Privacy policy

Last updated: 17 October 2026

1. Who we are

This website is run by Tyrone Brown, trading as Hollin & Hearth, a sole trader based at 30 Squirrel Close, Hounslow, TW4 7NX, United Kingdom ("we", "us"). We are the data controller for the personal information described in this policy. Contact: hollinhearth@gmail.com.

2. What we collect

  • Order and account details: name, delivery and billing address, email address, phone number (if given), what you bought, order history.
  • Payment details: these are handled by our payment providers. We don't see or store your full card number.
  • Messages: anything you send us by email or through our contact form.
  • Marketing preferences: if you sign up to our emails.
  • Device and browsing data: such as IP address, browser type, pages viewed, and data from cookies and similar technologies (see section 6).

3. Why we use it, and our lawful basis (UK GDPR)

  • Take, fulfil and deliver your order; handle returns, refunds and customer service: performance of a contract.
  • Keep tax and accounting records: legal obligation.
  • Prevent fraud, keep the site secure, improve our store: legitimate interests.
  • Send marketing emails: your consent. You can unsubscribe at any time.
  • Non-essential cookies (e.g. analytics, advertising): your consent, via our cookie banner.

4. Who we share it with

We only share what's needed for each purpose:

  • Shopify, which hosts our store and processes data on our behalf. Shopify's own privacy practices are described in the Shopify Consumer Privacy Policy.
  • Payment providers (e.g. Shopify Payments), to process your payment.
  • Our supplier and order-fulfilment app (DSers and our AliExpress supplier), which receive your name, delivery address and phone number (if given) so your order can be packed and delivered.
  • Couriers and Royal Mail, to deliver orders and returns.
  • Email and form tools (Shopify Messaging, Shopify Forms), if you sign up for emails.
  • Professional advisers and authorities, where the law requires it.

We don't sell your personal information.

5. International transfers

Our supplier ships from overseas, so the delivery details for your order are sent outside the UK to our supplier and the services they use. Some of our service providers (such as Shopify) may also process data outside the UK. Where this happens, we rely on the safeguards required by UK data protection law.

6. Cookies

We use cookies and similar technologies. Essential cookies (for example, to remember your basket and to keep checkout secure) are always on. We only use non-essential cookies, such as analytics or advertising, if you accept them in our cookie banner. You can change your choice at any time using the "Cookie preferences" link in our website footer. We and our partners, including Shopify, use cookies and other technologies to personalise your experience, show you ads and perform analytics, but only for these non-essential purposes if you accept them.

7. How long we keep it

  • Order and transaction records: for as long as UK tax law requires us to keep business records (usually around 6 years).
  • Customer service messages: up to 2 years after our last contact.
  • Marketing data: until you unsubscribe.
  • Cookie data: as described in our cookie banner.

8. Your rights

You have the right to:

  • ask for a copy of your data
  • correct it
  • have it deleted
  • restrict or object to how we use it
  • data portability
  • withdraw your consent at any time (this doesn't affect anything we did before you withdrew it)

To use any of these rights, email hollinhearth@gmail.com. We'll reply within one month.

9. Complaints

If you're unhappy with how we've handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO): https://ico.org.uk/make-a-complaint/ · helpline 0303 123 1113.

10. Changes

We may update this policy. The "Last updated" date at the top shows when it last changed.