Privacy policy

Last updated: 22 September 2026

 

1. Who we are

Haldon Trading Ltd, trading as Haldon and Haldon Care Club, operates this website and online store.

For the purposes of UK data protection law, Haldon Trading Ltd is the data controller responsible for the personal information described in this Privacy Policy.

Company name: Haldon Trading Ltd
Company number: 17441005
Registered office: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
Email: info@haldon.cc

Our store is hosted by Shopify, which provides the ecommerce platform through which we offer our products and services.

This Privacy Policy explains how we collect, use, disclose and protect personal information when you:

• Visit or use our website;

• Create or use a customer account;

• Purchase or pre-order a product;

• Pay a deposit or outstanding balance;

• Join the Haldon Care Club or subscribe to marketing;

• Contact us; or

• Otherwise interact with Haldon.

This policy should be read alongside our Terms of Service, Cookie Policy and any other notice provided when we collect personal information.

2. Personal information we collect

The information we collect depends on how you interact with Haldon.

Identity and contact information

This may include:

• Your name;

• Email address;

• Telephone number;

• Billing address;

• Delivery address; and

• Details associated with your customer account.

Order and transaction information

This may include:

• Products viewed, added to your basket or purchased;

• Pre-orders and deposits;

• Outstanding balances;

• Order history;

• Delivery information;

• Returns, exchanges, cancellations and refunds;

• Discount codes used; and

• Payment status and transaction references.

Payment information

Payments are processed by Shopify and our payment-service providers.

We do not ordinarily receive or store your complete payment-card number. We may receive limited payment information such as:

• Payment status;

• Payment method or card type;

• The final digits of a payment card;

• Payment tokens;

• Transaction references; and

• Information required to administer deposits, refunds and outstanding balances.

Account information

If you create a customer account, we may process:

• Account identifiers;

• Authentication information;

• Saved addresses;

• Order history;

• Preferences; and

• Account settings.

Passwords and other authentication credentials are handled through Shopify’s systems and are not available to Haldon in readable form.

Communications

This includes information contained in:

• Customer-service enquiries;

• Emails and contact forms;

• Complaints;

• Reviews or feedback;

• Returns correspondence; and

• Other communications with us.

Device and usage information

When you use our website, we may collect:

• IP address;

• Browser and device type;

• Operating system;

• Approximate location derived from an IP address;

• Cookie and similar technology identifiers;

• Pages viewed;

• Links selected;

• Referring website;

• Basket activity; and

• Dates and times of interactions.

Marketing information

This may include:

• Marketing preferences;

• Newsletter subscriptions;

• Records of consent;

• Unsubscribe requests; and

• Engagement with our emails or advertisements.

We do not intentionally collect special-category information, such as information about health, religion, ethnicity, political opinions or sexual orientation.

Please do not send us special-category or other sensitive personal information unless it is necessary and we have asked you to provide it.

3. How we collect personal information

We may collect personal information:

Directly from you

For example, when you:

• Place an order or pre-order;

• Pay a deposit or balance;

• Create an account;

• Subscribe to the Haldon Care Club;

• Complete a form;

• Contact us; or

• Request a return or refund.

Automatically

We collect certain information automatically through cookies, pixels, server logs and similar technologies when you use our website.

Non-essential cookies and tracking technologies are used only where permitted and, where required, after you have provided consent.

From service providers

We may receive information from companies that help us operate our business, including:

• Shopify;

• Payment providers;

• Deposit and pre-order service providers;

• Delivery companies;

• Email and customer-communication providers;

• Fraud-prevention providers; and

• Analytics or advertising providers where you have provided the required consent.

From third parties

We may receive information from social-media platforms, advertising partners or other third parties when you interact with Haldon through those services or have authorised the relevant disclosure.

4. Why we use your information and our lawful bases

We process personal information only where we have a valid lawful basis.

Providing our website and customer accounts

We use personal information to operate our website, provide requested functionality, maintain accounts and remember customer preferences.

Our lawful bases are:

• Performance of a contract or taking steps at your request before entering a contract; and

• Our legitimate interests in operating and improving our business and website.

Processing orders, pre-orders and deposits

We use personal information to:

• Process purchases and pre-orders;

• Take deposits and outstanding balances;

• Send order and payment confirmations;

• Arrange delivery;

• Manage returns, refunds, exchanges and cancellations; and

• Provide information about availability or expected dispatch.

Our lawful basis is performance of our contract with you or taking steps at your request before entering into a contract.

Customer service and communications

We use personal information to respond to questions, provide support, resolve complaints and maintain our relationship with customers.

Our lawful bases are:

• Performance of a contract; and

• Our legitimate interests in providing effective customer service and managing our business relationships.

Security and fraud prevention

We may use personal information to authenticate accounts, protect transactions, prevent fraud, investigate suspicious activity and maintain the security of our website.

Our lawful bases are:

• Our legitimate interests in protecting Haldon, our customers and our services;

• Compliance with legal obligations; and

• Establishing, exercising or defending legal claims where necessary.

