Privacy policy
Privacy Policy
Last updated: 24 August 2026
This Privacy Policy explains how Crosszeria LTD, trading as BLXCK K-Pop Store (“BLXCK K-Pop Store”, “we”, “us” or “our”), collects, uses, stores and shares your personal information when you visit blxckkpopstore.com, make a purchase from us, contact us or otherwise interact with our services.
We are committed to protecting your privacy and handling your personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations (PECR).
1. Who We Are
Business: Crosszeria LTD trading as BLXCK K-Pop Store
Website: blxckkpopstore.com
Email: general@crosszeria.com
Postal address: 82 Mulberry Way, London E18 1ED, United Kingdom
For the purposes of UK data protection law, Crosszeria LTD is the controller of the personal information described in this Privacy Policy, unless otherwise stated.
2. Personal Information We Collect
The personal information we collect depends on how you interact with our website and services.
Information You Provide to Us
When you make a purchase, create an account, contact us, request a return, subscribe to marketing or otherwise interact with us, we may collect information including:
-
Your name
-
Billing address
-
Delivery address
-
Email address
-
Telephone number
-
Order details
-
Products purchased
-
Account information
-
Communications you send to us
-
Return or refund information
-
Marketing preferences
Payment information is processed through our payment service providers. We may receive information relating to the status and details of your transaction where necessary to process your order.
Information Collected Automatically
When you visit our website, certain information may be collected automatically through cookies and similar technologies, including:
-
IP address
-
Browser and device information
-
Approximate location
-
Time zone
-
Pages and products viewed
-
Search terms
-
Referring websites
-
Website interactions
-
Shopping cart activity
-
Checkout activity
-
Cookie and consent preferences
We use this information to operate our website, understand how customers use it, improve our services, maintain security and, where you have consented, measure or personalise advertising.
3. How We Use Your Personal Information
We may use your personal information to:
-
Process and fulfil your orders
-
Process payments
-
Arrange delivery and returns
-
Provide order confirmations and updates
-
Provide customer service
-
Respond to questions, complaints and return requests
-
Manage customer accounts
-
Detect and prevent fraud or misuse
-
Maintain the security of our website
-
Comply with our legal and regulatory obligations
-
Maintain appropriate financial and business records
-
Improve our website, products and services
-
Analyse the performance of our website
-
Send you marketing communications where permitted
-
Measure and improve our advertising
-
Personalise advertising where you have provided the required consent
4. Our Lawful Bases for Processing
Under UK data protection law, we must have a lawful basis for processing your personal information.
Depending on the circumstances, we may rely on:
Contract
We process information where it is necessary to enter into or perform a contract with you.
For example, we need your name, delivery address and contact information to process and deliver an order.
Legal Obligation
We may process information where necessary to comply with our legal obligations, including accounting, tax, fraud prevention and consumer protection requirements.
Legitimate Interests
We may process information where necessary for our legitimate business interests, provided those interests do not override your rights and freedoms.
This may include:
-
Improving our website and services
-
Protecting our business against fraud
-
Maintaining website security
-
Understanding our business performance
-
Responding to customer enquiries
-
Establishing, exercising or defending legal claims
Consent
Where required, we rely on your consent for activities such as certain marketing communications, analytics technologies and personalised advertising.
Where we rely on consent, you may withdraw it at any time.
5. Orders and Payments
When you place an order, we use the information you provide to:
-
Process your purchase
-
Verify and process payment
-
Deliver your products
-
Communicate with you about your order
-
Process returns and refunds
-
Detect potentially fraudulent transactions
-
Maintain appropriate transaction records
Our online store is powered by Shopify, which processes certain personal information on our behalf in connection with providing our ecommerce platform.
Payment services may also be provided by Shopify and/or other payment providers available through our checkout.
6. Delivery Providers
We may provide your name, delivery address, contact details and other information necessary to delivery companies and fulfilment providers so they can deliver your order.
Depending on the delivery method selected and your location, this may include providers such as Royal Mail, Evri, InPost, DPD, UPS, DHL or other delivery partners.
We only provide information that is reasonably necessary for them to provide the relevant service.
7. Sharing Your Personal Information
We do not sell your personal information in the ordinary meaning of selling customer information for money.
