Data Protection

1.1

Hindleys Limited is the Data Controller in respect of Personal Data collected and processed through this website and in connection with the products and services we provide.

Where a customer provides Personal Data relating to another individual, including a delivery recipient, the customer is responsible for ensuring that they have an appropriate lawful basis for providing that information to Hindleys Limited.

Hindleys Limited will process Personal Data in accordance with applicable Data Protection Legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1.2

Where a Customer supplies Personal Data to Hindleys Limited so that Hindleys Limited can provide products or services, both parties will comply with their respective obligations under applicable Data Protection Legislation.

Further information about how Hindleys Limited collects, processes and protects Personal Data is set out in this Privacy Policy.

1.3

Hindleys Limited will use Personal Data provided by Customers and Recipients where necessary to:

• Process and fulfil orders;
• Take and manage payments;
• Arrange delivery or collection;
• Provide customer service;
• Manage customer accounts;
• Communicate important information relating to an order;
• Prevent fraud and maintain the security of our website;
• Comply with our legal and regulatory obligations;
• Improve our website, products and services;
• Send marketing communications where we have an appropriate lawful basis to do so.

Where consent is required, you may withdraw that consent at any time.

1.4

Hindleys Limited may share Personal Data with trusted third-party service providers where this is necessary to operate our business and provide our services.

This may include Shopify, payment providers, delivery and fulfilment providers, IT and hosting providers, email providers, analytics providers, marketing platforms and professional advisers.

These organisations may process Personal Data on our behalf or act as independent Data Controllers depending on the service being provided.

We do not sell your Personal Data.

1.5

Where a Customer provides the Personal Data of another person, for example where an order is being delivered to somebody else, the Customer should ensure that the Recipient is aware that their Personal Data will be processed for the purposes of fulfilling the order.

What Information Do We Collect?

We may collect information from you when you:

• Place an order;
• Create or use a customer account;
• Contact us;
• Subscribe to marketing communications;
• Complete a form;
• Browse or interact with our website;
• Request a quotation or further information;
• Make a payment.

Depending on how you interact with us, the information we collect may include:

• Name;
• Billing address;
• Delivery address;
• Email address;
• Telephone number;
• Order and purchase information;
• Customer account information;
• Payment and transaction information;
• Correspondence with us;
• IP address;
• Browser and device information;
• Information about how you use our website;
• Marketing and communication preferences.

Our online store is hosted using Shopify. Shopify processes certain information about visitors and customers in order to provide the ecommerce platform and associated services that enable us to operate our online store.

Payment information may be processed directly by Shopify Payments or other payment providers made available through our website. Hindleys Limited does not normally receive or store your complete payment card details.

What Do We Use Your Information For?

We may use the information we collect for the following purposes:

To process and fulfil orders

We use your information to process payments, confirm orders, arrange delivery, manage returns or refunds and provide information relating to your purchase.

To provide customer service

Your information allows us to respond to enquiries, provide support and resolve problems relating to orders, products and services.

To operate and improve our website

We may use information about how visitors interact with our Shopify store to understand website performance, improve usability and develop our products and services.

To personalise your experience

Where appropriate, information may be used to provide a more relevant shopping experience and remember certain preferences.

To prevent fraud and maintain security

Information may be processed to identify potentially fraudulent transactions, protect customer accounts and maintain the security of our website and systems.

To send service communications

We may use your email address or telephone number to send information relating to your order, delivery, account or enquiries.

These communications are necessary for us to provide the products or services you have requested and are separate from marketing communications.

To send marketing communications

Where you have subscribed to marketing or where we otherwise have a lawful basis to contact you, we may send information about products, services, offers or company news.

You can unsubscribe from marketing emails at any time by using the unsubscribe link contained within the email or by contacting us.

Shopify

Our online store is powered by Shopify.

Shopify provides the ecommerce platform that enables us to sell our products and services online. As part of providing these services, Shopify may process information about customers and visitors to our website.

This may include information necessary to operate the website, process orders, maintain security, provide checkout functionality and improve Shopify's services.

Depending on the services used, Personal Data may be processed outside the United Kingdom. Where international transfers take place, appropriate safeguards will be used in accordance with applicable Data Protection Legislation.

Further information about how Shopify processes Personal Data can be found in Shopify's own privacy documentation.

Payment Information

Payments made through our website are processed using the payment methods available through our Shopify checkout.

Payment processing may be provided by Shopify Payments and/or other third-party payment providers offered through the website.

Payment providers process payment information in accordance with their own privacy and security requirements.

Hindleys Limited does not normally store complete credit or debit card details on its own systems.

How Do We Protect Your Information?

We take appropriate technical and organisational measures to protect Personal Data against unauthorised access, alteration, disclosure, loss or destruction.

Our Shopify store uses encrypted HTTPS connections to protect information transmitted between your browser and the website.

Payment information is processed through secure payment providers and is subject to the security measures implemented by those providers.

Access to Personal Data within Hindleys Limited is restricted to people who require access for legitimate business purposes.

No method of transmitting or storing information electronically can be guaranteed to be completely secure. We therefore take reasonable and proportionate measures to protect Personal Data based on the nature of the information being processed.

Cookies

Our website uses cookies and similar technologies.

Cookies are small files stored on your device that allow websites and services to recognise your browser and remember certain information.

