Hedgerow & Moor Privacy Policy
Last updated: October 2025
For any privacy-related enquiries, please contact:
📧 emma@hedgerowandmoor.co.uk
1. Introduction
Hedgerow & Moor (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal information.
This policy explains what data we collect, how we use it, and your rights under UK data protection law.
It applies to all visitors and customers of www.hedgerowandmoor.co.uk.
2. Who We Are
Hedgerow & Moor is a UK-based small business producing natural skincare and home-care products, operating as the data controller for the personal information we collect through our website and related services.
3. Information We Collect
We may collect and process the following types of data:
-
Identity & Contact Data – your name, billing and shipping addresses, email address, and telephone number.
-
Order Information – products purchased, payment amount, and delivery details.
-
Payment Data – processed securely by our payment providers (e.g. Shopify Payments, PayPal). We do not store full card details.
-
Technical Data – IP address, browser type, device information, and cookies (see Section 8).
-
Marketing Preferences – whether you have opted in to receive updates or newsletters.
4. How We Use Your Information
We process personal data to:
-
Fulfil and deliver your orders;
-
Communicate with you about purchases, returns, or support requests;
-
Send marketing emails if you have opted in (you can unsubscribe any time);
-
Improve our website, products, and services;
-
Comply with legal, tax, and accounting obligations.
5. Lawful Basis for Processing
We process your data under one or more of the following lawful bases:
-
Contract – to fulfil your purchase or provide requested services;
-
Consent – when you sign up for marketing or provide optional information;
-
Legal obligation – to comply with UK law;
-
Legitimate interest – to operate and improve our business in a balanced way that respects your privacy.
6. Data Sharing
We only share personal information with trusted third-party providers necessary for our business operations, including:
-
Shopify – e-commerce platform and secure order management;
-
Payment processors – e.g. Shopify Payments, PayPal, Stripe;
-
Royal Mail – for order delivery;
-
Email marketing services – e.g. MailerLite or Klaviyo (if used).
Each provider only receives the data required to perform its function and must protect it in line with UK GDPR.
7. International Transfers
Shopify and certain processors may store data outside the UK/EEA (for example, in Canada or the USA).
These transfers are protected through approved adequacy decisions or standard contractual clauses to ensure your data receives an equivalent level of protection.
8. Cookies
Our website uses cookies and similar technologies to enable essential functions, improve performance, and analyse traffic.
You can manage or disable cookies through your browser settings.
By continuing to browse our site, you consent to our use of cookies in accordance with this policy.
9. Data Retention
We keep personal information only as long as necessary:
-
Order and transaction records: 6 years (for accounting and tax purposes);
-
Marketing contact details: until you withdraw consent or unsubscribe.
10. Your Rights
Under UK GDPR you have the right to:
-
Access the personal data we hold about you;
-
Request correction of inaccurate information;
-
Request deletion (“right to be forgotten”) where applicable;
-
Restrict or object to certain processing;
-
Withdraw consent at any time (for marketing);
-
Lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.
To exercise any of these rights, email emma@hedgerowandmoor.co.uk.
11. Data Security
We take appropriate technical and organisational measures to protect your information from unauthorised access, alteration, disclosure, or destruction.
All payment information is encrypted and processed via secure SSL connections.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in legislation or our practices.
The latest version will always be available on our website, with the date of the most recent update shown above.
13. Contact
For questions about this Privacy Policy or how your data is handled:
📧 emma@hedgerowandmoor.co.uk
Hedgerow & Moor, Cornwall, United Kingdom