Privacy Policy

Morton’s Football Vault

Last updated: 9 October 2026

This notice explains how Morton’s Football Vault handles personal information when you visit the website, buy a shirt, contact us, submit a shirt-selling enquiry or request restoration services.

1. Who is responsible for your information?

Morton’s Football Vault is responsible for deciding how and why your personal information is used. For privacy questions or requests, email steven@mortonsfootballvault.co.uk.

2. Information we collect

Depending on how you use the website, we may process your name, email address, delivery address, billing and transaction details handled through checkout, order contents, enquiry messages, your asking price and description when you offer us a shirt, and photographs you upload for shirt-buying or restoration enquiries. We may also process correspondence and information needed to manage orders, refunds, restoration work and customer support.

When you browse the website, technical information such as pages visited, referring pages, device/browser information and approximate location inferred from technical data may be processed by Google Analytics if you consent to analytics. The website also uses browser storage for essential shop functions such as remembering the contents of your basket and supporting checkout.

3. Why we use your information and our lawful bases

4. Forms, photographs and service providers

Contact, restoration and Sell Your Shirts forms are submitted to our website service, which processes the information and sends it to us so we can respond. Photos may be resized/compressed in your browser before submission. Please only upload images relevant to your enquiry and avoid including unrelated personal information.

Payments are handled by Stripe. We receive information needed to identify and manage the transaction, but payment card details are handled by Stripe rather than stored by Morton’s Football Vault in the website’s own content files. Delivery details may be shared with the carrier selected to fulfil an order.

The website is hosted and operated using Cloudflare services. We use Google Analytics 4 for website analytics when consented to. These providers process information as needed to provide their services and under their own applicable privacy terms. We do not sell personal information.

5. eBay information

The website integrates with eBay to retrieve or manage listing and inventory information needed to display products and check stock. This may include item identifiers, titles, prices, quantities, images and listing status. We use eBay information to operate the shop and keep availability up to date; we do not sell eBay account information to third parties.

6. Cookies and similar technologies

Essential browser storage is used to remember your basket and support the checkout journey. Google Analytics 4 uses cookies or similar technologies to measure website use. Analytics is non-essential and should not run unless you accept it through the website’s cookie choice controls. You can reject analytics without preventing you from browsing or placing an order. You can change your choice using the cookie controls where available or by clearing the relevant site storage and revisiting the site.

We aim to keep the cookie notice and controls clear. If you reject analytics, we will not load the Google Analytics tracking script through our consent-controlled site code. Some third-party services, such as Stripe during checkout, may use technologies necessary to provide their secure service; those providers’ own notices may also apply.

7. Who we share information with

We share only what is reasonably necessary with service providers involved in hosting and securing the website, form processing, payment processing, analytics where consented, and delivery. We may also disclose information where required by law, to enforce legal rights or to resolve a dispute. We do not sell personal information.

8. International processing

Some service providers may process information outside the UK. Where applicable data protection law requires safeguards for an international transfer, the relevant provider is responsible for applying the appropriate mechanism for its processing. Contact us if you would like further information about a relevant transfer and safeguards.

9. How long we keep information

We keep information only for as long as reasonably necessary for the purpose it was collected, taking account of the nature of the information, the service provided, legal/accounting requirements, limitation periods and the need to resolve disputes. Order and transaction records may need to be kept for several years to meet legal and accounting requirements. Enquiry and photograph records that are not needed for an ongoing matter should not be kept indefinitely. Analytics retention is managed through Google Analytics settings and the consent choices described above.

10. Your data protection rights

Depending on the circumstances and lawful basis, you may have the right to request access to your information, correction of inaccurate information, deletion, restriction of processing, objection to processing, or a copy of information in a portable format. Some rights are subject to exceptions. Where processing depends on consent, you can withdraw that consent for the future; withdrawal does not make earlier processing unlawful.

To exercise a right, email steven@mortonsfootballvault.co.uk. You can also complain to the UK Information Commissioner’s Office (ICO) if you are concerned about how your information has been handled: ico.org.uk/make-a-complaint.

11. Security

We use reasonable technical and organisational measures to protect information against unauthorised access, loss or misuse. No online system can be guaranteed completely secure, but we take reasonable steps appropriate to the information and services involved.

12. Changes to this policy

We may update this notice when our practices or legal requirements change. The latest version will be published on this page.