Privacy Policy

Last updated: June 2026

Introduction

Welcome to UKRailwayana.com ("we", "us", "our"). We are committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website and contact us through our enquiry forms.

By using this website, you agree to the collection and use of information in accordance with this Privacy Policy.

Data Controller

The data controller responsible for your personal information is:

UK Railwayana / Railwayana Auctions UK Ltd

Email: office@gwr1.com

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us using the email address above. Contact details published on the website indicate that enquiries are handled via office@gwr1.com.

What Information We Collect

When you use our website, we may collect the following information:

Information You Provide

When submitting an enquiry through our contact form, we may collect:

  • Name
  • Email address
  • Telephone number(s)
  • Details of your enquiry
  • Any information you choose to include in your message

The website's enquiry form requests contact details and information relating to enquiries about railway memorabilia and related services.

Technical Information

When you visit our website, our hosting provider may automatically collect certain technical information, including:

  • IP address
  • Browser type and version
  • Device information
  • Date and time of visits
  • Pages viewed
  • Referring website addresses

This information is generally collected through standard server logs and website analytics tools.

How We Use Your Information

We use your personal information to:

  • Respond to your enquiries
  • Provide information about our services
  • Communicate regarding items offered for sale, valuation, auction, purchase, or exchange
  • Maintain records of correspondence
  • Improve our website and services
  • Protect the security and integrity of our website
  • Comply with legal obligations

Legal Basis for Processing

Under UK data protection law, we rely on one or more of the following lawful bases:

  • Consent – where you voluntarily submit an enquiry.
  • Legitimate Interests – to operate and improve our business and services.
  • Contract – where processing is necessary to provide services requested by you.
  • Legal Obligation – where we are required to comply with applicable laws.

How Long We Keep Your Information

We retain personal information only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, or regulatory requirements.

Enquiry records may be retained where necessary to manage ongoing customer relationships, valuations, auction enquiries, purchases, sales, or related services.

Sharing Your Information

We do not sell your personal information.

We may share information with:

  • Website hosting and IT service providers
  • Professional advisers
  • Legal or regulatory authorities where required by law
  • Service providers assisting us in operating our business

All third parties are required to keep your information secure and process it in accordance with applicable data protection laws.

International Transfers

Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place to protect your information as required by applicable data protection laws.

Cookies

Our website may use cookies and similar technologies to improve functionality and user experience.

Cookies are small text files placed on your device. You can control or disable cookies through your browser settings. Disabling cookies may affect certain website functionality.

If additional analytics or advertising cookies are introduced, a separate cookie notice or consent mechanism may be provided where required.

Your Rights

Under UK data protection law, you have the right to:

  • Request access to your personal data
  • Request correction of inaccurate information
  • Request deletion of your personal data
  • Request restriction of processing
  • Object to processing in certain circumstances
  • Request transfer of your data where applicable
  • Withdraw consent where processing is based on consent

To exercise any of these rights, please email:

office@gwr1.com

We may request proof of identity before responding to your request.

Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, disclosure, or alteration.

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Third-Party Websites

Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party websites. We encourage users to review the privacy policies of any websites they visit.

Children's Privacy

This website is not directed at children under the age of 13, and we do not knowingly collect personal information from children.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page together with an updated revision date.

Contact Us

If you have any questions about this Privacy Policy or wish to make a data protection request, please contact:

Data Controller
UK Railwayana / Railwayana Auctions UK Ltd
Email: office@gwr1.com