Privacy policy

Privacy Policy (UK GDPR Compliant)

1. Introduction

This Privacy Policy explains how The Haveli Room (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit our website, make a purchase, or interact with our services. We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website, you agree to the practices described in this policy.

2. Data Controller

The Haveli Room is the Data Controller responsible for your personal data. Contact: thehaveliroom@outlook.com

3. Personal Information We Collect

Information you provide directly

Name
Billing and shipping address
Email address
Phone number
Payment details (processed securely by Shopify or third‑party payment providers)
Order history
Customer service messages

Information collected automatically

When you browse our site, Shopify automatically collects:

IP address
Browser type
Device information
Cookies and tracking data
Pages viewed and time spent on the site

This helps us improve our website and provide a better shopping experience.

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following lawful bases:

Contract — to process and fulfil your orders
Legal obligation — tax, accounting, and regulatory requirements
Consent — marketing emails (you can withdraw at any time)
Legitimate interests — fraud prevention, website analytics, improving customer experience

5. How We Use Your Information

We use your personal information to:

Process and fulfil orders
Communicate with you about your order
Provide customer support
Improve our website and services
Detect and prevent fraud
Comply with legal obligations
Send marketing emails (only with your consent)

6. Sharing Your Information

We share your information only with trusted partners necessary to operate our business:

Shopify (our e‑commerce platform)
Payment processors (Shopify Payments, PayPal, etc.)
Delivery and courier services
Mail handling services (for returns)
Analytics providers (Shopify analytics, cookies)

We do not sell or rent your personal information.

7. Cookies

Our website uses cookies to:

Enable essential site functionality
Remember your preferences
Improve performance
Provide analytics
Support personalised marketing (only with consent)

You can manage or disable cookies through your browser settings.

8. Your Rights Under UK GDPR

You have the right to:

Access the personal data we hold about you
Request corrections to inaccurate data
Request deletion of your data (in certain circumstances)
Object to processing
Request restriction of processing
Request data portability
Withdraw consent for marketing at any time

To exercise any of these rights, contact us at: thehaveliroom@outlook.com

9. Data Retention

We retain your personal information only as long as necessary to:

Fulfil your order
Provide customer support
Meet legal, tax, and accounting requirements

Order information is typically retained for 6 years as required under UK tax law.

10. Protecting Your Information

We take reasonable technical and organisational measures to protect your data, including:

Secure servers
Encrypted payment processing
Restricted access to personal data
Shopify’s built‑in security protections

However, no online transmission is 100% secure, and we cannot guarantee absolute security.

11. Third‑Party Services

Some third‑party providers (e.g., payment processors) have their own privacy policies. We recommend reviewing their policies to understand how they handle your data.

12. International Transfers

Shopify may store or process your data outside the UK. When this occurs, Shopify ensures appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).