Privacy Policy
Last updated: 31 August 2026
Havendon LTD ("Havendon", "we", "our" or "us") takes your privacy seriously.
This policy sets out what personal information we collect when you use havendon.com, why we hold it, who else sees it, and what you can require us to do about it.
We process personal information under the UK General Data Protection Regulation and the Data Protection Act 2018.
We don't sell your personal information.
1. Who's responsible
Havendon LTD is the data controller for everything described here.
| Store name | Havendon |
| Company name | Havendon LTD |
| Address | 27 Albion Street, Leeds LS1 5AT, United Kingdom |
| support@havendon.com | |
| Phone | +44 113 394 2415 |
| Service hours | Monday to Friday, 9:00 am–5:00 pm UK time |
| Response time | Within 1–2 working days |
Please note this is our business address, not a returns address. Return instructions are issued when you start a return.
2. What we hold, and when we get it
When you order Name, email address, telephone number, billing address, delivery address, what you bought, payment confirmation, and the record of delivery, returns and refunds attached to it.
Card details go straight into our payment provider's secure form. They don't touch our systems. We see a confirmation, the last four digits and the card type.
When you open an account Username, encrypted password, saved preferences.
When you subscribe, enter a competition, complete a survey or use the contact form Whatever you choose to give us in that context.
Automatically, as you browse IP address, browser and device type, connection information, operating system, language settings, referring URL, which pages and products you looked at, and how you moved through the site.
From others Shopify, our payment providers, delivery partners, fraud-prevention services and analytics providers pass us what's needed to run the business and complete your order. Where you interact with us on social media, we may see information your own privacy settings have made public.
3. What we do with it, and why we're allowed to
| Purpose | Lawful basis |
|---|---|
| Processing, dispatching and delivering orders | Performance of a contract |
| Taking payment and issuing refunds | Performance of a contract |
| Running your account | Performance of a contract |
| Customer support, returns and complaints | Performance of a contract |
| Preventing and investigating fraud | Legitimate interests |
| Keeping the site secure and functioning | Legitimate interests |
| Understanding site performance and improving it | Legitimate interests |
| Running competitions, surveys and site features | Legitimate interests, or consent where required |
| Accounting, tax and other legal duties | Legal obligation |
| Marketing emails | Consent |
| Analytics and advertising cookies | Consent |
Where we rely on legitimate interests, we've weighed our interest against your rights, and you can object at any point.
Where we rely on consent, you can withdraw it whenever you like. That doesn't affect anything processed beforehand.
A purchase is never conditional on agreeing to marketing.
4. Email and marketing
Order-related email — confirmations, dispatch notices, delivery updates, refund notifications — is sent because we need it to complete your purchase. It isn't marketing, and unsubscribing doesn't stop it.
Marketing email goes only to people who have actively opted in. Giving us your address at checkout doesn't sign you up; you have to choose it.
Advertising audiences. Where you've consented, we may use your email address to show you relevant advertising on platforms such as Facebook and Instagram. That's a separate consent from the newsletter — you can accept one and decline the other, and withdraw either at any time.
Unsubscribe using the link at the foot of any marketing email, or by emailing support@havendon.com.
5. Cookies
| Type | Purpose | Optional? |
|---|---|---|
| Strictly necessary | Basket, checkout, login, security | No — the site can't run without them |
| Functional | Remembers preferences and language | Yes |
| Analytics | Traffic, performance, error tracking | Yes |
| Advertising | Ad measurement, relevance, frequency capping | Yes |
Non-essential cookies are set only after you've consented through our cookie banner — that's what the Privacy and Electronic Communications Regulations require. Change or withdraw that consent whenever you like through the banner.
Browsers also let you block cookies. Blocking doesn't delete what's already stored, so you'd clear those separately. Blocking strictly necessary cookies stops checkout working and may lose saved preferences.
We don't store personally identifiable information inside cookies themselves.
