Privacy Policy
Hawes & Heritage – Luxury Elegance
Hawes & Heritage, a distinguished brand of Ceylon Merchant Limited, is committed to excellence in luxury goods and the protection of your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
Ceylon Merchant Limited is the parent company of Hawes & Heritage, a British brand offering luxury items and natural latex bedding. Registered in the United Kingdom, we act as the data controller for your personal information. For inquiries, contact our Data Protection Lead at:
- Email: info@hawesandheritage.com
- Address: Flat 21, Grosslea 90 Bishopsford Road, Morden, England, SM4 6BE
- Company Registration: 15749443
Data We Collect
We gather the following personal information to provide our exceptional services:
- Identity & Contact Details: Name, email, phone number, and address (e.g., for orders or inquiries).
- Transaction Data: Payment details and purchase history.
- Technical Data: IP address, browser type, and usage data via cookies (see our Cookie Policy).
- Preferences: Details you provide for a tailored experience, such as product interests.
How We Use Your Data
Your information enables Ceylon Merchant Limited and Hawes & Heritage to:
- Process orders and deliver bespoke customer care.
- Personalize your journey with curated recommendations.
- Share updates, offers, or responses to inquiries (with your consent where required).
- Meet legal obligations and prevent fraud.
Our lawful bases include contract fulfillment, legitimate interests (e.g., service enhancement), consent (e.g., marketing), and legal compliance.
Sharing Your Data
We share data only when essential:
- With trusted partners (e.g., payment processors, couriers) bound by strict agreements.
- With authorities if required by law.
- Your data is never sold or shared for unrelated purposes.
International Transfer
If data is transferred outside the UK (e.g., to suppliers), we ensure protection through adequacy agreements or Standard Contractual Clauses.
Data Security
We implement stringent safeguards—encryption, access controls, and regular reviews—to secure your information against unauthorized access or loss.
Your Rights
Under UK law, you may:
- Access, amend, or delete your data.
- Restrict or object to processing.
- Request data portability.
- Withdraw consent (where applicable).
To exercise these rights, email info@hawesandheritage.com. We’ll respond within one week.
Retention
We retain data only as needed—e.g., transaction records for 6 years per tax laws, or marketing data until you opt out.
Cookies
We use cookies to refine your experience. Manage settings in our Cookie Policy.
Complaints
Contact us first with concerns. You may also reach the Information Commissioner’s Office (ICO):
- Website: www.ico.org.uk
- Phone: 0303 123 1113
Updates
This policy may be updated. Review periodically (last updated: 30 March 2025).