top of page

​

Privacy Notice for Hedge & Hollow



Last updated: 19th November 2025

​

I'm Abby, and I run Hedge & Hollow from my studio in Gloucestershire, UK. I make folklore-inspired brass and corten steel pieces celebrating British hedgerows and plant lore.
 

This privacy notice explains how I collect and use your personal information when you shop with me, visit my website, or get in touch. I take your privacy seriously and I'm committed to protecting your data.
 

If you have any questions about this notice or how I handle your information, please don't hesitate to contact me.


CONTACT DETAILS
 

Hedge & Hollow

Email: abby.conway@me.com

Website: www.hedgeandhollow.com

 

I'm the 'data controller' for your personal information, which means I'm responsible for how it's used and kept safe.
 

WHAT INFORMATION I COLLECT
 

The type of information I collect depends on how you interact with my business:
 

When you buy something from me:
 

  • Your name and delivery address

  • Email address

  • Phone number (if you provide it)

  • Order details (what you bought, when, how much you paid)

  • Payment information (though I don't see your full card details - these are handled securely by payment processors like Stripe, PayPal, or Etsy Payments)
     

When you visit my website:
 

  • Technical information like your IP address, browser type, and how you navigate my site (collected through cookies - see below)
     

When you sign up to my mailing list:
 

  • Your name and email address
     

When you contact me:
 

  • Whatever information you choose to share in your message (email address, phone number, order details, etc.)
     

HOW I USE YOUR INFORMATION AND WHY
 

Under UK data protection law (UK GDPR), I need a 'lawful basis' for using your personal information. Here's what I do with your data and my legal basis for each:
 

1. To process and fulfil your orders


Lawful basis: Contract - I need this information to complete your purchase, send you your order, and contact you if there are any issues.
 

What I do:
 

  • Pack and post your order to your address

  • Send you order confirmations and dispatch notifications

  • Handle any queries, returns, or problems with your order

  • Keep records for accounting and tax purposes
     

2. To send you marketing emails (if you have opted in)


Lawful basis: Consent - You've chosen to receive emails from me about new designs, craft fair dates, and special offers.


What I do:
 

  • Send occasional newsletters about new pieces, folklore stories, and where I'll be selling next

  • You can unsubscribe at any time using the link in every email
     

3. To improve my website and understand my customers


Lawful basis: Legitimate interests - It's in my business's interest to understand how people use my website and what they're interested in, as long as it doesn't override your privacy rights.
 

What I do:
 

  • Use website analytics to see which pages people visit and how they found me

  • Track which products are popular

  • Improve my website based on how people use it
     

4. To comply with legal obligations


Lawful basis: Legal obligation - I'm required by law to keep certain records.
 

What I do:
 

  • Keep financial records for HMRC (for up to 6 years after the end of the relevant tax year)

  • Comply with consumer protection laws
     

5. To handle disputes or legal issues


Lawful basis: Legitimate interests - If there's a problem or legal issue, I need to be able to access relevant information to protect my business and resolve disputes fairly.
 

What I do:
 

  • Keep records of communications and transactions in case of returns, refunds, or complaints
     

WHO I SHARE YOUR INFORMATION WITH
 

I'll only share your personal information when necessary to fulfil your order or comply with the law. I never sell your data to anyone.
 

Delivery companies


When you place an order, I share your name and delivery address with Royal Mail or other couriers so they can deliver your parcel.
 

Payment processors


If you buy through my website, your payment is processed by PayPal. If you buy through Etsy, your payment is processed by Etsy Payments. These companies handle your card details securely - I never see your full card number.
 

Website hosting and email services


My website is hosted by Wix, and I use Mailchimp for my marketing emails. These companies process data on my behalf and have their own privacy policies.
 

Legal authorities


If I'm legally required to, I may need to share information with HMRC, the police, or other authorities.

 

HOW LONG I KEEP YOUR INFORMATION


I only keep your personal information for as long as necessary:
 

  • Order information: 6 years after your purchase (this is required by tax law)

  • Email marketing list: Until you unsubscribe

  • Website analytics: Typically 26 months (this is Google Analytics' default setting)

  • General enquiries: I'll delete emails after 2 years if they're not related to an order
     

After these periods, I'll securely delete your information unless I have a legal reason to keep it longer.
 

YOUR DATA PROTECTION RIGHTS


Under UK data protection law, you have several rights:
 

  • The right to access - You can ask for a copy of the personal information I hold about you.

  • The right to rectification - If your information is wrong or incomplete, you can ask me to correct it.

  • The right to erasure - You can ask me to delete your personal information in certain circumstances (though I may need to keep some records for legal or accounting reasons).

  • The right to restrict processing - You can ask me to limit how I use your information.

  • The right to object - You can object to me using your information for certain purposes, like marketing.

  • The right to data portability - You can ask for a copy of your information in a commonly used electronic format.

  • The right to withdraw consent - If I'm processing your information based on your consent (like for marketing emails), you can withdraw that consent at any time.
     

To exercise any of these rights, just email me at abby.conway@me.com. I'll respond within one month.
 

If you're not happy with how I've handled your information, you can complain to the Information Commissioner's Office (ICO):
 

Website: ico.org.uk

Phone: 0303 123 1113
 

COOKIES


My website uses cookies (small text files stored on your device) to help it work properly and understand how people use it.
 

  • Essential cookies: These are necessary for the website to function - for example, to keep items in your basket.

  • Analytics cookies: I use Google Analytics to understand how visitors use my site (what pages they visit, how they found me, etc.). This helps me improve the site. These cookies collect anonymous information.

  • Marketing cookies: [If applicable] I may use cookies to show you relevant adverts on social media or other websites.


You can control cookies through your browser settings, but please note that blocking some cookies may affect how my website works for you.
 

For more detailed information about cookies, visit: allaboutcookies.org
 

SECURITY


I take the security of your data seriously and use appropriate measures to protect it:
 

  • Payment information is handled securely by payment processors - I don't store your card details

  • I use secure (HTTPS) connections for my website

  • I password-protect my devices and accounts

  • I limit who has access to customer information


However, no method of transmission over the internet is 100% secure, so I can't guarantee absolute security.

If there's a data breach that affects you, I'll notify you and the ICO as required by law.
 

CHILDREN'S PRIVACY


My products are designed for adults. I don't knowingly collect information from children under 13. If you're under 13, please ask a parent or guardian before providing any information to me.
 

INTERNATIONAL TRANSFERS


Your information is primarily stored in the UK. If I use services that store data outside the UK (like cloud hosting), I'll make sure appropriate safeguards are in place to protect your information.
 

CHANGES TO THIS PRIVACY NOTICE


I may update this privacy notice from time to time to reflect changes in my business or legal requirements. When I make significant changes, I'll update the 'Last updated' date at the top and, where appropriate, let you know by email or through a notice on my website.
 

QUESTIONS?


If you have any questions about this privacy notice or how I handle your personal information, please get in touch:
 

Email: abby.conway@me.com
 

I'm a small business and I genuinely care about your privacy. If something's not clear or you have concerns, just drop me a message.

​

Thank you for supporting an independent maker!

 

Abby

Hedge & Hollow

bottom of page