6. Who else sees your information
- Website hosting and platform — Shopify
- Payment processors
- Delivery and courier companies
- Customer support tools
- Email providers
- Fraud prevention services
- Marketing and analytics providers
Each gets only what its function needs, acts on our instructions, and is contractually required to protect it. We have data processing agreements in place with our processors.
Analytics providers receive technical data — IP address, browser and device type, connection details, pages viewed and usage statistics — to help us understand how the site performs.
Legal disclosure. We disclose where the law, a court order or a proper request from an authority requires it, and where necessary to protect our rights, prevent fraud, investigate suspected unlawful activity or protect the safety of our customers.
If the business changes hands through merger, acquisition, restructuring or a sale of assets, customer records may transfer — on the basis that the recipient handles them in line with this policy. We'd tell you.
7. Information leaving the UK
Some of our providers process personal information outside the United Kingdom.
Where a transfer is a restricted transfer under UK data protection law, we rely on UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
8. How long we keep things
| Data | Retention |
|---|---|
| Order and transaction records | 6 years — HMRC requirement |
| Account information | Until you close your account |
| Marketing subscriptions | Until you unsubscribe |
| Customer support correspondence | 2 years after the matter closes |
| Website analytics | 26 months |
| Fraud prevention records | 3 years |
Where a dispute or legal claim is live, the relevant records stay for as long as they're needed. Otherwise they're deleted, anonymised or securely destroyed.
One practical note on deletion: routine system backups mean a copy may persist briefly after you've asked us to delete something. Anything remaining is held securely and goes when that backup is overwritten in the normal cycle.
9. What you can require of us
Under UK data protection law you have the right to:
- Access the information we hold about you
- Have it corrected where it's wrong or incomplete
- Have it erased, where we're not required to keep it
- Restrict how we process it
- Receive a copy in a portable electronic format
- Object to processing based on legitimate interests, and always to direct marketing
- Withdraw consent at any time, where consent is the basis
- Avoid decisions made purely by automated processing that carry legal effects
Some of these carry conditions and exemptions.
To exercise one, email support@havendon.com. We may ask you to confirm your identity first, usually by checking details of a recent order.
We respond within one month. For complex requests we may take a further two months, and we'll tell you inside the first month if that applies. There's no charge, and using these rights won't change how we treat you.
Changes you request won't affect records we're legally obliged to keep, or information already shared with authorised third parties before the request reached us.
10. Security
We use technical, organisational and physical measures to protect personal information from unauthorised access, alteration, disclosure and destruction.
That includes SSL/TLS encryption on the site, access limited to staff who need it for their work, and payment handling through a PCI-DSS compliant provider — which is why we don't retain card details after a transaction completes.
No system offers absolute security, and we won't pretend otherwise.
Where a breach is likely to pose a high risk to your rights, we'll tell you without undue delay and report it to the Information Commissioner's Office, as the law requires.
11. Children
Our services aren't intended for children under 13, and we don't knowingly collect their personal information.
If you believe a child has given us their details, email support@havendon.com and we'll remove them.
12. Advertising and other people's sites
Our site may display advertising or link to third-party websites. Havendon doesn't endorse or vouch for third-party advertisements, products or services, and isn't responsible for them.
Once you leave our site, that third party's terms and privacy policy govern what happens next. Read them before providing anything.
13. Complaints
Raise it with us first — support@havendon.com. We acknowledge data protection complaints within five working days and investigate without undue delay.
If our response doesn't satisfy you, you can take it to:
Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF 0303 123 1113 · ico.org.uk
14. Changes to this policy
We update this policy when our services, providers, practices or legal obligations change.
The live version always sits on this page with the date above. Where a change materially affects how we handle your information, we'll take whatever additional steps the law requires.
15. Contact
Havendon LTD
Address: 27 Albion Street, Leeds LS1 5AT, United Kingdom
Email: support@havendon.com
Phone: +44 113 394 2415
Business hours: Monday to Friday, 9:00 am–5:00 pm UK time