Privacy Policy

Effective date: 12 October 2026
Last updated: 12 October 2026

This policy explains what personal data Harrington Wells collects, why, who we share it with and what rights you have. It applies to harringtonwellsboutique.com and to any order you place with us.

1. Who we are (data controller)

The controller of your personal data is Despecom Limited, trading as Harrington Wells
Registered address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Company registration number: 16697484
Email: info@harringtonwellsboutique.com

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). For any question about this policy or your data, email us with “Privacy” in the subject line.

2. What data we collect

You give us:

  • Name, delivery address, billing address and postcode
  • Email address and phone number
  • Order details and order history
  • Correspondence with our customer service team, including returns requests
  • Your email address if you subscribe to our newsletter
  • Reviews or photos you choose to send us

We collect automatically when you use the site:

  • IP address, approximate location (country/city level), device type, browser and operating system
  • Pages you visit, products you view, what you add to your basket and how you arrived at the site
  • Cookie and similar identifiers (see section 7)

We receive from others:

  • Confirmation from our payment providers that a payment succeeded or failed, plus the card type and last four digits
  • Delivery status updates from our carriers
  • Aggregated advertising and analytics data from Google and Meta

We never collect or store your full card number, expiry date or security code; those go directly to our payment processor.

3. Why we use your data, and our legal basis

  • Processing and delivering your order, handling returns and refunds, and sending order and delivery emails — performance of a contract.
  • Answering questions and handling complaints — performance of a contract or legitimate interests.
  • Keeping accounting, tax and transaction records — legal obligation.
  • Detecting and preventing fraud — legitimate interests.
  • Sending marketing emails and newsletters — consent, which you can withdraw at any time.
  • Analytics and advertising cookies and retargeting — consent.
  • Improving our products, range and website — legitimate interests.

Where we rely on legitimate interests, we have weighed them against your rights and freedoms. You can object at any time (see section 8).

4. Who we share your data with

We do not sell your personal data. We share it only with service providers who need it to do their job for us, under contracts that require them to protect it:

  • Shopify — our ecommerce platform, hosting and checkout
  • Shopify Payments, card acquirers, Apple Pay, Google Pay and Shop Pay — payment processing
  • Royal Mail and other delivery partners — delivering your parcel
  • ParcelPanel — order tracking
  • Email and customer service providers — order emails and newsletters
  • Google and Meta — analytics, advertising and conversion measurement, where you have consented
  • Accountants and professional advisers — bookkeeping and tax
  • Public authorities — where we are legally required to disclose

5. International transfers

Some of these providers process data outside the UK, including in the European Economic Area and the United States. Where that happens we rely on lawful transfer mechanisms, such as UK adequacy regulations (including for the EEA and, for certified recipients, the UK–US data bridge) and the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses. You can ask us for details of the safeguards used for any transfer.

6. How long we keep your data

  • Order and transaction records: 6 years, to meet accounting and tax obligations
  • Customer service correspondence: 3 years after the matter is closed
  • Newsletter subscriptions: until you unsubscribe, plus a suppression record so we do not email you again
  • Website analytics data: typically 14 months, depending on the tool
  • Cookie consent records: 12 months

After these periods we delete or irreversibly anonymise the data.

7. Cookies and tracking

  • Strictly necessary cookies — run the basket, checkout, login and security. These do not require consent.
  • Analytics cookies — help us understand how the site is used so we can improve it.
  • Marketing and advertising cookies — including the Google Ads and Meta pixels, to measure our advertising and show relevant ads.

Analytics and marketing cookies are only set after you consent through our cookie banner, in line with PECR. You can change or withdraw your choice at any time through the cookie settings on our site, and you can block or delete cookies in your browser.

8. Your rights

Under the UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Rectification of inaccurate or incomplete data
  • Erasure of your data where we have no overriding reason to keep it
  • Restriction of processing in certain circumstances
  • Data portability
  • Object to processing based on legitimate interests, and to direct marketing at any time
  • Withdraw consent at any time, without affecting earlier processing
  • Not be subject to a decision based solely on automated processing that significantly affects you. We do not carry out such decision-making.

To exercise any of these, email info@harringtonwellsboutique.com. We respond within one month, free of charge, and may ask you to confirm your identity first.

Right to complain: if you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF — www.ico.org.uk — 0303 123 1113.

9. Marketing emails

If you subscribe, we will email you about new arrivals, collections and offers. Every email contains a one-click unsubscribe link. Unsubscribing does not stop transactional emails about an order you have placed.

10. Security

We use TLS encryption across the site, restrict access to personal data to people who need it, and work only with processors who maintain appropriate security measures. If a breach occurs that is likely to result in a high risk to your rights, we will notify you and the ICO as required by law.

11. Children

Our store is intended for adults. We do not knowingly collect personal data from anyone under 13. If you believe a child has given us personal data, email us and we will delete it.

12. Changes to this policy

We may update this policy as our business or the law changes. Updates are published on this page with a revised date. If the change is significant, we will tell you by email or by a notice on the site.

Questions? Email info@harringtonwellsboutique.com — Monday–Friday 9:00–17:00, weekends 11:00–17:00 (UK time).