Privacy Policy

Who we are

Heimdepot, 21 Rixton Grove, Thornton-Cleveleys, FY5 4PU, United Kingdom. For any privacy question, email support@heimdepot.store or call +44 1253 863373.

Data we collect

• · Order data: name, delivery and billing address, email address and telephone number.
• · Payment data: processed by our payment providers. We never see or store your full card number.
• · Account and enquiry data: messages you send us and our replies.
• · Marketing data: your email address and consent status if you subscribe to our newsletter.
• · Technical data: IP address, browser type, device type and pages visited, collected through cookies and analytics.

Why we use your data and our lawful basis

• · To take payment and deliver your order — performance of a contract.
• · To provide customer support and handle returns — performance of a contract.
• · To send marketing emails — your consent, withdrawable at any time.
• · To detect and prevent fraud and to keep the site secure — legitimate interests.
• · To meet accounting and tax obligations — legal obligation.

Who we share data with

We share only the data necessary to fulfil your order: our fulfilment partners and carriers (Royal Mail, Evri and DPD), our payment providers, our email and analytics providers, and our accountants. All processors are bound by contract to protect your data and to use it only on our instructions. We never sell personal data.

International transfers

Some of our service providers process data outside the United Kingdom. Where that happens we rely on UK adequacy regulations or the International Data Transfer Addendum to ensure your data continues to receive an equivalent level of protection.

How long we keep data

• · Order and transaction records: six years, to satisfy UK tax law.
• · Customer support correspondence: two years after the enquiry is closed.
• · Marketing consent records: until you unsubscribe, plus two years.
• · Analytics data: up to 14 months in aggregated form.

Your rights

Email support@heimdepot.store to exercise any of these rights. We respond within one month. If you are unhappy with our response you may complain to the Information Commissioner's Office at ico.org.uk.

• · Access a copy of the personal data we hold about you.
• · Ask us to correct inaccurate or incomplete data.
• · Ask us to erase data where we no longer have a lawful reason to keep it.
• · Object to or restrict processing based on legitimate interests.
• · Withdraw marketing consent at any time.
• · Request your data in a portable format.

Security

The site is served exclusively over HTTPS. Access to customer data is restricted to the people who need it to fulfil orders and answer enquiries, and is protected by strong authentication.

Children

Our store is intended for adults. We do not knowingly collect personal data from anyone under 16 years of age.