Your Privacy, Our Priority at Hearth & Stitch Emporium

Our Commitment to Your Privacy

This Privacy Policy became effective on March 1st, 2024, and is subject to regular review to ensure ongoing compliance with the latest data protection regulations. Hearth & Stitch Emporium is profoundly committed to safeguarding the privacy of our cherished customers. We operate in full adherence to the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018, ensuring that your personal data is handled responsibly and legally.

Our practices are built on principles of accountability, fairness, and transparency. We only collect information that is essential for providing our bespoke services and enhancing your experience with our unique Manchester-rooted collections. For any questions or concerns regarding your privacy or to exercise your data rights, please do not hesitate to contact our dedicated Data Protection Officer.

Key assurances:

• Full GDPR compliance with routine audits and Privacy Impact Assessments (PIA).
• Minimal data collection, limited strictly to essential business and service purposes.
• Secure data storage employing advanced encryption and access controls.
• Clear opt-out mechanisms and complete customer control over personal information.

Contact Our Privacy Team

What Information We Collect

To provide you with the exceptional service and unique products characteristic of Hearth & Stitch Emporium, we collect various types of information, always with your consent where required and a clear purpose. We commit to customer privacy at every step of your journey with us.

• Personal Information: Collected during account creation, purchases (name, address, email, phone), and bespoke alteration consultations (measurements, styling preferences).
• Consultation & Appointment Data: Information necessary to schedule and conduct bespoke tailoring fittings or home textile design consultations.
• Website Usage Data: Non-personally identifiable data on how you interact with our website, gathered via cookies and analytics to enhance your browsing experience.
• Communication Preferences: Your choices regarding email newsletters, offers, and other marketing communications, which you can manage at any time.
• Payment Information: Handled securely by trusted third-party payment processors. Hearth & Stitch Emporium does not store your full payment card details.

How We Use Your Information

The information we collect is used meticulously to provide and improve our services, always in line with UK data protection regulations. Each piece of customer information serves a specific function to enhance your experience:

• Order Processing & Customer Service: To fulfill your purchases, manage returns, and provide responsive customer support.
• Appointment & Consultation Services: To schedule, confirm, and prepare for your bespoke tailoring or interior design consultations.
• Marketing Communications: With your explicit consent, to inform you about new collections, exclusive events in Manchester, and special offers from Hearth & Stitch Emporium.
• Website Enhancement: To analyze user behavior, improve our website's functionality, and personalize your online shopping experience.
• Legal & Operational Compliance: To meet legal obligations, prevent fraud, and ensure the smooth operation of our business.

Information Sharing and Disclosure

Hearth & Stitch Emporium exercises extreme caution when sharing your personal data. We only disclose information to trusted third parties when absolutely necessary for operational purposes or legal compliance, ensuring robust data protection in partnership with:

• Service Providers: Partners assisting with payment processing, shipping, IT infrastructure, and marketing, all bound by strict data processing agreements aligned with GDPR.
• Legal Requirements: We may disclose information if legally required to do so by UK authorities or in response to valid court orders.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of the business, with prior notification and continued privacy protection.

You retain the right to opt-out of non-essential information sharing, particularly for marketing purposes. Your customer privacy is paramount.

Your Rights Under GDPR

As a valued customer of Hearth & Stitch Emporium, your rights under the GDPR are fully respected and upheld. We empower you with control over your personal data:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Ask us to correct any inaccurate or incomplete personal data.
• Right to Erasure ('Right to be Forgotten'): Request the deletion of your personal data where there is no compelling reason for its continued processing.
• Right to Restrict Processing: Request that we limit the way we use your data in certain circumstances.
• Right to Object: Object to our processing of your personal data for direct marketing or certain other purposes.
• Right to Data Portability: Request to receive your personal data in a structured, commonly used and machine-readable format.

To exercise any of these rights, please use the contact details provided below. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent authority set up to uphold information rights.

Exercise Your Data Rights

How We Protect Your Information

Hearth & Stitch Emporium employs a multi-layered approach to ensure the robust security of your personal information, reflecting our dedication to data protection in the UK. We combine cutting-edge technology with rigorous internal policies:

• Technical Measures: Including SSL encryption for all website communication, secure servers, and regular penetration testing.
• Administrative Safeguards: Strict access controls, regular employee training on data handling best practices, and confidentiality agreements.
• Physical Security: Secure facilities for any physical data storage, with restricted access and surveillance.
• Audits & Assessments: Ongoing security audits and vulnerability assessments to identify and mitigate potential risks promptly.
• Data Breach Protocol: Comprehensive notification procedures in place to inform affected customers and regulatory bodies swiftly in the highly unlikely event of a data breach.

Your data security is integral to the trust we build with you.