Legal
Privacy Policy
What personal data we collect when you shop with us, why we hold it, how long we keep it, and the rights you have over it under UK data protection law.
01 Who controls your data
Homart Limited is the data controller for the personal data described in this policy. That means we decide why and how it is processed, and we are accountable for it under the UK GDPR and the Data Protection Act 2018.
- Legal name
- Homart Limited
- Company number
- 15257354
- Registered in
- England and Wales
- Registered office
- 30 Uphall Road, Ilford, England, IG1 2JF
- support@homartuk.com
- Telephone
- +44 7868 375682
For anything to do with your personal data, contact support@homartuk.com. We do not currently have a statutory obligation to appoint a Data Protection Officer; enquiries are handled by our director.
02 What we collect
| Category | Examples |
|---|---|
| Identity & contact | Name, billing and delivery address, email address, telephone number. |
| Order & transaction | What you bought, order value, delivery slot, returns and refunds, correspondence about an order. |
| Payment | The last four digits and card type, the payment reference from our provider, and whether the payment succeeded. We never see or store your full card number or security code. |
| Account | Username, hashed password, saved addresses, wish list, order history. |
| Technical | IP address, browser and device type, pages viewed, referring site, and cookie identifiers. |
| Marketing | Your newsletter preferences, and whether you opened or clicked a marketing email. |
| Design service | Floor plans, photographs of your rooms and notes you send us when you use our interior design service. |
We do not knowingly collect data about children, and this store is not directed at them. We do not collect special category data (health, religion, biometrics and similar) and ask you not to send it to us.
03 Why we hold it, and our lawful basis
| Purpose | Lawful basis | Retention |
|---|---|---|
| Taking, fulfilling and delivering your order; handling returns and refunds | Performance of a contract | Life of the guarantee, then 6 years |
| Keeping accounting and VAT records | Legal obligation (Companies Act 2006, VAT Act 1994) | 6 years from the end of the accounting period |
| Managing your account and saved details | Performance of a contract | Until you close the account, then 12 months |
| Sending our newsletter and offers | Consent, or the soft opt-in under PECR for existing customers | Until you unsubscribe, then 24 months |
| Preventing fraud and securing the site | Legitimate interests, and legal obligation | 13 months |
| Analytics and improving the store | Consent (via the cookie banner) | 14 months |
| Responding to enquiries and complaints | Legitimate interests | 3 years from last contact |
| Design service consultations | Performance of a contract, or steps taken at your request before entering one | 2 years from the last consultation |
Where we rely on legitimate interests, we have carried out a balancing assessment and are satisfied that our interest in running a secure, well-run shop does not override your rights. You may object at any time — see “Your rights” below.
05 Transfers outside the UK
Some of our providers process data outside the United Kingdom. Where that happens we make sure one of the following applies: the country has UK adequacy regulations; or the transfer is covered by the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, supported by a transfer risk assessment.
You can ask us for a copy of the safeguards we rely on by emailing support@homartuk.com.
06 How we keep it safe
- The whole site is served over TLS, and payment pages are handled by a PCI DSS compliant provider.
- Access to customer records is limited to staff who need it, and is protected by unique accounts and two-factor authentication.
- Passwords are stored hashed and salted; we can never see yours.
- We keep backups, apply security updates promptly, and review our arrangements at least annually.
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will report it to the Information Commissioner’s Office within 72 hours and, where the risk is high, tell you directly and without undue delay.
07 Your rights
Under UK data protection law you have the right to:
- Be informed about how we use your data — that is what this policy is for.
- Access a copy of the personal data we hold about you.
- Rectification — have inaccurate data corrected and incomplete data completed.
- Erasure — ask us to delete data where there is no good reason for us to keep it.
- Restrict processing while a dispute about accuracy or our grounds is resolved.
- Data portability — receive the data you gave us in a structured, machine-readable format.
- Object to processing based on our legitimate interests, and to direct marketing at any time and for any reason.
- Withdraw consent at any time where we rely on it, without affecting processing that happened before you withdrew.
To exercise any of these, email support@homartuk.com. We will respond within one calendar month. There is no fee, though we may charge a reasonable administrative fee or refuse a request that is manifestly unfounded or excessive. We may ask you to verify your identity first.
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — 0303 123 1113, ico.org.uk.
08 Marketing
We send marketing email only where you have opted in, or where you have bought from us and we are contacting you about similar products under the soft opt-in permitted by the Privacy and Electronic Communications Regulations. Every message carries a one-click unsubscribe link, and you can change your preferences in your account at any time.
We do not carry out automated decision-making or profiling that produces legal effects for you.
10 Changes to this policy
This policy was last updated on 1 September 2026. Where we make a material change we will tell registered customers by email and post a notice on the site. Earlier versions are available on request.