Privacy Policy
Last updated: 31 August 2026
Havenholt LTD is committed to protecting your personal information. This policy explains what we collect when you browse or buy from havenholt.com, why we collect it, who we share it with, and what control you have over it.
We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We don't sell your personal information.
1. Who we are
| Store name | Havenholt |
| Company name | Havenholt LTD |
| Address | St Andrew's Street, Cambridge CB2 3BJ, United Kingdom |
| support@havenholt.com | |
| Phone | +44 1223 302601 |
| Hours | Monday to Friday, 9:00 am–5:00 pm UK time |
Havenholt LTD is the data controller for the information described in this policy.
2. What we collect
When you place an order Name, email address, telephone number, billing address, delivery address, the contents of your order, payment confirmation, and records of delivery, returns and refunds.
Payment information Card details go directly into our payment provider's secure form and never reach our servers. We receive a payment confirmation, the last four digits and the card type.
When you create an account Username, encrypted password and your account preferences.
Automatically, when you visit IP address, browser type and version, device type, operating system, time zone, pages and products viewed, search terms used, referring site, how you navigate the site, and how you interact with our emails and advertising.
We collect this through cookies, log files, web beacons, tags and pixels.
When you contact customer service Whatever you include in your message, plus your email address.
From third parties Shopify, our payment providers and our delivery partners supply the information needed to complete your order.
3. Why we use it, and on what basis
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Taking payment and issuing refunds | Performance of a contract |
| Managing your account | Performance of a contract |
| Customer service | Performance of a contract |
| Preventing and investigating fraud | Legitimate interests |
| Improving the site and understanding how it's used | Legitimate interests |
| Accounting, tax and other legal obligations | Legal obligation |
| Marketing emails and offers | Consent |
| Analytics and advertising cookies | Consent |
Where we rely on legitimate interests, we've considered whether our interest is outweighed by your rights, and you can object at any time.
Information we need to fulfil your order is processed to perform our contract with you — that isn't consent you can withdraw mid-order. For marketing and non-essential cookies we ask separately, and you can withdraw that consent whenever you like.
Buying from us is never conditional on agreeing to marketing.
4. Marketing
If you've opted in, we'll send you news about products, services and promotions. Unsubscribe any time using the link at the bottom of any marketing email, or by contacting us.
Unsubscribing doesn't stop order confirmations, delivery updates or account notices — we need those to fulfil your order.
5. Cookies
| Type | What it does | Optional? |
|---|---|---|
| Strictly necessary | Basket, checkout, login, security | No — the site won't work without these |
| Functional | Remembers your preferences and settings | Yes |
| Analytics | Traffic and performance measurement | Yes |
| Advertising | Ad targeting and measurement | Yes |
We only set analytics and advertising cookies after you've given consent through our cookie banner, as required by the Privacy and Electronic Communications Regulations. You can change or withdraw that consent at any time through the banner or by clearing cookies in your browser.
Disabling strictly necessary cookies will prevent checkout from working.
Do Not Track: browsers send DNT signals inconsistently and there's no agreed standard, so we don't act on them. We do honour Global Privacy Control signals where transmitted.
6. Advertising
We use your information to show advertising that may be relevant to you.
Google Analytics helps us understand how visitors use the site. See Google's privacy policy, or opt out here.
Advertising partners — we may share information about your use of the site, your purchases and your interaction with our ads, through cookies and similar technologies, subject to your consent.
Shopify Audiences helps us show relevant advertising to people likely to be interested in our products. We may share information about site use, purchases and the associated email address for this purpose.
You can opt out of personalised advertising at:
- Facebook — facebook.com/settings/?tab=ads
- Google — google.com/settings/ads/anonymous
- Digital Advertising Alliance — optout.aboutads.info
- Network Advertising Initiative — networkadvertising.org
7. Who we share it with
- Shopify — the platform powering our store (privacy policy)
- Payment providers — taking payment and screening for fraud
- Delivery and fulfilment partners — getting your order to you
- Email and analytics providers — order confirmations, marketing, site statistics
- Advertising partners — as described in section 6
- Professional advisers, regulators and authorities — where the law requires it
Each receives only what their function requires, and processes it under our instructions. We have data processing agreements in place with our processors.
If the business is sold, merged or restructured, customer records may transfer as part of that. We'd tell you if it happened.
8. Transfers outside the UK
Several of our providers — including Shopify and Google — process information outside the United Kingdom, primarily in the United States, Canada and the EU.
Where information leaves the UK, we rely on UK adequacy regulations or on appropriate safeguards, in particular the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
9. How long we keep it
| Data | Retention |
|---|---|
| Order and transaction records | 6 years — HMRC requirement |
| Account information | Until you close your account |
| Marketing contacts | Until you unsubscribe |
| Customer service correspondence | 2 years after the matter closes |
| Site analytics | 26 months |
Where a dispute or legal claim is live, the relevant records are kept as long as necessary. Otherwise they're deleted or anonymised.
10. Your rights
Under UK GDPR you have the right to:
- Access the personal information we hold about you
- Rectification of anything inaccurate or incomplete
- Erasure of your information, where we're not required to keep it
- Restriction of how we process it
- Data portability — receive your information in a common electronic format
- Object to processing based on legitimate interests, and always to direct marketing
- Withdraw consent at any time, where consent is the basis
- Not be subject to decisions based solely on automated processing that have legal effects
Email support@havenholt.com with "Data Protection Request" in the subject line. We may ask you to confirm your identity, usually by checking details of a recent order.
We respond within one month. Where a request is complex, we may extend that by a further two months and will tell you within the first month. Exercising your rights costs nothing, and we won't treat you differently for doing so.
You may authorise someone to make a request on your behalf; we'll ask for evidence of that authority.
11. Security
We use SSL/TLS encryption across the site, restrict internal access to staff who need it for their work, and use a PCI-DSS compliant payment provider so card details never reach our systems.
No method of transmission or storage is completely secure, so please don't send sensitive information through insecure channels.
Where a personal data breach is likely to result in a high risk to your rights, we'll inform you and report it to the Information Commissioner's Office, as UK GDPR requires.
If you think your account has been misused, contact us as soon as possible.
12. Children
Our site isn't directed at children under 13, and we don't knowingly collect their information. If you're a parent or guardian and believe a child has given us personal information, contact us and we'll delete it.
13. Third-party websites
Our site may link to sites run by others. This policy doesn't cover them, and we're not responsible for their content or privacy practices. Read theirs before providing any information.
14. Complaints
If you have a question or concern about how we handle your information, contact us first — we usually resolve things directly.
If you're not satisfied with our response, you have the right to complain to:
Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF 0303 123 1113 · ico.org.uk
15. Changes
We may update this policy to reflect changes in our practices, our services or the law. The current version is always on this page, with the date at the top. We'll give notice of significant changes.
16. Contact us
Havenholt LTD
Address: St Andrew's Street, Cambridge CB2 3BJ, United Kingdom
Email: support@havenholt.com
Phone: +44 1223 302601
Business hours: Monday to Friday, 9:00 am–5:00 pm UK time
We aim to respond within 24 hours on working days.