banks and financial institutions;

(d) website hosting and technology providers;

(e) IT and cybersecurity providers;

(f) software and systems providers;

(g) analytics providers;

(h) marketing and advertising providers;

(i) live-chat and customer-service providers;

(j) fraud-prevention and risk-management organisations;

(k) identity-verification providers;

(l) professional advisers, including solicitors, accountants, auditors and insurers;

(m) government departments and agencies;

(n) HM Revenue & Customs;

(o) law-enforcement authorities;

(p) courts and tribunals;

(q) regulators and supervisory authorities; and

(r) prospective purchasers, investors or other parties involved in a proposed or actual corporate transaction involving Durham Coins Ltd or any part of its business or assets.

13.4 We may also disclose personal data where necessary to enforce contractual terms, protect our legal rights, protect property, prevent fraud, protect the safety of our employees or customers, or comply with a legal obligation.

13.5 Where a third party processes personal data on our behalf, we will take appropriate steps to ensure that the third party is contractually required to comply with applicable data protection legislation and to process personal data only for authorised purposes.

13.6 Some recipients may act as independent data controllers rather than as processors on our behalf. Where this occurs, the relevant third party will be responsible for its own processing activities and applicable privacy obligations.

14. International Transfers of Personal Data

14.1 Some of our service providers or other recipients may be located outside the United Kingdom or may process personal data from locations outside the United Kingdom.

14.2 Where a transfer of personal data outside the United Kingdom constitutes a restricted transfer under applicable data protection legislation, we will ensure that the transfer is undertaken using an appropriate lawful transfer mechanism.

14.3 Depending upon the circumstances, this may include:

(a) transferring personal data to a country covered by applicable UK adequacy regulations;

(b) using appropriate safeguards recognised under the UK GDPR, including the UK International Data Transfer Agreement or UK Addendum where appropriate; or

14.4 Where an appropriate safeguard is relied upon, we will undertake any required assessment and implement any additional technical, organisational or contractual measures considered necessary.

14.5 Further information regarding the safeguards applicable to a particular international transfer may be requested from us using the contact details set out in Section 2.

15. Cookies and Similar Technologies

15.1 The Site may use cookies and similar technologies.

15.2 Cookies may be used for purposes including:

(a) enabling essential Site functionality;

(b) maintaining security;

(d) analysing Site usage;

(e) improving Site performance;

(f) measuring marketing effectiveness; and

(g) providing or supporting personalised content or advertising where permitted.

15.3 Depending upon the type of cookie or technology concerned, consent may be required before it is placed or accessed.

15.4 You may configure your browser to refuse some or all cookies. However, disabling certain cookies may result in some Site functionality becoming unavailable or operating incorrectly.

15.5 Further information concerning the cookies used by the Site and how to manage them is provided in our applicable Cookies Policy.

16. Telephone Recording and CCTV

16.1 We may record incoming and outgoing telephone calls.

16.2 Telephone calls may be recorded for purposes including staff training, quality assurance, maintaining accurate business records, investigating disputes, preventing and detecting fraud and protecting our legitimate interests.

16.3 We may also operate CCTV at our premises.

16.4 CCTV may be used for purposes including:

(a) protecting customers, employees and visitors;

(b) protecting property;

(d) investigating incidents;

(e) assisting law-enforcement authorities where appropriate; and

(f) maintaining the security of our premises.

16.5 Further information concerning telephone recording and CCTV may be provided in our applicable Recording Policy.

17. Third-Party Websites

17.1 The Site may contain links to third-party websites.

17.2 Such websites are operated independently from Durham Coins Ltd.

17.3 We do not control and are not responsible for the privacy practices, security, content or processing activities of third-party websites.

17.4 If you access a third-party website, that website operator may collect and process personal data in accordance with its own privacy policy.

17.5 You should review the privacy policy of any third-party website before providing personal data to that website.

18. Automated Decision-Making and Profiling

18.1 We do not currently intend to make decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you, except where we have a lawful basis to do so and have complied with applicable legal requirements.

18.2 Where applicable, we will provide information concerning the existence of such processing and the logic involved, together with information concerning the significance and envisaged consequences for you, to the extent required by law.

18.3 Where applicable law provides individuals with rights concerning solely automated decision-making, we will respect those rights.

