Privacy Policy
How we collect, use and protect personal data, and what rights you have over it.
Data controller
Registered company name
DPT TRADING LTD
Trading as
Soco-Coxo.Com
Company registration number
16678112
VAT registration number
Street
71-75 Shelton Street
City
Covent Garden
Postal code
WC2H 9JQ
info@soco-coxo.com
What data we hold
Each entry states the purpose, the legal basis, how the data is protected and how long it is kept.
behaviour
Pages viewed, items added to a basket, orders placed and the like, used to understand how the shop is used and which sources bring customers.
device_identifier
A random identifier stored in a cookie, so repeat visits from one browser are recognised as one person rather than many.
contact_hash
Email address and telephone number reduced to an irreversible hash, so an advertising platform can recognise its own customer without either party learning anything new.
advertising_click
The identifier an advertising platform adds to a link it was paid for, kept so an order placed weeks later can still be credited to the advertisement that earned it.
Account identification and communication.
phone
Optional two-factor authentication and account recovery.
password
Credential verification (stored as a one-way hash).
sessions
Session management and security.
audit_log
Security auditing of authentication events.
Identifies the customer for orders, delivery and support.
phone
Contact about an order and delivery notifications.
address
Delivery and billing addresses used to fulfil orders.
subscriber_email
Sends the newsletter the person asked for; a contact is created even without an account.
consent_record
Proves when a consent was given or withdrawn, with the address and time it came from.
mailbox_address
Identifies the mailbox a person sends from and receives into.
message_content
Subject and body of stored mail, kept so it can be read and answered.
correspondent_address
Sender and recipients of each message, including copies.
attachments
Files carried by a message; the stored location is encrypted.
address_book
Correspondents a person has written to, kept for addressing and completion.
search_index
Makes mail searchable without decrypting it: keyed hashes only.
external_mailbox_credentials
Host, user name, password or OAuth token of an outside mailbox the person connected.
device_push_tokens
Device identifiers used to notify a person of new mail.
delivery_log
Records what was sent, when, whether it was delivered, and the address and browser the event came from.
audit_log
Records administrative actions on mailboxes and the address they came from.
Your rights
Right to access
You have the right to obtain a copy of the personal data we hold about you.
Right to rectification
You can request correction of inaccurate or incomplete data.
Right to erasure
You can request deletion of your data, subject to legal retention obligations.
Right to portability
You can request your data in a structured, machine-readable format.
Right to restriction
You can request that we restrict processing of your data.
Right to object
You can object to processing based on legitimate interests.
Further information
Data recipients
We do not sell or share personal data with third-party companies for their own purposes.
Retention
Data is kept only as long as needed for the purpose it was collected for, or as required by law.
Complaints
You have the right to lodge a complaint with your supervisory authority.
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
https://ico.org.uk/make-a-complaint/
0303 123 1113
International transfer
Personal data is processed within the jurisdiction of the store and is not transferred abroad.
In effect from
2026-08-28