Last Updated
21 Sep 2026

Introduction

At Heritage Creations®, operated by The Heritage Craft Creations UK Ltd, we are committed to protecting your privacy and ensuring that your personal data is handled securely, transparently, and in accordance with applicable data protection laws, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit or make a purchase from www.theheritagecreations.co.uk.

1. WHO WE ARE

The Heritage Craft Creations UK Ltd
Registered in Scotland
Company No: SC870230
VAT No: GB 515083707

ICO Registration Reference: ZC138359
Email: contact@theheritagecreations.co.uk

2. INFORMATION WE COLLECT

We may collect and process the following categories of personal data:
• Identity information, including name, billing address, shipping address, email address and telephone number.
• Transaction information, including order details, payment information, purchase history and delivery details.
• Technical information, including IP address, browser type, device information, website usage data, cookies and analytics data.
• Marketing information, including newsletter subscriptions, advertising interaction and communication preferences.

3. HOW WE COLLECT YOUR DATA

We collect information when you visit our website, place an order, create an account, subscribe to our newsletter, Contact us, participate in promotions, or interact with our advertising campaigns. We may also collect data automatically through cookies and analytics technologies.

4. HOW WE USE YOUR INFORMATION

We use your information to:
• Process payments and orders
• Arrange shipping and delivery
• Provide customer service and order updates
• Improve our website and services
• Analyse website performance and customer preferences
• Send marketing communications and promotional offers
• Prevent fraudulent activity and maintain website security

5. LEGAL BASIS FOR PROCESSING

Under UK GDPR, we process personal data only where we have a lawful basis to do so. Depending on the circumstances, we may rely on:

• Performance of a contract – where processing is necessary to process and fulfil your order, arrange delivery, provide customer service, or take steps at your request before entering into a contract.
• Legal obligations – where processing is necessary to comply with applicable tax, accounting, regulatory, fraud-prevention, or other legal requirements.
• Legitimate interests – where necessary for the operation and improvement of our business, website security, fraud prevention, customer service, and understanding how customers interact with our services, provided those interests are not overridden by your rights and interests.
• Consent – where you have given us permission to process your information for a specific purpose, including certain marketing communications and non-essential cookies or similar technologies where consent is required.

Where we rely on consent, you may withdraw your consent at any time.

6. PAYMENT PROCESSING

Payments made through our website are securely processed by trusted third-party payment providers such as Stripe, PayPal, and WooCommerce Payments. We do not store full payment card details on our servers.

7. THIRD-PARTY SERVICES

We may share personal information with trusted third parties where necessary to operate our business and provide our services. These may include payment processors, e-commerce and website service providers, logistics and delivery partners, analytics providers, advertising and marketing platforms, IT and hosting providers, professional advisers, and regulatory or governmental authorities where required by law.

Depending on the services you use or how you interact with our website, these providers may include Google Analytics, Meta, Stripe, WooCommerce and DHL.

We only share personal information where necessary for the relevant purpose and expect service providers processing information on our behalf to handle it appropriately and securely.

8. INTERNATIONAL DATA TRANSFERS

As part of our international operations and use of third-party service providers, personal information may be processed or transferred outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure that it receives an appropriate level of protection in accordance with applicable UK data protection law. Depending on the destination and circumstances, this may include relying on UK adequacy regulations or appropriate contractual and other safeguards recognised under UK data protection law.

You may contact us at contact@theheritagecreations.co.uk if you would like further information about the safeguards applicable to an international transfer of your personal information.

That’s more useful than making an absolute statement about a particular transfer mechanism that may not apply to every provider.

9. DATA RETENTION
We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, including legal, tax, accounting, and operational requirements. Order and invoice records may be retained for up to 6 years for tax and accounting purposes.

Other personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, taking into account our legal, contractual, operational, security and regulatory obligations.

10. YOUR RIGHTS

Under UK GDPR, you have the right to:
• Access your personal data
• Request correction of inaccurate information
• Request deletion of your data
• Restrict or object to processing
• Withdraw consent
• Request transfer of your data
• Lodge a complaint with the UK Information Commissioner’s Office (ICO). To exercise any of these rights, please contact us at contact@theheritagecreations.co.uk.

11. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies, including where applicable pixels and analytics technologies, to operate the website, remember preferences, understand website usage, measure performance and support our advertising activities.

Some technologies are strictly necessary for the operation and security of our website. Where required by applicable law, non-essential technologies, including certain analytics and advertising technologies, will only be used after you have provided the required consent.

You can manage your preferences through our cookie consent controls and may withdraw or change your consent where available. You can also manage cookies through your browser settings.

For further information about the technologies we use, their purposes, providers and duration, please see our Cookie Policy.

The ICO says users should receive clear information about what technologies are used, their purposes, relevant third parties and duration.

12. MARKETING COMMUNICATIONS

If you opt into our marketing communications, we may send you product launches, collection updates, promotional offers, and editorial content. You can unsubscribe at any time using the unsubscribe link included in our emails.

13. SECURITY

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, loss, misuse, or disclosure. Our website uses SSL encryption and secure payment gateways.

14. CHILDREN’S PRIVACY

Our website is not intended for individuals under the age of 18, and we do not knowingly collect personal information from children.

15. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically to reflect changes in legal requirements, operational practices, or services. Any updates will be posted on this page with a revised “Last Updated” date.

16. CONTACT US

The Heritage Craft Creations UK Ltd
Email: contact@theheritagecreations.co.uk