Privacy Policy

Studio 210, 134–136 Curtain Road

London, England EC2A 3AR

For personal data processed in connection with our online retail operations, THE HANDLE FACTORY LTD is generally the data controller.

If you have questions about this policy or wish to exercise your data protection rights, please contact us using the details above.

We may collect personal information when you browse our website, place an order, create an account, contact us, or use our services.

• Full name
• Email address
• Telephone number
• Billing address
• Delivery address
• Order information
• Account details
• Customer support messages
• Return and refund requests
• Product enquiries
• Information voluntarily submitted through website forms

When you make a purchase, we may process:

• Order number
• Purchased products
• Order value
• Payment status
• Transaction reference
• Delivery information
• Refund and cancellation records

Payments may be handled by third-party payment processors.

We do not require customers to provide full payment card numbers or card security codes through email or customer support messages.

When you visit our website, certain technical information may be collected automatically, including:

• IP address
• Browser type
• Device type
• Operating system
• Pages visited
• Referring website
• Approximate location derived from technical information
• Website interaction data
• Cookie identifiers, where applicable

The information collected depends on the technologies and services used by our website.

We process personal information for legitimate business purposes and other purposes permitted by law.

Marketing: Sending promotional communications where permitted by law and subject to applicable consent or opt-out requirements.

Under the UK GDPR, we must have a valid lawful basis for processing personal data.

Depending on the circumstances, we may rely on the following bases:

Processing and fulfilling orders

Performance of a contract

Arranging delivery

Performance of a contract

Handling returns and refunds

Performance of a contract or legal obligation

Maintaining tax and accounting records

Legal obligation

Responding to customer enquiries

Contractual necessity or legitimate interests

Preventing fraud and securing our website

Legitimate interests or legal obligation

Sending marketing communications

Consent or legitimate interests, where legally permitted

Using non-essential cookies

Consent, where required

Where we rely on legitimate interests, we consider the relevant business purpose and the rights and freedoms of individuals.

Where consent is required, you may withdraw it at any time.

Payments made through our website are processed using the payment services available at checkout.

Payment processors may collect and process information necessary to authorise and complete transactions.

Depending on the payment method, this may include billing information, payment credentials, transaction references, and fraud-prevention data.

Payment processors may act as independent controllers or processors, depending on their services and applicable terms.

We encourage customers to review the privacy information provided by their selected payment provider.

We do not ask customers to disclose full card details, security codes, or banking passwords through email.

We may share personal information with third parties where reasonably necessary to operate our business, fulfil orders, or comply with legal obligations.

• Payment processing providers
• Delivery and courier companies
• Website hosting providers
• E-commerce technology providers
• Customer support service providers
• IT and security service providers
• Accounting and professional advisers
• Analytics and marketing providers, where applicable
• Regulatory authorities where legally required

We aim to limit information sharing to what is reasonably necessary for the relevant purpose.

Where third parties process personal data on our behalf, we aim to use appropriate contractual and security safeguards.

We do not sell personal information in the ordinary commercial sense of selling customer databases.

Our website may use cookies and similar technologies to support website functionality and improve the browsing experience.

Essential Cookies: Required for core website functions such as shopping baskets, checkout, security, and session management.

Non-essential cookies and similar technologies will be used only where permitted under applicable UK privacy and electronic communications requirements, including obtaining consent where required.

You can manage relevant cookie preferences through the controls made available on our website.

For more information, please review our Cookie Policy.

We may send promotional emails or other marketing communications where permitted by applicable law.

Where consent is required, we will seek it before sending marketing communications.

In certain circumstances, UK law permits marketing to existing customers under the applicable soft opt-in conditions.

You can opt out of marketing communications at any time by:

• Using the unsubscribe option in a marketing email, where provided.
• Contacting info@thehandlefactory.uk.

Opting out of marketing will not prevent us from sending essential order confirmations, delivery updates, or other necessary service communications.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including applicable legal, accounting, tax, and contractual requirements.

Retention periods depend on the type of information and the relevant purpose.

• Order and transaction records: Retained for applicable accounting, tax, and legal requirements.
• Customer support records: Retained as reasonably necessary to manage enquiries and disputes.
• Account information: Retained while an account remains active and for any additional period justified by legal or operational requirements.
• Marketing preferences: Retained as necessary to manage subscriptions and opt-outs.
• Technical logs: Retained for appropriate security and operational purposes.

We will review and delete or anonymise personal information when it is no longer required, subject to applicable legal obligations.

Some service providers used to operate our website may process or store personal information outside the United Kingdom.

Where international transfers occur, we aim to ensure that appropriate safeguards are in place in accordance with applicable UK data protection law.

• UK adequacy regulations
• The UK International Data Transfer Agreement
• The UK Addendum to the EU Standard Contractual Clauses
• Other lawful transfer mechanisms

The safeguards used depend on the relevant provider and transfer arrangements.

We take reasonable technical and organisational measures intended to protect personal information against unauthorised access, accidental loss, misuse, alteration, or disclosure.

Depending on the systems involved, measures may include:

• Secure website connections
• Access controls
• Account authentication
• Payment processing safeguards
• Security monitoring
• Software updates
• Restricted access to customer information

No internet-based system can guarantee absolute security.

If you believe your information has been compromised, please contact us promptly.

Under the UK GDPR, you may have the following rights, subject to applicable conditions and exemptions:

Right to Data Portability: Receive certain personal data in a structured, commonly used, machine-readable format where the legal conditions apply.

Rights Relating to Automated Decision-Making: Receive applicable protections concerning qualifying solely automated decisions.

info@thehandlefactory.uk

We may request reasonable information to verify your identity before responding.

We will generally respond within one month, subject to lawful extensions or exceptions.

Our website is intended for general retail customers and is not specifically directed at children.

We do not knowingly seek to collect personal information from children for independent purchasing or marketing purposes.

If you believe a child has provided personal information inappropriately, please contact us so we can review the matter.

Our website may contain links to third-party websites, including payment providers, manufacturers, or delivery services.

We are not responsible for the privacy practices of independently operated third-party websites.

We recommend reviewing their privacy policies before providing personal information.

We may use automated systems or payment-provider checks to help identify potentially fraudulent or unauthorised transactions.

These checks may involve transaction information, technical identifiers, and payment-related risk indicators.

Where automated processing gives rise to rights under applicable data protection law, we will respect those rights.

If you believe a decision concerning your order has been made incorrectly, please contact our customer support team.

If you have concerns about how your personal information is handled, please contact us first so we can investigate.

You also have the right to complain to the UK's data protection supervisory authority:

You do not have to contact us before making a complaint to the ICO.

We may update this Privacy Policy to reflect changes in our website, business operations, data processing practices, or applicable legal requirements.

Any changes will be published on this page with an updated revision date.

Where required by law, we will provide additional notice or seek consent before implementing relevant changes.

For questions about this Privacy Policy, requests concerning your personal information, or privacy-related complaints, please contact:

Operated by THE HANDLE FACTORY LTD

Studio 210, 134–136 Curtain Road

London, England EC2A 3AR

The Handle Factory — Privacy Policy