Privacy policy

This policy explains how we handle your personal data under UK GDPR and the Data Protection Act 2018.

Who we are

Crisp Easy Trading Ltd (Unit 4, Example Business Park, Manchester, M1 1AA, United Kingdom, company no. 00000000) is the data controller. Contact: support@hearthline.co.uk.

What we collect

Name, email, phone and delivery address when you order.
Messages you send us.
Payment data, processed by our payment provider – we do not store card details.
Technical and usage data via cookies, only where you consent.

Why and our lawful basis

To fulfil your order and deliver it – contract.
To answer queries – legitimate interests.
To keep accounting records – legal obligation.
Analytics and marketing – consent, which you can withdraw at any time.

Sharing

We share data only with delivery couriers, payment providers, IT and hosting suppliers, and where required by law. We do not sell your data.

International transfers

Where suppliers process data outside the UK, we rely on adequacy regulations or the UK International Data Transfer Agreement.

Retention

Order records are kept for 6 years for tax purposes. Enquiries are kept for up to 2 years.

Your rights

You have the right to access, rectify, erase, restrict, object to processing and data portability, and to withdraw consent. Email us to exercise them. You may also complain to the Information Commissioner's Office (ico.org.uk).