Who we are
Our website address is: [harrisgoldandtweed.com — confirm final domain].
For any questions about this policy, contact [hello@harrisgoldandtweed.com].
What personal data we collect, and why
Orders
When you place an order, we collect the information needed to fulfil it: your name, delivery address, email address, and [phone number, if collected at checkout — confirm]. We use this to process, pack and ship your order, and to contact you about it if needed.
Payment
Payments are processed securely by [payment provider — e.g. Stripe, PayPal, WooCommerce Payments — confirm]. We don’t see or store your full card details ourselves — they’re handled directly by [provider]. Their privacy policy is at [provider’s privacy policy link].
Contact form
When you use the contact form, we collect the name, email address and message you provide, so we can reply to your enquiry. We also collect your IP address and browser information to help prevent spam.
Accounts
If you create an account, we store the details in your profile — name, address, email, and order history — so you don’t need to re-enter them next time. You can see, edit, or delete this information at any time by [logging into your account / contacting us — confirm].
Cookies
Like most online shops, we use cookies to keep track of what’s in your basket as you browse, and to remember you if you’re logged in.
- Basket/session cookies — hold your basket contents while you shop; cleared when you close your browser or complete checkout.
- Login cookies — if you have an account, these last [2 days, or 2 weeks with “Remember me” — confirm WooCommerce’s actual settings].
- [Analytics cookies — only include if using Google Analytics or similar; add provider name + link to their policy]
- [Marketing/tracking cookies — only include if using something like Meta Pixel; add provider name + link]
Media
If images are uploaded to the site, we try to avoid ones with embedded location data (EXIF GPS) — visitors are technically able to extract this from any image on the site.
Who we share your data with
To get your order to you, we share the necessary details with:
- [Shipping carrier — e.g. Royal Mail — confirm], to deliver it
- [Payment provider, as above], to process payment
- [Any email marketing tool, e.g. Mailchimp — confirm if used]
If you request a password reset, your IP address is included in the reset email — this is standard WordPress behaviour.
How long we keep your data
We keep order records for [typically around 6 years — confirm with an accountant, this is a common UK tax/accounting minimum rather than a rule we can state as fact], in line with record-keeping requirements. Contact form enquiries are kept for [as long as needed to resolve the enquiry, then deleted — confirm].
Where your data is sent
[Confirm: is your payment provider, email tool, or hosting based outside the UK/EU? If so, a line is needed here noting the transfer and what safeguards the provider has in place — most major providers (Stripe, Mailchimp, etc.) publish this in their own policies, which is usually enough to link to rather than restate.]
Your rights
Because you’re contacting us from the UK, you have rights over the personal data we hold about you under UK GDPR, including the right to:
- Ask for a copy of the data we hold about you
- Ask us to correct anything inaccurate
- Ask us to delete data we don’t have to keep for legal or tax reasons
- Object to, or ask us to restrict, certain uses of your data
To use any of these, contact us at [hello@harrisgoldandtweed.com]. If you’re unhappy with how we’ve handled your data, you can also complain to the UK’s Information Commissioner’s Office at ico.org.uk.