Legal, accounting and regulatory purposes

We may process and retain personal information to:

• Maintain tax and accounting records;

• Respond to lawful requests from public authorities;

• Comply with consumer-protection and product-safety requirements;

• Manage disputes; and

• Establish, exercise or defend legal claims.

Our lawful bases are compliance with legal obligations and our legitimate interests in protecting and administering our business.

Analytics and service improvement

We may use limited information to understand how our website performs, identify technical problems and improve our services.

Our lawful bases are:

• Our legitimate interests where processing is necessary, proportionate and does not require consent; and

• Your consent where analytics use non-essential cookies or similar technologies.

Marketing

We may use your contact details to send news, product information, launch updates and promotional communications.

We do this:

• With your consent; or

• Where legally permitted, under the existing-customer “soft opt-in” for marketing concerning similar Haldon products.

Where the soft opt-in applies, our data-protection lawful basis is our legitimate interest in promoting relevant Haldon products. We will provide an opportunity to opt out when we first collect your details and in every subsequent marketing communication.

You can unsubscribe at any time. Withdrawing consent or unsubscribing will not affect service messages concerning an order, payment, account, safety notice or other transaction.

Personalised advertising

Where you consent, we may use cookies or similar technologies to measure advertising performance or show more relevant advertisements on third-party platforms.

Our lawful basis is consent. You may withdraw that consent through our cookie-preference controls.

We do not sell personal information for monetary payment.

5. Information needed to fulfil an order

Certain information, including your name, contact details, delivery address and payment information, is required to enter into and perform a contract with you.

If you do not provide this information, we may be unable to process an order, collect a deposit, arrange delivery or provide the requested service.

Marketing information is optional and is not required to make a purchase.

6. Marketing preferences

You can stop receiving promotional emails at any time by:

• Selecting the unsubscribe link in a marketing email;

• Changing your available customer-account preferences; or

• Contacting us at info@haldon.cc.

We may retain limited information on a suppression list after you unsubscribe so that we can respect your request and avoid contacting you again.

Unsubscribing from marketing does not prevent us from sending necessary transactional communications about an order, pre-order, deposit, payment or account.

7. Cookies and similar technologies

We use cookies and similar technologies to operate our website.

These may include:

• Strictly necessary cookies: required for checkout, security, basket functionality, customer accounts and other essential website functions;

• Preference cookies: used to remember settings and choices;

• Analytics cookies: used to understand website use and performance; and

• Advertising cookies: used to measure campaigns and provide personalised advertising.

Strictly necessary cookies do not require consent.

We will not use non-essential analytics or advertising cookies where consent is required unless you select “Accept” or enable the relevant category through our cookie-preference controls.

You can reject non-essential cookies or change your preferences at any time through the cookie settings available on our website.

More information about individual cookies, their providers and their duration is available in our Cookie Policy or cookie-preference centre.

Disabling certain cookies may affect some non-essential website features but will not prevent access to essential shopping functionality.

8. How we disclose personal information

We disclose personal information only where necessary and for the purposes described in this policy.

Recipients may include:

Shopify

Shopify provides our ecommerce platform, hosting, checkout, customer-account and related services.

For personal information Shopify processes on our behalf in connection with your interaction with Haldon, Haldon is generally the controller and Shopify acts as our processor.

Shopify may act as an independent controller for certain services it provides directly to individuals or for its own legally permitted purposes. More information is available in the ⁠Shopify Consumer Privacy Policy.

Payment, deposit and pre-order providers

We disclose information to payment processors and any deposit or pre-order provider required to:

• Authorise and process payments;

• Store payment tokens securely;

• Administer deposits;

• Collect outstanding balances;

• Issue refunds; and

• Prevent payment fraud.

These providers process payment information under their own security and regulatory obligations.

Delivery and fulfilment providers

We provide the information needed to prepare, address, track and deliver orders to couriers, postal providers and fulfilment partners.

Technology and professional-service providers

We may disclose information to providers that support:

• Website hosting and maintenance;

• Customer communications;

• Email delivery;

• Cloud storage;

• Security;

• Fraud prevention;

• Customer support;

• Accounting;

• Legal advice; and

• Business administration.

Analytics and advertising providers

Where required, we disclose information to analytics, social-media and advertising providers only after obtaining the appropriate consent.

These providers may process information under their own privacy policies when acting as independent controllers.

Authorities and legal recipients

We may disclose information where reasonably necessary to:

• Comply with a legal obligation;

• Respond to a valid court order or regulatory request;

• Protect the safety, rights or property of Haldon, our customers or others;

• Investigate fraud or unlawful activity; or

• Establish, exercise or defend legal claims.

Business transactions

If Haldon is involved in a restructuring, investment, merger, acquisition or sale of all or part of its business, personal information may be disclosed to prospective or actual advisers, investors or purchasers, subject to appropriate confidentiality and data-protection requirements.

9. Shopify and enhanced services

Information submitted through our store is transmitted to Shopify and may be processed by Shopify and its subprocessors in order to provide the ecommerce platform and associated services.

Where Shopify provides features that combine interactions across Shopify services or merchants, Shopify may be responsible for some of that processing as an independent controller. Any such use is subject to Shopify’s applicable privacy notices and the privacy settings available through Shopify.

