Privacy Policy

Flat Horizons Studio ("we", "us", "our") operates this website and is the data controller for the personal data described in this policy.

Contact: studio@flathorizons.co.uk. Our registered address is available on request. We are registered in England & Wales and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information you give us: name, email address, delivery and billing address, phone number, order contents and any messages you send us. If you create an account we store your email address and order history.

Information collected automatically: IP address, device and browser type, pages viewed and referring pages, collected through cookies and similar technologies.

Payment information: card details are entered directly with our payment provider and are never stored or seen by us. We only receive a payment reference and confirmation of the outcome.

We do not knowingly collect data from children under 16, and we do not collect special category data.

To fulfil your order - process payment, arrange delivery, provide order updates and handle returns. Lawful basis: performance of a contract.

To run your account - authenticate you and show your order history. Lawful basis: performance of a contract.

To meet legal duties - keep tax, accounting and consumer-rights records. Lawful basis: legal obligation.

To protect the site - prevent fraud, abuse and technical faults, and to improve how the shop works. Lawful basis: our legitimate interests.

Marketing emails - only where you have signed up, or where you have bought from us and have not opted out (soft opt-in). Lawful basis: consent or legitimate interests. You can unsubscribe from any email or by contacting us.

We share only what is necessary, with processors acting on our instructions:

• Payment providers, to take payment securely.
• Delivery carriers, to get your parcel to you.
• Print and fulfilment partners, to make your made-to-order items.
• Hosting, database and email service providers that run this website.
• Professional advisers, regulators or law enforcement where we are legally required to disclose.

We never sell your personal data or rent it to third parties for their own marketing.

Some of our providers process data outside the UK. Where that happens we rely on UK adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, together with appropriate technical safeguards, so your data keeps an equivalent level of protection.

Order and transaction records are kept for seven years to meet UK tax and accounting requirements. Account data is kept while your account is open and deleted on request. Marketing preferences are kept until you withdraw consent, and analytics data is kept in aggregated or anonymised form. When data is no longer needed it is securely deleted.

We use strictly necessary cookies to keep your bag, session and sign-in working; these cannot be switched off. With your consent we may also use analytics cookies to understand how the site is used so we can improve it. You can clear or block cookies in your browser settings, though essential cookies are needed for checkout to work.

The site is served over HTTPS, access to our systems is restricted and authenticated, and customer records are protected by database-level access rules so you can only see your own orders. No transmission over the internet can be guaranteed as fully secure, but we take appropriate technical and organisational measures to protect your data and will notify you and the ICO of a qualifying breach without undue delay.

Under UK GDPR you have the right to: be informed; access a copy of your data; have inaccurate data corrected; have data erased; restrict or object to processing; data portability; withdraw consent at any time; and not be subject to solely automated decision-making (we do not carry out any).

To exercise any right, email studio@flathorizons.co.uk. We will respond within one month. There is no charge in most cases.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF - ico.org.uk - 0303 123 1113.

We may update this policy from time to time. The date at the top of the page shows when it was last revised, and material changes will be highlighted on the site or notified by email where appropriate.