Privacy Policy | Hartley Dreams

1. Who We Are

Hartley Dreams Limited (Company No. 16890879) is registered in England and Wales. Registered office: Unit 7 New North Road, Heckmondwike, West Yorkshire, WF16 9DP. We operate the website hartleydreams.com and are the data controller for your personal data. We are registered with the Information Commissioner's Office (ICO) under registration number C1965183. You can contact us at info@hartleydreams.com.

2. What Data We Collect

We collect personal data you provide directly (name, email, delivery address, payment details), data generated by your use of our site (browsing behaviour, device information, IP address), and data from third parties such as authentication providers.

3. How We Use Your Data

We use your data to process and fulfil your orders, send transactional emails (order confirmation, dispatch notifications), improve our website and product range, comply with legal obligations, and with your consent, send marketing communications.

4. Legal Basis for Processing

We process your data on the basis of: contract performance (to fulfil your order), legal obligation (tax and accounting records), legitimate interests (fraud prevention, site security), and consent (marketing emails, analytics cookies).

5. Data Sharing

We share your data with trusted service providers including payment processors, delivery partners, email service providers, identity and authentication providers, and analytics providers. We do not sell your personal data to third parties.

5a. Third-party Data Processors

We use the following third-party processors: • Stripe Inc. — payment processing. Data: payment card details, billing address. Privacy: stripe.com/privacy • Clerk Inc. — user authentication and account management. Data: name, email, session data. Privacy: clerk.com/privacy • Google LLC (Analytics 4) — site analytics. Data: anonymised usage data, IP address. Privacy: policies.google.com/privacy • Resend — transactional and marketing email delivery. Data: name, email address. Privacy: resend.com/privacy • Cloudflare R2 — product image storage and delivery. Data: none directly (images only, no personal data). Privacy: cloudflare.com/privacypolicy

5b. International Transfers

Some of our service providers process data outside the UK. Specifically: Clerk Inc. (authentication, US-based), Google LLC (analytics, US-based), and Stripe Inc. (payment processing, US-based). These transfers are made under Standard Contractual Clauses approved by the UK Information Commissioner's Office, ensuring your data receives the same level of protection as it does in the UK.

6. Data Retention

Order and transaction data is retained for 7 years to comply with HMRC requirements. Account data is retained while your account is active and for 2 years after closure unless legally required otherwise. Marketing email subscribers: we retain your email address until you unsubscribe. We review inactive subscriber lists annually and remove addresses that have not opened any emails in the past 24 months.

7. Your Rights

Under UK GDPR, you have the right to access, correct, delete, or port your data. You may also object to processing or withdraw consent. To exercise these rights, email info@hartleydreams.com. You may also lodge a complaint with the ICO at ico.org.uk.

8. Cookies

We use essential cookies for site functionality and, with your consent, analytics cookies (Google Analytics 4). See our Cookie Policy for full details.

9. Contact

For privacy-related enquiries: info@hartleydreams.com · Hartley Dreams Limited · Unit 7 New North Road, Heckmondwike, West Yorkshire, WF16 9DP · Company No. 16890879