Privacy Policy

HomeStoreDirect is the data controller for the personal information you provide to us. We are registered in England and Wales.

You can contact our data protection team at [email protected].

We collect information you give us directly, such as your name, email address, delivery address, phone number, and payment details when you place an order or create an account.

We also collect data automatically when you browse our website, including your IP address, browser type, pages visited, and how you arrived at our site (for example, via a search engine or advertisement).

If you contact us via our contact form, live chat, or email, we retain a record of that correspondence.

To process and fulfil your orders, including sending order confirmations, dispatch notifications, and delivery updates.

To manage your account and provide customer support.

To send you marketing communications if you have opted in. You can unsubscribe at any time by clicking the link in any marketing email or by contacting us.

To improve our website and services by analysing how visitors use the site.

To comply with our legal obligations, including fraud prevention and tax record-keeping.

Contract: processing your order and managing your account.

Legitimate interests: improving our website, preventing fraud, and sending service-related communications.

Consent: sending marketing emails and placing non-essential cookies on your device.

Legal obligation: retaining financial records and complying with applicable law.

We use cookies and similar technologies to make our website work, remember your preferences, and understand how visitors use the site. Essential cookies are placed automatically; analytics and marketing cookies are only placed with your consent.

You can manage your cookie preferences at any time using the cookie settings link in the footer of our website.

We do not sell your personal data. We share it only with trusted third parties who help us run our business, including payment processors, delivery couriers, and email service providers. All third parties are required to handle your data securely and in accordance with UK GDPR.

We may disclose your data if required to do so by law or in response to a valid request from a law enforcement authority.

We retain order and account data for 7 years to comply with HMRC requirements. Marketing preferences are retained until you withdraw consent. Website analytics data is retained for up to 26 months.

When data is no longer needed, it is securely deleted or anonymised.

Under UK GDPR you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data (subject to legal obligations); object to or restrict certain processing; and data portability.

To exercise any of these rights, please email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We use industry-standard security measures including SSL encryption, secure payment processing, and access controls to protect your personal data. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

We may update this privacy policy from time to time. When we do, we will update the 'last updated' date at the top of this page. We encourage you to review this policy periodically.

If you have any questions about this privacy policy or how we handle your personal data, please contact us at [email protected].