Shopify uses cookies and similar technologies that are necessary for the operation of the online store. These may be used for purposes such as:

• Keeping products in your shopping basket;
• Operating the checkout;
• Maintaining website and account security;
• Remembering preferences;
• Understanding website performance;
• Measuring how visitors interact with the website;
• Supporting analytics and marketing where permitted.

Some cookies are strictly necessary for the website to function and do not require consent.

Other cookies, including certain analytics, advertising and marketing cookies, will only be used where permitted by applicable law and, where required, after you have provided consent.

You can manage your cookie preferences through the cookie controls provided on our website.

Analytics and Marketing

We may use analytics and marketing services to understand how visitors use our website and to measure the effectiveness of our marketing.

Depending on the services currently enabled on our Shopify store, these may include Shopify's own analytics services and third-party analytics or advertising platforms.

Where these technologies involve non-essential cookies or similar tracking technologies, they will only be activated where we have an appropriate lawful basis and, where required, you have provided consent.

You can change or withdraw your cookie preferences through the cookie controls available on our website.

Do We Disclose Information to Outside Parties?

We may disclose Personal Data to trusted third parties where necessary to operate our website, fulfil orders and conduct our business.

These may include:

• Shopify;
• Payment processors;
• Delivery and courier companies;
• Fulfilment providers;
• Email and communication providers;
• Website and IT service providers;
• Analytics providers;
• Marketing and advertising providers;
• Accountants, legal advisers and other professional advisers;
• Government bodies, regulators or law enforcement agencies where required by law.

We require service providers processing Personal Data on our behalf to handle that information appropriately and in accordance with applicable Data Protection Legislation.

We may also disclose information where reasonably necessary to comply with the law, enforce our terms, prevent fraud or protect the rights, property or safety of Hindleys Limited, our customers or others.

We do not sell Personal Data to third parties.

International Data Transfers

Some of the organisations that provide services to us, including Shopify and certain technology providers, may process Personal Data outside the United Kingdom.

Where Personal Data is transferred internationally, we will take appropriate steps to ensure that the information receives an appropriate level of protection in accordance with applicable Data Protection Legislation.

This may include relying on adequacy regulations, approved contractual safeguards or other recognised transfer mechanisms.

How Long Do We Keep Your Information?

We retain Personal Data only for as long as reasonably necessary for the purposes for which it was collected.

The length of time information is retained may depend on the nature of the information and our legal, accounting, taxation, fraud prevention and contractual obligations.

Order and transaction records may therefore be retained after an order has been completed where we are legally required or have a legitimate business reason to retain them.

When Personal Data is no longer required, it will be deleted, anonymised or otherwise securely disposed of where appropriate.

Your Data Protection Rights

Under UK Data Protection Legislation, you may have rights relating to your Personal Data, including the right to:

• Request access to Personal Data we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your Personal Data in certain circumstances;
• Request restriction of processing;
• Object to certain types of processing;
• Request the transfer of certain Personal Data;
• Withdraw consent where processing is based on consent;
• Object to direct marketing.

These rights are subject to certain legal conditions and exemptions.

If you wish to exercise any of these rights, please contact Hindleys Limited using the contact details provided on this website.

You also have the right to raise a complaint with the Information Commissioner's Office (ICO) if you are concerned about how your Personal Data has been handled.

Children's Privacy

Our website and products are not intended to collect Personal Data from children unless this is appropriate for the particular product or service being provided.

If we become aware that Personal Data has been collected from a child in circumstances where appropriate consent or another lawful basis was required but was not obtained, we will take appropriate steps to delete the information.

Third-Party Links

Our website may contain links to websites operated by third parties.

Hindleys Limited is not responsible for the privacy practices or content of third-party websites. We recommend reviewing the privacy policy of any external website before providing Personal Data.

Online Privacy Policy

This Privacy Policy primarily relates to Personal Data collected through our website and associated ecommerce services.

Hindleys Limited may also process Personal Data obtained offline or through other business activities. Such information will be handled in accordance with applicable Data Protection Legislation.

Terms and Conditions

Please also refer to our Terms and Conditions, which set out the terms governing purchases and use of our website.

Your Consent and Lawful Basis

We do not rely solely on consent to process Personal Data.

Depending on the circumstances, we may process Personal Data because:

• It is necessary to perform a contract with you, including processing and fulfilling an order;
• We are required to do so by law;
• It is necessary for our legitimate business interests and those interests do not override your rights;
• You have provided your consent.

Where we rely on consent, including for certain marketing activities and non-essential cookies, you may withdraw your consent at any time.

Changes to Our Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, Shopify services, third-party providers or applicable law.

Any updated version will be published on this page.

We recommend reviewing this Privacy Policy periodically.

Cookies Used by Our Shopify Store

The cookies used by a Shopify store can change depending on the Shopify services, theme, applications, analytics tools, payment methods and marketing integrations currently enabled.

Rather than maintaining a fixed list of individual Shopify cookie names that may become outdated, we categorise cookies according to their purpose:

Category	Purpose
Strictly Necessary Cookies	Required for core functionality such as navigation, shopping basket, checkout, security and customer authentication.
Functional Cookies	Used to remember choices and preferences and provide enhanced website functionality.
Analytics Cookies	Help us understand how visitors use the website, which pages are visited and how the website performs.
Marketing Cookies	May be used to measure advertising campaigns and provide more relevant advertising where you have provided the necessary consent.

You can manage non-essential cookies using the cookie preference controls provided on our website.

The exact cookies present may vary depending on the Shopify services and third-party applications currently active on the store.