At Heaven & Homes, your privacy matters to us. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, make a purchase, or interact with us in any way.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.

Who We Are

Heaven & Homes is an ecommerce business based in the United Kingdom, focused on providing modern, high-quality furniture to customers nationwide. Our website, heavenandhomes.co.uk, serves as the primary platform for our products and services. We are the data controller for any personal information collected through this website or through other interactions with our business.

What Personal Information We Collect

We collect personal data to provide our services and improve your experience with us. When you interact with our site—whether by browsing, creating an account, placing an order, or contacting us—we may collect information such as your name, email address, phone number, shipping and billing addresses, and any details related to your orders or inquiries.

If you make a purchase, your payment details are handled securely by trusted third-party providers (such as Stripe or PayPal), and we do not store your full payment information. In addition to data you provide directly, we also collect technical data like your IP address, browser type, device information, and your activity on our site to help us understand how visitors use our website and how we can improve.

How We Use Your Information

Your personal information is used primarily to fulfill your orders, process payments, manage deliveries, and provide customer support. We may also use your data to contact you about your order or respond to any questions you submit through our contact form or live chat.

If you’ve opted in to receive marketing communications, we’ll use your email address to send newsletters, special offers, or product updates. You can unsubscribe from these messages at any time by clicking the link in any email or contacting us directly.

We may also use aggregated or anonymized data to understand customer behavior, improve our website performance, and tailor our services. We will never sell your personal data to third parties, and we only share it with trusted service providers who help us operate our business.

How We Protect Your Data

We take your privacy seriously and implement robust security measures to safeguard your data. Our website uses SSL encryption to secure all communication between your browser and our servers. Access to your data is restricted to trained staff and only when necessary to carry out specific tasks related to your order or customer support.

Your data is stored on secure servers that comply with UK and EU data protection standards. We retain your data only for as long as necessary to meet legal, contractual, or business obligations—after which it is safely deleted or anonymized.

Cookies and Tracking

Like most websites, we use cookies to enhance your browsing experience. Cookies help us remember your preferences, keep your cart active, and understand how visitors navigate our site. Some cookies are essential for the site to function properly, while others help us improve performance and deliver personalized marketing.

You can manage or disable cookies at any time in your browser settings. For more information, please see our separate Cookie Policy.

Your Rights

Under the UK GDPR, you have the right to access, update, or delete your personal data. You may request a copy of the data we hold about you, correct any inaccuracies, or ask us to erase your data, where applicable. You also have the right to object to certain types of data processing, such as direct marketing, and to request that we restrict how your data is used.

To exercise any of these rights, you can contact us at privacy@[yourbrand].co.uk. We will respond to your request within one month, in accordance with legal requirements.

Sharing Your Information

We only share your personal information with third parties when absolutely necessary for the functioning of our business. This includes delivery partners, payment processors, and platforms we use for analytics or marketing (such as Google Analytics or Meta Ads). All third-party partners are contractually obligated to handle your data securely and in accordance with the law.

In some situations, we may be required to share your information to comply with legal obligations or in response to lawful requests by public authorities.

International Transfers

Some of our partners or service providers may be located outside the United Kingdom. In such cases, we ensure that your data is protected through approved safeguards such as Standard Contractual Clauses or certification under relevant data privacy frameworks.

Children’s Privacy

Our website and services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their information, please contact us immediately so we can take appropriate action.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law or in our practices. The latest version will always be available on our website, and we encourage you to review it regularly. When significant updates are made, we will notify you through our website or by email if you are subscribed to our mailing list.

Contact Us

If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact:

Address: [Your Business Address], United Kingdom

If you’re not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk.