Privacy policy

Last updated: 18 July 2026

Who we are

Hollow & Hedge ("we", "us", "our") operates the website hollow-hedge.myshopify.com (the "Site"). This policy explains how we collect, use, and protect your personal data when you visit or shop with us, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information we collect

We collect information you provide directly, such as your name, email address, postal address, phone number, and payment details when you place an order, create an account, or contact us. We also automatically collect certain information when you browse the Site, including your IP address, browser type, device information, and browsing behaviour, using cookies and similar technologies.

How we use your information

To process and fulfil your orders, including arranging delivery
To communicate with you about your order, account, or enquiries
To improve our Site, products, and customer experience
To send marketing communications, where you have opted in (you can unsubscribe at any time)
To detect and prevent fraud and comply with legal obligations

Legal basis for processing

We process your personal data on the basis of performing our contract with you (fulfilling orders), our legitimate business interests (improving our Site and preventing fraud), your consent (marketing communications and non-essential cookies), and compliance with our legal obligations.

Cookies

We use cookies and similar tracking technologies to operate the Site, remember your preferences, and understand how visitors use the Site. You can control cookies through your browser settings; disabling some cookies may affect how the Site functions.

Sharing your information

We share your information only where necessary, including with: our e-commerce platform provider (Shopify Inc.), payment processors who securely handle transactions, delivery and courier partners who fulfil your order, and any analytics or marketing tools we use to operate the Site. We do not sell your personal data to third parties. Some of these providers may process data outside the UK; where this happens, we rely on appropriate safeguards such as standard contractual clauses.

Data retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy, including to meet legal, accounting, or reporting requirements.

Your rights

Under UK data protection law, you have the right to request access to, correction of, or deletion of your personal data, to object to or restrict certain processing, and to request that your data be transferred to another provider. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk) if you believe your data has been mishandled.