Privacy policy
This Privacy Policy explains how Secure Payment Ltd, trading as Halsworth & Hayes, collects, uses, stores and shares your personal information when you visit halsworthhayes.shop, place an order, contact us, create an account, sign up to receive marketing communications, or otherwise interact with our website and services. This policy is intended to provide clear and transparent information about how personal data is handled in accordance with the United Kingdom General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“PECR”).
1. Who we are
The data controller responsible for your personal information is:
Secure Payment Ltd trading as Halsworth & Hayes
Companies House: 16138815
Registered office: Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA, England
Email: contact@halsworthhayes.shop
Website: halsworthhayes.shop
Telephone: +44 7834 414553
If you have any questions about this Privacy Policy or how your personal information is handled, you can contact us using the details above.
2. Information we collect
We may collect the following categories of personal information when you use our website or interact with us:
Name.
Billing address and delivery address.
Email address.
Telephone number.
Order history and purchase details.
Payment-related information, such as billing details and payment status; full payment card details are processed securely by our payment service providers and are not stored directly by us unless explicitly stated at checkout.
Technical information, including IP address, browser type, device type, time zone, referral source and pages visited.
Customer service communications and any information you choose to share when contacting us.
Marketing preferences, consent choices and subscription status.
Account login and account-related information where you create a customer account.
We do not intentionally collect special category or sensitive personal information unless you choose to provide it to us and we have a lawful basis to process it. Please do not send sensitive personal data unless it is necessary and requested.
3. How we use your information
We use personal information to:
Process, fulfil and deliver orders.
Send order confirmations, shipping updates and service-related messages.
Provide customer support and respond to enquiries.
Manage returns, refunds, exchanges and delivery issues.
Verify transactions and help prevent fraud, abuse and unauthorised activity.
Operate, improve and secure our website, services and checkout experience.
Maintain customer accounts and process account-related requests.
Comply with legal, tax, accounting and regulatory obligations.
Send marketing communications where permitted by law or where consent has been given.
Measure website performance, understand user behaviour and improve the customer experience.
Personal information will only be used for the purposes for which it was collected, unless a compatible use is permitted or required by law.
4. Legal bases for processing
Under the UK GDPR, personal information is processed on one or more of the following legal bases:
Contract: to process orders, take payment, arrange delivery, manage accounts and provide customer service.
Legal obligation: to keep records for tax, accounting, fraud-prevention, consumer law and regulatory compliance purposes.
Legitimate interests: to protect the business, prevent fraud, secure the website, improve services, analyse website use and manage operations effectively, provided those interests are not overridden by your rights and freedoms.
Consent: for certain cookies, marketing emails or similar communications where consent is required by law.
Where legitimate interests are relied upon, a balancing assessment is applied to ensure that your rights and interests are respected.
5. Who we share information with
Personal information may be shared with trusted third parties only where necessary to operate the business and provide services, including:
E-commerce platform and website hosting providers.
Payment processors and fraud-prevention providers.
Delivery, shipping and logistics partners.
Email marketing and customer communication providers.
Analytics, advertising, website security and performance providers.
Professional advisers such as accountants, auditors and legal advisers.
Public authorities, regulators, courts or law-enforcement bodies where disclosure is required by law or to protect legal rights.
These third parties may process personal information only on documented instructions, where applicable, or where they act as independent controllers under their own legal obligations. Personal information is not sold to third parties.
6. International transfers
Some service providers may process personal information outside the United Kingdom. Where international transfers take place, appropriate safeguards are used as required by applicable law.
These safeguards may include adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, depending on the circumstances of the transfer.
7. Cookies and similar technologies
The website uses cookies and similar technologies to operate properly, remember preferences, measure website performance and support advertising or marketing activities where permitted. Some cookies are strictly necessary for the operation of the site, while others are optional and used only with consent where required by law.
You can manage cookie preferences through the cookie banner, where available, and through your browser settings. More detailed information is provided in the Cookie Policy.
8. Marketing communications
Marketing emails or similar communications are sent only where permitted under PECR and other applicable laws, including where consent has been given or where an existing customer relationship allows lawful marketing subject to opt-out rights. You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.
Opting out of marketing does not affect service-related communications such as order confirmations, shipping updates, account notices or legally required messages.
9. Data retention
Personal information is kept only for as long as necessary for the purposes described in this policy, including to meet legal, accounting, tax, fraud-prevention and dispute-resolution requirements.
In general:
Order and invoice records may be kept for up to 6 years.
Customer service communications may be kept for as long as reasonably necessary to resolve issues and maintain business records.
Marketing preference records are kept until consent is withdrawn or the user unsubscribes, plus a limited period to maintain suppression records where appropriate.
Analytics and technical information is retained for a limited period depending on business and reporting needs.
When personal information is no longer required, it is deleted, anonymised or securely destroyed where appropriate.
10. Your rights
Depending on the applicable law, you may have the right to:
Request access to the personal information held about you.
Request correction of inaccurate or incomplete information.
Request deletion of personal information.
Object to certain types of processing.
Request restriction of processing in certain circumstances.
Withdraw consent where processing is based on consent.
Request transfer of your personal information in a portable format where applicable.
Opt out of marketing communications at any time.
To exercise any of these rights, please email contact@halsworthhayes.shop. Reasonable information may be requested to verify your identity before a request is fulfilled.
If you believe your personal information has been handled unlawfully, you may complain to the Information Commissioner’s Office (“ICO”) through ico.org.uk.
11. Security
Appropriate technical and organisational measures are used to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These measures may include secure hosting, access controls, SSL-protected pages, secure checkout technology and encrypted payment processing where supported by service providers.
No internet-based transmission or storage system can be guaranteed to be completely secure. However, reasonable safeguards are used to reduce risk and protect the information processed through the website.
12. Children
The website and products are intended for adults. Personal information is not knowingly collected from children.
If it becomes apparent that personal information has been collected from a child in breach of applicable law, reasonable steps will be taken to delete that information.
13. Changes to this policy
This Privacy Policy may be updated from time to time to reflect changes in legal requirements, operational practices, technologies or business processes. The latest version will always be published on this page.
Where appropriate, additional notice may be given for material changes.
COMPANY INFO
Store name: Halsworth & Hayes
Legal entity: Secure Payment Ltd
Trading as: Halsworth & Hayes
Company number: 16138815
Registered office: Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA, England
Email:contact@halsworthhayes.shop
Telephone: +44 7834 414553
Customer care: We aim to respond within 1 business day, Monday to Friday.