Privacy Policy

Our details

Hearthway operates this online store ("we", "us"). This policy explains what personal data we collect, why, how we use it and the rights you have under the UK GDPR and the Data Protection Act 2018. For any privacy request, contact support via the contact page.

How long we retain it

Order records are retained for as long as required for tax and accounting purposes (typically 6 years). Marketing/analytics data is kept only while your consent is active.

Rights you have

Under UK GDPR you may request access to, correction or deletion of your personal data, restrict or object to processing, and request data portability. To exercise any right, contact support via the contact page. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Use of cookies

We use essential cookies for basic site function and, only with your consent, analytics and advertising cookies. You can accept, reject or change your choice at any time via the cookie settings link in the footer.

Information we gather

When you place an order we collect your name, email address, delivery address, phone number (if provided) and the details of your order. Payment card details are entered directly into Stripe's secure checkout and are processed by Stripe — we never see or store your full card number.

When you browse we may collect device and usage data (IP address, browser type, pages viewed) via cookies, but only for analytics and advertising measurement after you give consent.

Uses of your data

We process your data to: (a) take payment and fulfil and deliver your order; (b) send order confirmations and delivery updates; (c) provide customer support and handle returns; (d) meet our legal and tax obligations; and (e) with your consent, measure the performance of our advertising (Google Analytics / Google Ads). We do not sell your personal data.

Lawful bases

We rely on: performance of a contract (to fulfil your order); legal obligation (tax/accounting records); and consent (for non-essential cookies, analytics and advertising, which you can withdraw at any time).

Who receives your data

We share data only with the providers needed to run the store: Stripe (payment processing), our delivery/fulfilment partners, our email provider (order notifications) and, with your consent, analytics/advertising providers. Some providers may process data outside the UK/EEA under appropriate safeguards (e.g. Standard Contractual Clauses).