Privacy Policy — Hurley fun

1. Who we are

This website is operated by HURLEY FUN LIMITED, a company registered in England and Wales under company number 17448281, with its registered office at 76 Faggs Road, Feltham, Middlesex, United Kingdom, TW14 0LH.

We sell camping and hiking gear online to private customers. For the purposes of the UK GDPR and the Data Protection Act 2018 we are the controller of the personal data described in this policy.

You can reach us by email at [email protected] or by phone on +44 7412 668394.

2. What data we collect

We collect only what we need to sell and deliver gear:

Order details. When you place an order we ask for your name, email address, telephone number, delivery address, town or city, postcode and any notes you add to the order.
Enquiries. If you email or call us, we hold the content of your message and your contact details so we can reply.
Payment data. Card and payment details are collected and processed by our payment provider. We never receive or store full card numbers, security codes or banking credentials.
Technical data. Basic server log data such as IP address, browser type and the pages requested, generated automatically when your browser loads the site.

We do not ask for and do not collect data about your routes, trip plans or location. We do not collect special category data such as health, biometric or religious information, and we do not use automated decision making or profiling.

3. Purposes and legal bases

Fulfilling your order — processing, packing, dispatching and delivering the gear you bought, and contacting you about that order. Legal basis: performance of a contract.
Answering enquiries — replying to questions about products, delivery or returns. Legal basis: legitimate interests in responding to people who contact us, or steps taken at your request before entering a contract.
Handling returns and refunds — administering cancellations under the Consumer Contracts Regulations 2013 and your statutory rights under the Consumer Rights Act 2015. Legal basis: performance of a contract and legal obligation.
Accounting and tax — keeping records of sales as required by UK law. Legal basis: legal obligation.
Site security and reliability — keeping the website available and protected from misuse. Legal basis: legitimate interests.
Marketing emails — sent only where you have asked to receive them. Legal basis: consent.

4. Sharing with third parties

We do not sell personal data. We share it only with the categories of recipient needed to run the shop:

Courier and delivery companies — your name, delivery address, postcode, telephone number and email so the parcel can be delivered and delivery updates sent.
Payment providers — they process your payment directly and act as controllers for the payment data they collect.
Hosting and email providers — who store the website and our correspondence on our behalf.
Accountants and professional advisers — where needed for bookkeeping, tax returns or legal advice.
Public authorities — where we are required to disclose data by law.

Where a third party acts as our processor, we have a written contract requiring them to process data only on our instructions and to keep it secure.

5. International transfers

We aim to keep personal data within the United Kingdom and the European Economic Area. If a supplier stores data outside the UK, we rely on UK adequacy regulations or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional safeguards required. You can ask us for details of the safeguards used.

6. How long we keep data

Order and transaction records, including invoices: six years from the end of the relevant financial year, as required by UK tax law.
Delivery details attached to an order: retained as part of that order record.
Enquiry correspondence that does not lead to an order: up to 24 months.
Marketing consents: until you withdraw them, plus a short record of the withdrawal itself.
Server logs: up to 12 months.

When a retention period ends we delete the data or anonymise it so it can no longer identify you.

7. Security

The site is served over an encrypted connection. Access to order data is limited to the people who need it to pack and dispatch orders, accounts are protected by strong authentication, and our suppliers are chosen on the basis of their security practices. No system is completely secure, but we take appropriate technical and organisational measures and will notify you and the Information Commissioner's Office where a breach requires it.

8. Cookies

This website does not set advertising or analytics cookies and does not track you across other sites. The basket on this site works entirely in your browser's memory: its contents disappear as soon as you close or reload the page, and nothing about it is written to your device or sent to us. The only data leaving your browser is what you choose to send us by email.

9. Your rights

Under the UK GDPR you have the right to:

Access — obtain a copy of the personal data we hold about you.
Rectification — have inaccurate or incomplete data corrected.
Erasure — ask us to delete data where we no longer have grounds to keep it.
Restriction — ask us to limit how we use your data while a question about it is resolved.
Portability — receive data you gave us in a structured, commonly used, machine readable format.
Objection — object to processing based on legitimate interests, and to direct marketing at any time.
Withdraw consent — where processing is based on consent.

Email [email protected] to exercise any of these rights. We respond within one month and may ask for information to confirm your identity. Exercising your rights is free of charge.

10. Withdrawing consent

Where we rely on consent, you can withdraw it at any time by emailing us or using the unsubscribe link in any marketing message. Withdrawal does not affect the lawfulness of processing carried out before it, and it does not stop us keeping the order records we are legally required to retain.

11. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, by telephone on 0303 123 1113, or at ico.org.uk.

12. Age restriction

This shop is intended for adults. We do not knowingly sell to or collect personal data from anyone under 16. If you believe a child has given us personal data, email us and we will delete it.

13. Changes to this policy

We review this policy when our practices change and at least once a year. The current version always appears on this page with the date it was last updated at the top. Material changes affecting how we use your data will be highlighted here.

14. Contact us

HURLEY FUN LIMITED
76 Faggs Road, Feltham, Middlesex, United Kingdom, TW14 0LH
Company number 17448281
Email: [email protected]
Phone: +44 7412 668394
Website: hurleyfun.uk