You can learn more or exercise rights relating to processing for which Shopify is the controller through the ⁠Shopify Privacy Portal.

10. International transfers

Some of our service providers may process personal information outside the United Kingdom or European Economic Area.

Where personal information is transferred internationally, we use safeguards required by applicable law. These may include:

• A United Kingdom or European Commission adequacy decision;

• The European Commission’s Standard Contractual Clauses;

• The United Kingdom International Data Transfer Agreement;

• The United Kingdom Addendum to the Standard Contractual Clauses; or

• Another legally recognised transfer mechanism.

We also assess service providers and contractual protections where appropriate.

You may contact us at info@haldon.cc for further information about the safeguards used for relevant international transfers.

11. How long we retain personal information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, security and dispute-resolution requirements.

Our usual retention periods are:

• Orders, payments, refunds and accounting records: normally six years after the end of the relevant financial year;

• Customer accounts: while the account remains active and normally for up to two years after closure, except where associated transaction records must be kept for longer;

• Customer-service enquiries and correspondence: normally up to two years after the matter is resolved;

• Marketing information: until you unsubscribe, withdraw consent or the information is no longer required for marketing;

• Suppression-list information: for as long as necessary to ensure that an opt-out continues to be respected;

• Consent records: for as long as necessary to demonstrate compliance and respond to potential complaints or legal claims;

• Fraud, disputes and legal claims: for the duration of the investigation or dispute and any applicable legal limitation period; and

• Cookie information: for the periods identified in our Cookie Policy or cookie-preference centre.

We may retain information for longer where required by law, regulation, court order or an ongoing legal claim. When information is no longer required, we will delete or anonymise it where reasonably practicable.

12. Security

We use appropriate technical and organisational measures intended to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include:

• Access controls;

• Authentication;

• Secure service providers;

• Encrypted transmission;

• Payment-industry security controls;

• Software maintenance; and

• Internal procedures for handling personal information.

No method of transmission or storage is completely secure. You should use a unique password for your customer account and avoid sending sensitive information through insecure channels.

If you believe your account or interaction with Haldon has been compromised, please contact us promptly.

13. Automated decision-making

Haldon does not currently make decisions about customers based solely on automated processing that produce legal or similarly significant effects.

We may use limited automation to detect suspected fraud, recommend products, manage website functionality or personalise communications. Where a payment provider or another independent controller operates its own fraud-prevention systems, its processing is governed by its applicable privacy notice.

14. Your rights

If UK or EU/EEA data-protection law applies, you may have the following rights:

• Access: to request confirmation of whether we process your personal information and obtain a copy;

• Rectification: to ask us to correct inaccurate or incomplete information;

• Erasure: to ask us to delete information in certain circumstances;

• Restriction: to ask us to limit processing in certain circumstances;

• Data portability: to receive certain information in a structured, commonly used and machine-readable format;

• Objection: to object to processing based on legitimate interests;

• Withdrawal of consent: to withdraw consent at any time where processing relies on consent; and

• Automated decisions: to request safeguards where a legally significant decision is made solely by automated means.

Right to object to direct marketing

You have the right to object to our use of your personal information for direct marketing at any time.

You can exercise this right through the unsubscribe link in our communications or by contacting info@haldon.cc.

These rights are subject to legal conditions and exemptions. For example, we may need to retain transaction information where required by tax or accounting law.

To exercise a right, contact info@haldon.cc. Please describe your request and provide sufficient information for us to identify the relevant records.

We may request reasonable evidence of identity before responding. This protects personal information against unauthorised disclosure.

We normally respond within one month, although the period may be extended where permitted for a particularly complex request. We will explain any permitted extension.

You will not ordinarily be charged for exercising your rights. We may charge a reasonable fee or decline to act where a request is manifestly unfounded or excessive, as permitted by law.

15. Children

Our website and products are not directed at children under 18, and we do not knowingly collect personal information directly from children.

If you believe that a child has provided personal information to us without appropriate permission, please contact info@haldon.cc so that we can investigate and, where appropriate, delete it.

16. Third-party websites

Our website may contain links to websites, social-media services or other platforms operated by third parties.

Those third parties are responsible for their own privacy practices. We encourage you to read their privacy notices before providing personal information.

A link from Haldon does not mean that we endorse or accept responsibility for the third party’s privacy or security practices.

17. Complaints

If you are concerned about how we use personal information, please contact us first at info@haldon.cc so that we can investigate.

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Telephone: 0303 123 1113
Website: ⁠ico.org.uk/make-a-complaint

If you live or work in the European Economic Area, you may also complain to the data-protection supervisory authority in the country where you live or work, or where you believe an infringement occurred.

18. Changes to this policy

We may update this Privacy Policy to reflect changes to our services, technology, suppliers, legal obligations or business practices.

When we make changes, we will publish the revised policy and update the “Last updated” date. Where required, we will provide additional notice or obtain renewed consent.

19. Contact us

For questions, complaints or requests concerning this Privacy Policy or your personal information, contact:

Haldon Trading Ltd
71–75 Shelton Street
Covent Garden
London WC2H 9JQ
United Kingdom

Email: info@haldon.cc