Privacy Policy
Last updated:
Heritage Slots ("we", "us", "our") is committed to protecting the privacy of our visitors and customers. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and how you can exercise your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data We Collect
We collect only the personal data you provide directly to us. Depending on how you interact with our site this may include:
- Identity information — name and delivery address, supplied when you complete the enquiry form or place a PayPal order.
- Contact information — email address, telephone number, postcode.
- Transaction information — the items purchased, the price paid, and an order reference number.
- Correspondence — any messages you send to us through the enquiry form or by email.
We do not collect any special category data. We do not knowingly collect data from anyone under 18 years of age.
2. How We Use Your Data
We use your personal data for the following purposes and on the following legal bases:
- To fulfil your order (legal basis: contract) — processing payment, organising delivery, signing and dispatching the Certificate of Restoration.
- To respond to your enquiry (legal basis: contract / legitimate interest) — arranging viewings, quoting part-exchange valuations, providing restoration timelines.
- To comply with our legal obligations (legal basis: legal obligation) — keeping transaction records for HMRC (minimum six years), responding to lawful requests by UK authorities.
- To send you our quarterly Restoration Journal (legal basis: consent) — only if you have subscribed via the newsletter form and have not subsequently unsubscribed.
3. Who Receives Your Data
We do not sell your personal data. We do not share it with advertising networks. We share your data only with the following categories of recipient, all bound by data-processing contracts:
- PayPal (Europe) S.à r.l. et Cie., S.C.A. — processes PayPal payments under their own privacy practices.
- Stripe Payments Europe Ltd. — processes Stripe card payments for confirmed enquiries where PayPal was not used.
- Our specialist UK delivery partner — receives delivery name, address, telephone and email solely for the purpose of scheduling the appointment.
- Our newsletter platform — receives email addresses only for subscribers to the Restoration Journal; you may unsubscribe at any time.
4. International Transfers
All primary data is stored in the United Kingdom and the European Economic Area. Where any individual recipient is located outside the EEA, transfer is governed either by an adequacy decision (e.g. PayPal's Luxembourg operations) or by Standard Contractual Clauses adopted on 4 June 2021.
5. How Long We Keep Your Data
We keep transaction records for six full financial years following the end of the tax year in which the order was completed, in compliance with HMRC requirements. We keep enquiry correspondence for two years from the date of last contact. We keep subscriber email addresses until you unsubscribe.
6. Your Rights
Under the UK GDPR you have the right to:
- Access the personal data we hold about you (Subject Access Request).
- Rectify inaccurate personal data.
- Request erasure of your personal data, subject to our legal record-keeping obligations.
- Restrict or object to processing.
- Data portability for data you have provided to us.
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, write to us at . We will respond within one calendar month.
7. Cookies
This site uses only first-party cookies that are essential to the operation of the shopping cart (storing your selection between page loads) and to remembering your subscription preference. We do not use any analytics cookies, advertising cookies or third-party tracking cookies. You may disable cookies in your browser without losing access to read the catalogue, but the shopping cart will not retain items between visits.
8. Complaints
If you are unhappy with how we have handled your personal data, please write to us first at . You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or via ico.org.uk.
9. Changes to This Policy
Material changes to this Privacy Policy will be posted on this page and, where appropriate, notified by email to active customers. The "Last updated" date at the top of this page reflects when the most recent change was made.
By accessing you confirm that you have read and understood this Privacy Policy.