Privacy policy

Last updated: 19 October 2026

1. Who we are

ironmustobey.com is run by Edmund Acheampong, a sole trader trading as Iron Must Obey ("we", "us"), 235B Bromley Road, London SE6 2PG, United Kingdom. We are the data controller for your personal information. Questions about this policy: ek@ironmustobey.com.

2. What we collect

  • Contact details: your name, email address and billing address when you buy, and your email address when you sign up for The First Week.
  • Order details: what you bought, when, and the price paid.
  • Payment details: payments are handled by Shopify Payments or PayPal. We never see or store your full card number.
  • Messages: what you send us when you email us.
  • Device and usage information: your IP address, browser and how you use the site, collected through cookies (see section 7).

3. Why we use it, and our legal basis

What we do Legal basis
Take payment, deliver your download and send order emails Contract
Send The First Week, our welcome emails, training notes and clothing news Consent (you can withdraw it at any time)
Answer your questions and fix problems with files Contract, or our legitimate interest in helping you
Keep the site secure, prevent fraud and understand how the site is used Legitimate interests
Keep tax and accounting records Legal obligation

4. Marketing emails

We only send marketing emails if you sign up. You'll confirm your sign-up by email first. You'll then get The First Week straight away, up to 4 short emails over the next 12 days, and after that occasional training notes and clothing news. Every email has an unsubscribe link. We send email only: no texts and no post.

5. Who we share it with

  • Shopify, which hosts our store, processes payments and sends our emails.
  • PayPal, if you choose to pay with it.
  • Professional advisers, such as an accountant, and authorities where the law requires it.

We don't sell your personal information. Shopify also uses some data to provide and improve its services, as described in the Shopify Consumer Privacy Policy.

6. International transfers

Shopify and PayPal may process data outside the UK. Where they do, they use legal safeguards such as UK-approved contract clauses.

7. Cookies

The site uses cookies that are needed for it to work, plus optional analytics and marketing cookies. You can accept or decline optional cookies in the cookie banner and change your choice at any time.

8. How long we keep it

  • Order and tax records: 6 years, as UK tax law requires.
  • Marketing sign-ups: until you unsubscribe. We then keep your email address on a do-not-contact list so we don't email you again.
  • Support emails: up to 2 years after our last contact.

9. Your rights

You can ask us to access, correct or delete your information, restrict or object to how we use it, or give you a copy to take elsewhere. You can withdraw your consent to marketing at any time. Email ek@ironmustobey.com and we'll reply within one month.

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office: ico.org.uk or 0303 123 1113. We'd appreciate the chance to put things right first.

10. Children

Our site and programmes are for adults aged 18 and over. We don't knowingly collect information from children.

11. Changes

We'll update this policy if our practices change and show the new date at the top.

12. Contact

ek@ironmustobey.com · 235B Bromley Road, London SE6 2PG, United Kingdom