We may share personal information with trusted third parties where necessary to operate our business, including:
-
Shopify and ecommerce service providers
-
Payment processors
-
Delivery and logistics providers
-
Website hosting and technology providers
-
Analytics providers
-
Advertising and marketing providers
-
Email and communications providers
-
Fraud prevention and security services
-
Accountants, legal advisers and other professional advisers
-
Government bodies, regulators, courts or law enforcement authorities where legally required
We may also disclose personal information where necessary to protect our legal rights, prevent fraud, comply with a legal obligation or respond to a lawful request.
If our business is sold, reorganised or transferred, personal information may be transferred as part of that transaction where permitted by law.
8. Marketing
If you subscribe to our marketing communications, we may use your contact information to send you information about:
-
New products
-
Restocks
-
Promotions
-
Events
-
Special offers
-
Other BLXCK K-Pop Store news
You can unsubscribe from marketing emails at any time by using the unsubscribe option provided in the email or by contacting us.
Unsubscribing from marketing will not stop essential service communications relating to an order you have placed.
9. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
These may include technologies used for:
-
Essential website functions
-
Shopping carts and checkout
-
Customer account functionality
-
Security and fraud prevention
-
Remembering your preferences
-
Analytics
-
Measuring website performance
-
Marketing and advertising
Some cookies are strictly necessary for our website to operate and do not require your consent.
Where required by law, analytics, advertising and other non-essential cookies will only be used after you have given your consent.
You can accept, reject or manage non-essential cookies through the cookie banner or cookie preference controls available on our website.
You can change or withdraw your consent at any time through those controls.
10. Advertising
Where you have provided the necessary consent, we may use cookies and similar technologies to understand how you interact with our website and to measure, personalise or improve advertising.
Information may be shared with advertising and analytics partners for these purposes.
You can manage your choices through the cookie preferences available on our website.
You also have the right to object to the use of your personal information for direct marketing, including related profiling.
11. Fraud Prevention and Automated Processing
We and our service providers may use automated systems to help identify potentially fraudulent transactions, suspicious activity or security risks.
We do not ordinarily use solely automated decision-making that produces legal effects or similarly significant effects on you.
Where automated processing is used, it may include fraud detection tools operated by Shopify, payment processors or other service providers.
12. International Transfers
Some of the companies we use to provide our services, including Shopify and other technology providers, may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take steps to ensure appropriate safeguards are in place where required by law.
These safeguards may include:
-
Transfers to countries recognised as providing an adequate level of data protection
-
Approved contractual protections
-
The UK International Data Transfer Agreement
-
The UK Addendum to approved standard contractual clauses
-
Other legally recognised transfer safeguards
13. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to:
-
Fulfil orders
-
Provide customer service
-
Process returns or refunds
-
Maintain financial and accounting records
-
Comply with tax and legal obligations
-
Resolve disputes
-
Prevent fraud
-
Enforce our agreements
Different categories of information may be kept for different periods depending on our legal and operational requirements.
When we no longer need personal information, we will delete, anonymise or securely dispose of it where appropriate.
14. Your Data Protection Rights
Depending on the circumstances, UK data protection law gives you rights including the right to:
-
Access the personal information we hold about you
-
Correct inaccurate or incomplete personal information
-
Request deletion of your personal information in certain circumstances
-
Restrict processing of your personal information in certain circumstances
-
Object to processing in certain circumstances
-
Object to direct marketing at any time
-
Request data portability in certain circumstances
-
Withdraw consent where our processing is based on your consent
-
Raise a complaint about how your personal information is being handled
These rights are not absolute and may be subject to legal exceptions.
To exercise any of these rights, please contact:
We may need to verify your identity before responding to a request.
15. Security
We take reasonable technical and organisational measures designed to protect personal information against:
-
Unauthorised access
-
Loss
-
Misuse
-
Alteration
-
Disclosure
-
Destruction
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
16. Third-Party Websites
Our website may contain links to websites, platforms or services operated by third parties.
We are not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy policy of any third-party service you visit.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to:
-
Our business
-
Our website
-
The services we use
-
Our data processing activities
-
Legal or regulatory requirements
When we make changes, we will update the Last updated date at the top of this Privacy Policy.
We recommend reviewing this Privacy Policy periodically.
18. Contact Us
If you have questions about this Privacy Policy, would like more information about how we use your personal information, wish to exercise your data protection rights or would like to make a complaint, please contact us:
Crosszeria LTD trading as BLXCK K-Pop Store
Email: general@crosszeria.com
Address: 82 Mulberry Way, London E18 1ED, United Kingdom
19. Complaints to the ICO
If you have a concern about how we handle your personal information, we would appreciate the opportunity to resolve it with you first.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
Making a complaint to us first does not affect your right to contact the ICO.