Privacy Policy
We take your privacy seriously. This policy explains what personal data we collect, why we collect it, and how we use and protect it.
1. Who We Are
Harbor & Hearth Studio Ltd ("Harbor & Hearth", "we", "us", "our") is the data controller for personal information collected through our website and design services. Our studio is located at 28 Marina View Road, Brighton BN2 5WA, United Kingdom.
For all data-related enquiries, please contact us at [email protected].
2. What Data We Collect
We may collect the following types of personal data:
- Contact information: name, email address, phone number, and postal address provided via our contact form, email, or telephone
- Project information: details about your property, design preferences, and project requirements shared with us during consultations
- Financial information: billing address and payment reference numbers (we do not store full card details)
- Website usage data: browser type, pages visited, time spent on pages, and anonymised IP address, collected via cookies
- Correspondence: emails, letters, and records of telephone conversations
3. How We Use Your Data
We use personal data for the following purposes:
- To respond to your enquiries and communicate about your project
- To deliver interior design, furniture curation, and styling services
- To process payments and manage invoicing
- To improve our website and understand how visitors use it
- To send service-related communications and, where consented, occasional updates about our work
- To comply with our legal and regulatory obligations
4. Legal Basis for Processing
We process your personal data under the following lawful bases as defined by the UK GDPR:
- Contract: processing is necessary to fulfil services you have requested or entered into with us
- Legitimate interests: to manage our business, improve our services, and communicate with prospective clients
- Consent: where you have explicitly opted in to receive marketing or portfolio updates
- Legal obligation: to comply with applicable laws including tax and financial record keeping
5. How We Share Your Data
We do not sell, rent, or trade your personal data. We may share data with:
- Trusted third-party suppliers and artisan makers involved in delivering your project, under strict confidentiality obligations
- Payment processors and accountancy software providers
- Legal advisors or regulatory bodies where required by law
All third parties we work with are required to handle your data in compliance with applicable data protection law.
6. Data Retention
We retain client project data for seven years following project completion to comply with financial and legal obligations. Website enquiry data is retained for two years. You may request earlier deletion of your data where no legal obligation requires its retention.
7. Cookies
Our website uses essential cookies to ensure its basic operation. We may also use analytics cookies (such as those from a privacy-respecting analytics provider) to understand how visitors use our site. You may control cookies through your browser settings. Blocking essential cookies may affect site functionality.
8. Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data where no legal basis requires its retention
- Object to or restrict processing in certain circumstances
- Data portability — receive your data in a structured format
- Withdraw consent at any time where consent is the basis of processing
To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.
9. Data Security
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. These measures include encrypted email communications, secure file storage, and restricted internal access to client data.
10. Complaints
If you have a concern about how we handle your personal data, please contact us in the first instance. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any significant changes will be communicated to existing clients. The current version will always be available on this page.
12. Contact Us
For any privacy-related questions, please contact us at [email protected] or write to us at 28 Marina View Road, Brighton BN2 5WA, United Kingdom.