19. Your Data Protection Rights

19.1 Subject to applicable law and any applicable exemptions or restrictions, you may have the following rights in relation to your personal data:

19.1.1 Right of Access

You may request confirmation as to whether we process your personal data and, where applicable, request access to that personal data and certain information concerning its processing.

19.1.2 Right to Rectification

You may request correction of inaccurate personal data or completion of incomplete personal data.

19.1.3 Right to Erasure

In certain circumstances, you may request deletion of your personal data.

This right is not absolute. We may lawfully retain personal data where, for example, processing is necessary to comply with a legal obligation or for the establishment, exercise or defence of legal claims.

19.1.4 Right to Restriction of Processing

In certain circumstances, you may request restriction of the processing of your personal data.

19.1.5 Right to Object

You may have the right to object to processing based upon our legitimate interests.

You have an absolute right to object to the processing of your personal data for direct-marketing purposes.

19.1.6 Right to Data Portability

In certain circumstances, you may have the right to receive personal data which you have provided to us in a structured, commonly used and machine-readable format and to request that such information be transmitted to another data controller.

19.1.7 Right to Withdraw Consent

Where we rely upon consent as the lawful basis for processing your personal data, you may withdraw that consent at any time.

Withdrawal of consent will not affect the lawfulness of processing undertaken before withdrawal.

20. Exercising Your Data Protection Rights

20.1 If you wish to exercise any of your data protection rights, you may contact us as follows:

Durham Coins Ltd
12 High Street
Durham
DH1 3UJ

Email: sales@durhamcoins.co.uk
Telephone: 0191 722 1421

20.2 We may require you to provide information necessary to verify your identity before processing your request.

20.3 This is a security measure designed to prevent personal data from being disclosed to an unauthorised person.

20.4 We may request further information where reasonably necessary to clarify or process your request.

20.5 We will normally respond to a valid request within the statutory period prescribed by applicable data protection legislation.

20.6 You will generally not be required to pay a fee to exercise your data protection rights.

20.7 However, where permitted by law, we may charge a reasonable fee or refuse to comply with a request where the request is manifestly unfounded or excessive, including where it is repetitive.

20.8 If you wish to make a subject access request, please contact us using the following details:

Email: sales@durhamcoins.co.uk
Telephone: 0191 722 1421
Postal Address: 12 High Street, Durham, DH1 3UJ

21. Complaints

21.1 If you have concerns regarding the manner in which we collect, use or process your personal data, you should contact us in the first instance.

21.2 Complaints and concerns should be submitted using:

Email: sales@durhamcoins.co.uk
Telephone: 0191 722 1421
Postal Address: 12 High Street, Durham, DH1 3UJ

21.3 We will investigate complaints and seek to resolve legitimate concerns in accordance with our internal procedures and applicable law.

21.4 You also have the right to lodge a complaint with the Information Commissioner's Office (“ICO”), the UK's independent supervisory authority responsible for data protection matters.

21.5 We would, however, appreciate the opportunity to investigate and address your concerns before you refer the matter to the ICO.

22. Changes to This Privacy Policy

22.1 We reserve the right to amend this Privacy Policy from time to time.

22.2 Amendments may be made to reflect changes in:

(a) applicable legislation or regulatory requirements;

(b) our business activities;

(d) the manner in which we process personal data;

(e) our technology and systems; or

(f) applicable regulatory guidance or industry practice.

22.3 Where appropriate, we will notify you of material changes to this Privacy Policy.

22.4 The current version of this Privacy Policy will be published on the Site and will identify the date upon which it was last updated.

22.5 You are advised to review this Privacy Policy periodically to ensure that you remain informed about the manner in which we process personal data.

23. Applicable Data Protection Legislation

23.1 This Privacy Policy is intended to operate in accordance with applicable data protection and privacy legislation in the United Kingdom, including, where applicable:

(a) the UK General Data Protection Regulation;

(b) the Data Protection Act 2018;

(d) any legislation, regulations, amendments, subordinate legislation or applicable regulatory requirements which replace, supplement or amend the foregoing.

23.2 Where any provision of this Privacy Policy conflicts with a mandatory requirement of applicable data protection legislation, the relevant statutory requirement shall prevail.

24. Contact Information

Durham Coins Ltd

12 High Street
Durham
DH1 3UJ

Email: sales@durhamcoins.co.uk
Telephone: 0191 722 1421

For all privacy enquiries, data protection requests, subject access requests or complaints concerning the processing of your personal data, please contact us using the above details.

Privacy Policy Last Updated: September 2026