Privacy Policy

1. Who we are

Ardenholt is an online retail business specialising in premium decorative and heritage‑inspired homeware. Our registered address is:

Ardenholt
21 Ellis Street
London
SW1X 9AL
United Kingdom.

For the purposes of UK data protection law, Ardenholt is the data controller, referred to as “we”, “us” or “our” in this Privacy Policy.

You can contact us about this Privacy Policy or any data protection matter at:

Email: customerservice@ardenholt.co.uk
Telephone: 01895 25478

2. Scope of this Privacy Policy

This Privacy Policy explains how we collect, use and protect your personal data when you:

Place an order through our online store
Create or use an online account (if offered)
Sign up to our mailing list, events or promotions
Contact us by email, telephone or via online forms
Browse and interact with our website.

It applies to customers, prospective customers, website visitors and anyone who contacts us in relation to our online store.

3. The personal data we collect

The personal data we collect depends on how you use our online shop. It may include:

Information you provide to us

Name and title
Billing address and delivery address
Email address and telephone number
Order details and purchase history
Account details (such as username and password), where an account feature is offered
Marketing preferences (for example, whether you’d like to receive newsletters)
Content of communications when you contact us (emails, contact forms, telephone notes).

Payment information

When you pay online, your card or payment details are processed securely by our chosen payment service provider(s).
We do not store your full payment card details on our own servers.

Information collected automatically

When you visit and use our website, we may collect technical and usage data, including:

IP address
Browser type and version
Device type and operating system
Time zone setting and approximate location (based on IP)
Information about how you navigate our site, such as pages viewed, click paths and time spent on pages.

This may involve the use of cookies and similar technologies (see section 10).

4. Why we use your data and legal bases

We only use your personal data where there is a lawful basis to do so under UK data protection law. The main legal bases we rely on are:

a) Performance of a contract
To provide our online store and fulfil your orders, we use your data to:

Process orders placed through our website
Take payment and provide transaction confirmations
Arrange delivery and communicate delivery updates
Manage returns, refunds and customer service related to your purchase.

b) Legitimate interests
We may process your data where it is necessary for our legitimate business interests and these are not overridden by your rights, for example to:

Provide and improve our online customer service
Improve the performance, security and usability of our website
Protect our business from fraud and misuse of our services
Maintain appropriate business records and understand purchasing trends.

c) Consent
We rely on your consent where required by law, including to:

Send email newsletters, product updates and special offers
Use certain non‑essential cookies or similar technologies for analytics and marketing.

You can withdraw your consent at any time, for example by using the unsubscribe link in marketing emails or contacting us directly.

d) Legal obligations
We may process your personal data as necessary to comply with legal obligations, including:

Tax and accounting rules
Responding to lawful requests from public authorities or regulators.

5. How we use your personal data

We may use your personal data for the following purposes:

To operate our online store and provide you with ordered products
To send you service emails and messages related to your orders
To respond to your enquiries, complaints or requests
To manage your online account, if you choose to create one
To send marketing communications where you have agreed to receive them
To analyse how customers use our website so we can develop and improve it
To help protect our website and business against fraud and unauthorised access.

We do not sell your personal data to third parties.

6. Who we share your data with

We may share your personal data with trusted third parties, but only where this is necessary and lawful, including:

Payment service providers who securely process online payments
Delivery and courier services to deliver your orders
Website hosting, e‑commerce and IT providers who support the operation, maintenance and security of our website and online store
Email and communications providers used to send service and (where applicable) marketing emails
Professional advisers, such as accountants or legal advisers, where required
Regulators and law enforcement where we are legally obliged to disclose information.

These third parties must keep your data secure and are only allowed to use it in accordance with our instructions and applicable law.

7. International data transfers

Some of our technology and service providers may transfer or store your personal data outside the United Kingdom or the European Economic Area (EEA).

Where such transfers occur, we will ensure that appropriate safeguards are in place, such as:

The destination country being recognised as providing an adequate level of protection, or
Standard contractual clauses or similar safeguards approved under UK data protection law.

These measures are intended to make sure your data remains suitably protected.

8. How long we keep your data

We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, including for any legal, accounting or reporting requirements.

Typical examples include:

Order and transaction records: generally up to 7 years to comply with tax and accounting obligations
Customer service correspondence: usually up to 2 years after the query or issue is resolved, unless a longer period is appropriate
Marketing contacts: until you unsubscribe, withdraw consent, or we determine that your details are no longer current or engaged.

Once personal data is no longer needed, we will either securely delete it or anonymise it so it can no longer be associated with you.

9. Your rights under data protection law

You have several rights in relation to your personal data under UK data protection law. These include:

Right of access: to request a copy of the personal data we hold about you
Right to rectification: to have inaccurate or incomplete data corrected
Right to erasure: to request deletion of your data in certain circumstances
Right to restrict processing: to ask us to limit how we use your data in some situations
Right to data portability: in some cases, to receive certain data in a structured, commonly used format and to have it transmitted to another organisation
Right to object: to object to processing based on legitimate interests, and to object at any time to processing for direct marketing
Right to withdraw consent: where we rely on consent, you can withdraw it at any point.

To exercise any of these rights, please contact us at customerservice@ardenholt.co.uk or call 01895 25478. We may need to verify your identity before actioning your request.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you are unhappy with how we use your data. Further details are available at **www.ico.org.uk**.