1. Who we are

Wallace Collective^® is a Scottish outdoor living design company, registered in Scotland under Companies House number SC833706. When we refer to "we", "us" or "our" in this policy, we mean Wallace Collective.

If you have any questions about this policy or how we handle your data, please contact us at hello@wallacecollective.co.uk.

2. What data we collect

We collect and process the following personal data:

Identity & contact data: Your name, email address, phone number and delivery address when you place an order or book a consultation.
Order data: Details of products you purchase, order history, and payment confirmation references. We do not store full card details, payments are processed securely by our payment provider.
Consultation data: Information you provide when booking a design consultation, including your outdoor space requirements and project details.
Usage data: Information about how you use our website, including pages visited, browser type, and device information, collected via cookies and analytics tools.
Communications: Records of any correspondence you send us, including enquiry forms and emails.

3. How we use your data

We use your personal data to:

Process and fulfil your orders and send you order confirmations
Manage your design consultations and follow up on your enquiry
Respond to your questions and customer service requests
Improve our website and the products we offer
Send you occasional updates about Wallace Collective, where you have given consent
Comply with legal and regulatory obligations

4. Legal basis for processing

We process your personal data under the UK GDPR on the following bases:

Contract: Processing your order and delivering products or services you have requested.
Legitimate interests: Improving our website, preventing fraud, and communicating about services similar to those you have purchased.
Legal obligation: Complying with financial, tax, and regulatory requirements.
Consent: Sending marketing communications where you have opted in.

5. Cookies

Our website uses cookies to ensure it works correctly and to understand how visitors use it. These include essential cookies (required for the site to function, such as your shopping cart and session), and analytics cookies (which help us understand traffic patterns using aggregated, anonymous data).

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the site.

6. Who we share your data with

We do not sell your personal data. We may share it with trusted third parties who help us operate our business, including:

Payment processors, to securely handle transactions
Delivery and logistics partners, to fulfil your orders
IT and hosting providers, to run our website and systems
Analytics providers, to help us understand site performance

All third parties are required to keep your data secure and use it only for the purposes we have specified.

7. How long we keep your data

We retain your personal data only for as long as necessary. Order and transaction records are kept for up to 7 years to meet legal and accounting obligations. Consultation enquiries are kept for up to 2 years. You can request deletion of your data at any time (subject to legal retention requirements).

8. Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Correct any inaccurate or incomplete data
Request erasure of your data (the 'right to be forgotten')
Object to or restrict how we process your data
Data portability, receive your data in a structured, machine-readable format
Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please email us at hello@wallacecollective.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Security

We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, loss or disclosure. Our website is served over HTTPS and payment data is handled exclusively by our certified payment provider.

10. Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

Privacy Policy