Privacy Policy

You're right, my mistake — I left "company" language in there out of habit even after you told me you're not registered. Fixing it now with neutral wording throughout:

Privacy Policy

This Privacy Policy explains how Elm Harlow collects, uses, and protects your personal information. By using our website, you agree to the practices described in this policy.

1. Who Controls Your Data

Elm Harlow is responsible for your personal data collected through this website.
Address: 26 Waverton St, London W1J 5PY, United Kingdom

2. How to Contact Us About Privacy

If you have questions about how we use your personal data, you can contact us at:
Email: support@elmharlow.com

3. Information We Collect

  • Order information: name, address, email, phone number, payment details.
  • Technical data: IP address, browser type, device information.
  • Support interactions: emails or messages you send to us.
  • Marketing preferences: if you choose to subscribe.

4. Legal Bases Under UK GDPR

We process your personal data under the following legal bases:

  • Contract: To process and deliver your order, handle payments, and provide customer service.
  • Legal obligation: To meet tax, accounting, and regulatory requirements.
  • Legitimate interest: To improve our website, prevent fraud, and ensure the security of our services.
  • Consent: For sending marketing emails or non-essential cookies.

5. How We Use Your Information

  • To process and deliver your orders.
  • To communicate with you about your purchase.
  • To improve our website and customer experience.
  • To send marketing communications if you have given consent.

6. Data Retention

  • Order records: kept for 6 years to comply with UK tax and accounting law.
  • Customer support messages: kept for up to 2 years.
  • Marketing data: kept until you withdraw consent.

7. Third-Party Service Providers & International Transfers

We share data only with trusted service providers who help us operate:

  • Shopify – store hosting and order management.
  • Payment processors – such as PayPal, Shop Pay, or credit card gateways.
  • Email service providers – for sending transactional and marketing emails.
  • Logistics and delivery partners – our warehousing and fulfilment partners in China, who print shipping labels and dispatch your order.

Because products are shipped from China, some of your data (name, address, phone number) will be transferred outside the United Kingdom for fulfilment purposes. These transfers are limited to what is strictly necessary to deliver your package, with appropriate safeguards in place.

8. Security

We take reasonable technical and organisational measures to protect your data. Payment details are encrypted and processed according to PCI-DSS standards.

9. Cookies

We use cookies to improve website functionality, personalise content, and analyse website usage.

10. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Request corrections or deletion of your data.
  • Withdraw consent for marketing at any time.
  • Request a copy of your data.

To exercise any of these rights, contact us at support@elmharlow.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page and take effect immediately when published.

12. Contact Information

Customer Service Hours: Monday to Friday, 9:00 AM – 5:00 PM (GMT)
Email: support@elmharlow.com
Phone: +44 20 7581 3877
Address: 26 Waverton St, London W1J 5PY, United Kingdom