Policy
Privacy Policy
Last updated: 14 July 2026
This policy explains what personal data Castlehome (CASTLEHILL HOME DEVELOPMENTS LIMITED) collects when you browse, order or contact us, why we use it, who we share it with, and the rights you have. It covers our website at castlehomedev.shop and related order, delivery and support activities.
1. Who is responsible for your data
The data controller is CASTLEHILL HOME DEVELOPMENTS LIMITED ("Castlehome", "we", "us"), 84 Hamilton Road Hamilton Road, ML1 3BY, United Kingdom. For any privacy question, email support@castlehomedev.shop or call +44 7210335449.
2. What we collect
- Contact details: name, email, phone (optional), and country.
- Order and fulfilment data: shipping address (delivery address), billing name, city, postal code, country, items ordered and order value — used for order fulfilment and delivery.
- Account and membership data: membership tier, subscription status and billing period.
- Support data: the content of messages you send us and our replies.
- Payment data boundary: card payments are processed by Stripe. We receive confirmation of payment and a masked reference only — we never receive or store your full card number, CVC or full card details.
- Technical data: IP address, device and browser type, and essential cookie/session identifiers needed to run the cart and checkout.
3. Where we collect it from (collection sources)
Our collection sources for your personal data are:
- Directly from you: checkout (including the shipping address you enter for order fulfilment), contact and wholesale forms, and membership sign-up.
- Automatically: strictly necessary cookies and server logs when you use the site.
- From our payment processor (Stripe): payment success/failure and fraud-check outcomes.
- From the courier or postal carrier: delivery status updates for order fulfilment.
4. Why we use it, and our legal bases
- To process, fulfil and deliver your order (order fulfilment) — including passing your shipping address to the delivery carrier — and to handle returns and refunds — legal basis: performance of a contract.
- To provide and bill membership subscriptions — performance of a contract.
- To respond to contact and wholesale inquiries — legitimate interests (answering you) or steps prior to a contract.
- To retain checkout details you submit even if payment is not completed, so we can follow up on an abandoned order — legitimate interests, which you can object to at any time.
- To prevent fraud and keep the site secure — legitimate interests and legal obligation.
- To meet tax, accounting and consumer-law obligations — legal obligation.
5. Who we share it with (third-party processors)
We share data only with processors that help us run the store, under contract and only as needed:
- Hosting and delivery of the website (cloud hosting provider).
- Payments: Stripe (card processing, billing and fraud checks).
- Lead and form storage: our managed database provider, used to store contact, wholesale and checkout enquiries.
- Delivery: the courier or postal carrier fulfilling your order, who receives the delivery address and contact details needed to deliver.
- Professional advisers, and authorities where we are legally required to disclose.
We do not sell your personal data.
6. International transfers
Some processors may store or process data outside your country, including outside the UK and EEA. Where that happens, we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or an equivalent adequacy mechanism.
7. How long we keep it
- Order and transaction records: kept for up to 6 years to meet tax and accounting obligations.
- Contact, wholesale and abandoned-checkout enquiry data: kept for up to 24 months, then deleted or anonymised.
- Membership records: for the life of the subscription plus the statutory retention period.
8. Your rights (UK GDPR / EU GDPR)
Subject to conditions, you can:
- Access a copy of your data and information about how we use it.
- Rectify inaccurate or incomplete data.
- Erase data where there is no ongoing lawful reason to keep it.
- Restrict or object to processing, including direct-marketing follow-ups.
- Data portability for data you provided, where processing is automated and based on contract or consent.
- Withdraw consent at any time where we rely on consent.
To exercise any right, email support@castlehomedev.shop. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or your local EU supervisory authority.
9. California rights (CCPA/CPRA) — Do Not Sell or Share
If you are a California resident, you have the right to know what personal information we collect, to request deletion or correction, and to be free from discrimination for exercising these rights. We do not sell or share your personal information as those terms are defined under the CPRA. To make a request, email support@castlehomedev.shop.
10. Cookies and analytics
We use strictly necessary cookies to run the shopping cart, checkout and secure sessions. We do not set long-term marketing cookies. See our Cookie Policy for details and choices.
11. Automated decisions, children and minors
We do not make solely automated decisions that produce legal effects about you. Fraud checks by Stripe may use automated screening. The Room Styler uses a simple rule-based match and does not profile you.
Our store is not directed at children under 13, and under-13s may not use it. Customers aged 13–17 must have a parent or guardian's consent to place an order, and must be 18 or older to hold a paid membership.
12. Security
We use encryption in transit, access controls, and reputable processors. Payments are handled on Stripe's PCI-compliant infrastructure. No method of transmission is perfectly secure, but we take reasonable measures to protect your data.
13. Contact and complaints
Questions or complaints: CASTLEHILL HOME DEVELOPMENTS LIMITED, 84 Hamilton Road Hamilton Road, ML1 3BY, United Kingdom — support@castlehomedev.shop, +44 7210335449. This policy is governed by the laws of England and Wales.