Data Protection

1. Data controller

The data controller for this website is Heirloom Waistcoats Ltd, based at Crown House, Russell Street, Heywood, OL10 1NX. As data controller, we are responsible for deciding how and why your personal data is collected and used.

Website: heirloomwaistcoats.co.uk

2. What personal data we hold

We may collect and hold the following personal data when you use our website or get in touch with us:

• Your name, job title, and company or business name
• Your email address, phone number, and postal address
• Order and product enquiry details
• Communications you send to us via our contact form, phone, or email

We only collect information that is necessary to process your enquiry, order, or business relationship with us.

3. Lawful basis for processing

We process your personal data on the following lawful bases:

• Contract — to process and fulfil your order or trade account
• Legitimate interests — to respond to enquiries and manage our business relationships
• Legal obligation — to comply with financial and tax record-keeping requirements
• Consent — where you have agreed to receive communications from us

4. How we store your data

Your data is stored securely and is only accessible to authorised members of the Heirloom Waistcoats Ltd team. We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse.

5. How long we keep your data

We retain personal data only for as long as necessary. Order and customer data is typically kept for up to 6 years in line with standard UK business and tax record-keeping requirements. Enquiry data is held for up to 12 months.

6. Sharing your data

We do not sell your personal data. We may share it with trusted third parties only where necessary, such as delivery and logistics providers to fulfil your order. These parties are required to handle your data in accordance with UK GDPR.

7. Your rights

Under UK GDPR, you have the following rights:

• The right to access the personal data we hold about you
• The right to have inaccurate data corrected
• The right to have your data deleted (where applicable)
• The right to restrict or object to how we process your data
• The right to data portability
• The right to withdraw consent at any time

To exercise any of these rights, please contact us using the details below. We will respond within one month.

8. Data Protection Complaints

If you have concerns about how we process your personal data, please contact us in the first instance using the details provided on this website.

We will acknowledge your complaint within 30 days and investigate the matter promptly.

We aim to provide a full response without undue delay.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

Website: Information Commissioner’s Office (ICO)