Privacy Policy

Hoxton Craft – UK GDPR & Data Protection Act 2018 Compliant

Last Updated: November 2026

1. Introduction & Data Controller

Welcome to Hoxton Craft (“we”, “us”, or “our”), operating the website https://hoxtoncraft.shop. We are committed to protecting the privacy, confidentiality, and security of our customers' personal data. This Privacy Policy details how we collect, store, process, and protect your information when you browse our store, commission handcrafted furniture, or communicate with our London customer care team.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:

2. Personal Data We Collect

We only collect personal information necessary to fulfil your orders, provide customer support, and maintain store security:

• Identity & Contact Details: Full name, billing address, delivery address, email address, and UK telephone number (used strictly for furniture courier dispatch and delivery window coordination).
• Transactional Information: Products purchased, dimensions selected, finish options, order totals in GBP (£), and payment confirmation tokens. (Note: Complete credit/debit card numbers are never stored on our servers; they are processed securely through PCI-DSS Level 1 certified gateways including Shopify Payments, Stripe, Apple Pay, and Google Pay).
• Technical & Usage Data: IP address, device type, browser user agent, operating system, and pages viewed, gathered via essential performance and analytics cookies.

3. Lawful Basis for Processing Data

Under Article 6 of the UK GDPR, we process your personal data under the following legal bases:

• Contractual Necessity: To manufacture your bespoke furniture, process payments, and coordinate delivery with specialist UK couriers.
• Legal Obligation: To maintain accounting records, VAT records, and fulfill UK consumer law requirements.
• Legitimate Interests: To protect our website from fraudulent transactions, resolve customer enquiries, and improve website ergonomics.
• Consent: Where you have explicitly opted into receiving our workshop newsletter or seasonal updates (which you may withdraw at any time).

4. Sharing Data with Trusted Third Parties

We do not sell, rent, or trade your personal data to any third-party advertisers. We share information only with essential service providers necessary to operate our business:

• E-Commerce Infrastructure: Shopify Inc. (hosted on secure servers adhering to UK GDPR standard contractual clauses).
• Payment Gateways: Shopify Payments, Stripe, Visa, Mastercard, American Express, Apple Pay, Google Pay, and Shop Pay.
• Logistics & Courier Networks: Specialist UK furniture two-man couriers, Parcelforce, and DPD UK to fulfill physical delivery to your home.
• Google Merchant Center: Anonymised and privacy-compliant product review and feed synchronisation.

5. Data Retention & Security

We implement stringent technical and organisational security measures, including 256-bit SSL encryption across all website pages. Your transactional data is retained for up to 7 years in compliance with UK statutory tax and accounting obligations (HMRC), after which it is securely anonymised or deleted.

6. Your Statutory Rights under UK GDPR

Under UK data protection legislation, you enjoy comprehensive rights regarding your personal information:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where no legal ground requires continued retention.
• Right to Restrict or Object to Processing: Limit how we process your information.
• Right to Data Portability: Obtain and reuse your personal data for your own purposes.

To exercise any of these rights, contact us at support@hoxtoncraft.shop. We respond to all verified requests within 30 days free of charge.

If you believe our data processing violates UK data protection law, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

7. Cookies Policy

Our store uses cookies to enable basic navigation, shopping cart functionality, secure checkout, and anonymous aggregated analytics. You can adjust your browser settings to refuse non-essential cookies at any time.

8. Contact Information