Privacy policy

Privacy Policy

TO COMPLETE: registered company name, registered address and company number. UK law requires the trader identity and a geographic address to appear here before selling.

This policy explains what we do with your personal data when you visit harrietoxford.co.uk or place an order. We handle it under the UK GDPR and the Data Protection Act 2018.

What we collect

Name, delivery and billing address, email address, phone number, order details, and technical data such as IP address, device and pages viewed. We never receive or store your full card details — payments are handled by our payment providers.

Why we use it, and on what basis

To fulfil your order (performance of a contract). To meet legal duties (legal obligation) — tax and accounting records. To improve the shop and prevent fraud (legitimate interests). Marketing emails (consent) — only if you opt in, and you can withdraw at any time.

Who we share it with

Only those who need it to deliver your order: Shopify (our shop platform), our payment providers, and the carriers and suppliers who pack and ship your parcel. Some of these are outside the UK; where that happens we rely on the safeguards required by UK data protection law. We do not sell your data.

How long we keep it

Order records for six years, to meet HMRC requirements. Marketing contacts until you unsubscribe.

Your rights

You may ask for a copy of your data, correct it, ask us to delete it, object to how we use it, or request it in a portable form. Write to info@harrietoxford.co.uk. If you are unhappy with our answer you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

We use cookies to keep your basket working, remember preferences and measure how the shop is used. You can block or delete them in your browser; parts of the shop may stop working if you do.