Privacy Policy

Privacy Policy
Last updated: June 2026

This privacy policy explains how Ashby & Hale Harrogate ("we", "us" or "our") collects, uses and discloses your personal data when you visit or use our services, shop at ashbyandhaleharrogate.com ("the webshop") or otherwise contact us about the webshop (collectively "the services"). "You" and "your" in this policy means anyone using our services – customers, visitors and others about whom we hold information.

Ashby & Hale Harrogate is the data controller for the processing of your personal data. We process your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this policy carefully so you understand how we handle your information and what rights you have.

Changes to this privacy policy

We may update this privacy policy from time to time, for example if our practices change or for legal, regulatory or operational reasons. The updated policy will be published on the webshop, and the "Last updated" date will be revised accordingly.

How we collect and use your personal data

To provide our services, we collect personal data about you from various sources. The information we collect depends on how you use the services and interact with us.

We may use your information to:

  • communicate with you
  • deliver and improve our services
  • comply with our legal obligations
  • enforce our terms and conditions
  • protect the services, our rights and the rights of our users

What personal data we collect

Information you provide to us
When you provide information through the services, we may collect:

  • contact details, including name, address, phone number and email
  • order details, including billing and delivery address, payment confirmation, email and phone number
  • account details, including username, password and security information
  • information you share with our customer service

Information about your use
We may collect information about your use of the services through cookies, pixels and similar technologies ("cookies"). This may include information about your device and browser, your network connection, your IP address and other usage data. Cookies that are not necessary for the webshop to function are only used if you have given consent (see the cookies section).

Information from third parties
We may receive information from suppliers and service providers, including:

  • Shopify and affiliated platform providers
  • payment providers who process your orders
  • advertising and analytics partners who use online tracking technologies (only with your consent)

How we use your personal data – and our legal basis

We use your information for:

  • Delivery of products and services: processing payments, fulfilling orders, delivering goods, handling returns and managing your account. Legal basis: performance of the contract with you (UK GDPR Article 6(1)(b)).
  • Marketing and advertising: sending you newsletters and other communications or showing you relevant ads. Legal basis: your consent (UK GDPR Article 6(1)(a) and the Privacy and Electronic Communications Regulations). You can withdraw your consent at any time, for example via the unsubscribe link in our emails.
  • Security and fraud prevention: detecting and preventing fraud and malicious activity. Legal basis: our legitimate interest in protecting the webshop and our customers (UK GDPR Article 6(1)(f)).
  • Improving the services: providing customer service and improving our services. Legal basis: performance of the contract and our legitimate interests (UK GDPR Article 6(1)(b) and (f)).
  • Legal obligations: for example, retaining accounting records as required by law. Legal basis: compliance with a legal obligation (UK GDPR Article 6(1)(c)).

Cookies

The webshop uses cookies to give you a better experience, remember your settings, generate statistics and improve the services. Necessary cookies ensure the webshop functions (e.g. the shopping cart). All other cookies – for statistics, marketing and advertising – are only set if you have given consent via our cookie banner. You can change or withdraw your consent at any time and can also block or delete cookies in your browser; please note this may affect webshop functionality. Read more in Shopify’s cookie policy.

How we share personal data

We may share your information with third parties in connection with:

  • fulfilment of the contract (e.g. IT, shipping, payment, analytics and customer service)
  • marketing and advertising partners (only with your consent)
  • affiliated companies or companies within the same group for legitimate business purposes
  • legal obligations, business transfers or enforcement of our terms

Service providers who process data on our behalf do so as data processors under a data processing agreement. Some of our providers, such as Shopify, may process data outside the UK. In such cases, the transfer is based on a lawful basis, for example an adequacy decision by the UK government or standard contractual clauses.

We have no control over other websites linked to from the webshop. Please read their privacy policies separately.

Children’s information

Our services are not directed at children, and we do not knowingly collect information about anyone under 16 years old. Parents or guardians may contact us to request deletion of information collected about a child.

Security and retention

We have implemented appropriate technical and organisational security measures, but no solution is completely secure. Please avoid sending sensitive information via insecure channels.

We only retain your information as long as necessary for the purposes collected. Order and accounting information is kept for 5 years after the end of the financial year, as required by law. Information used for marketing based on your consent is deleted when you withdraw that consent.

Your rights

Under data protection law, you have the right to:

  • access the information we hold about you
  • have inaccurate information corrected
  • have your information deleted
  • restrict the processing of your information
  • receive your information in a structured, commonly used format (data portability)
  • object to processing based on our legitimate interests, and always to direct marketing
  • withdraw consent at any time – without affecting the lawfulness of processing before withdrawal

Please contact us if you wish to exercise your rights. We will respond within one month.

If you are unhappy with how we process your personal data, you can complain to the Information Commissioner’s Office (ICO) (ico.org.uk). However, we would appreciate if you contact us first so we can try to resolve the issue.

Contact

If you have questions about our processing of personal data or this privacy policy, or wish to exercise your rights, you can contact us:

Ashby & Hale Harrogate
Email: support@ashbyandhaleharrogate.com
Webshop: ashbyandhaleharrogate.com

Customer service hours:
Monday to Friday: 9.00 am – 5.00 pm
Saturday and Sunday: closed

Questions?

Contact us at support@ashbyandhaleharrogate.com or via our contact page. Customer service: Monday–Friday 09.00–17.00 (closed Saturday and Sunday). We usually respond within 24 hours on weekdays.

Company: Black Nocturne LLC
Registration number: 2026-001958126 (Wyoming, USA)
Address: 30 N Gould St, Ste N, Sheridan, Wyoming, 82801, USA