Privacy Policy of Harrington & Vale Limited
Effective date: 14 July 2026
1. Introduction and company information
This Privacy Policy explains how Harrington & Vale Limited collects, uses, discloses, transfers, and otherwise processes personal data when you interact with us, including when you visit our website, contact us, use our services, purchase our products, subscribe to updates, or otherwise engage with our business.
Harrington & Vale Limited is the data controller responsible for the processing of your personal data.
Company name: Harrington & Vale Limited
Registered / business address: Harrington & Vale, 14 St Mary's Street, Faversham, Kent ME13 8EG, United Kingdom
Email: [email protected]
Telephone: +44 1795 483726
We operate a mixed business, which may include the provision of goods and/or services, customer support, marketing, online and offline sales, administration, and business-to-business and business-to-consumer interactions. This policy applies to all personal data processed by Harrington & Vale Limited in connection with those activities.
2. Data collection and processing
We may collect and process the following categories of personal data, depending on your relationship with us and how you interact with our business:
- Identity data: name, title, username, and similar identifiers.
- Contact data: billing address, delivery address, email address, telephone number, and other contact details.
- Transaction data: details of purchases, orders, payments, invoices, refunds, and related records.
- Account data: login credentials, account settings, and profile information where applicable.
- Communication data: correspondence, enquiries, complaints, feedback, and support interactions.
- Technical data: IP address, browser type and version, device identifiers, time zone, operating system, and website usage data.
- Marketing and preferences data: your preferences for receiving marketing from us and your communication preferences.
- Business relationship data: company name, job title, role, department, and professional contact details.
- Location data: approximate location derived from technical data, where permitted.
We collect personal data directly from you, from your devices through our website and digital services, from our records of our dealings with you, and where lawful, from third parties such as service providers, public sources, payment processors, delivery partners, and business partners.
We may also generate certain data ourselves, such as service records, support notes, internal correspondence, and analytical information about the use of our website and services.
3. Purpose of data processing
We process personal data for the following purposes:
- to provide, operate, and improve our products and services;
- to manage enquiries, customer support, complaints, and communications;
- to process orders, payments, deliveries, refunds, and other transactions;
- to administer accounts, records, and business relationships;
- to verify identity and prevent fraud, misuse, and other unlawful activity;
- to comply with legal, regulatory, tax, accounting, and record-keeping obligations;
- to send service messages, operational notices, and administrative communications;
- to send marketing communications where permitted by law or with consent;
- to analyse performance, usage, and trends to improve our offerings and website;
- to protect the rights, property, and safety of Harrington & Vale Limited, our customers, staff, and others;
- to establish, exercise, or defend legal claims.
4. Legal basis for processing
We will only process your personal data where we have a valid legal basis to do so. Depending on the context, our legal bases may include:
- Performance of a contract: where processing is necessary to enter into or perform a contract with you.
- Compliance with a legal obligation: where we must process data to comply with applicable law.
- Legitimate interests: where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.
- Consent: where you have given clear consent for a specific purpose, such as certain marketing activities or optional cookies where applicable.
- Vital interests: in rare cases where processing is necessary to protect someone’s life.
- Public task / official authority: where applicable under law, although this basis is unlikely to be used by us in ordinary business operations.
Where we rely on legitimate interests, these may include business administration, service improvement, fraud prevention, network and information security, and limited marketing to existing customers, subject to applicable law.
5. Data sharing and third parties
We may share personal data with third parties where necessary and lawful, including:
- payment service providers and banks;
- delivery and logistics providers;
- IT, cloud hosting, website, and cybersecurity service providers;
- professional advisers, including accountants, auditors, lawyers, and insurers;
- customer support, communications, and marketing service providers;
- business partners, subcontractors, and fulfilment providers involved in providing our goods or services;
- regulators, public authorities, law enforcement, and courts where required or permitted by law;
- other parties in connection with a merger, sale, restructuring, or transfer of all or part of our business.
We require third parties to handle personal data in accordance with applicable law and appropriate confidentiality and security obligations. However, where third parties act as independent controllers, their own privacy notices will apply.
6. Data transfer to third countries
Your personal data may be transferred to, stored in, or accessed from countries outside the United Kingdom and, where applicable, outside the European Economic Area. This may occur where our service providers, partners, or systems are located in other jurisdictions.
Where such transfers take place, we will take appropriate safeguards to protect your personal data in accordance with applicable law. These safeguards may include adequacy regulations or decisions, standard contractual clauses, addendum protections, transfer risk assessments, and other lawful mechanisms as required.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, tax, audit, regulatory, and business requirements.
Retention periods vary depending on the type of data and the reason for processing. In general:
- customer and transaction records may be retained for the duration of the relationship and for a further period required by law or legitimate business needs;
- communication records may be retained for a reasonable period to manage enquiries, disputes, and service history;
- marketing data may be retained until you unsubscribe, object, or your consent is withdrawn, subject to lawful suppression records;
- technical and analytics data may be retained for a limited period necessary for security, functionality, and reporting;
- records subject to legal claims may be retained longer where necessary to establish, exercise, or defend those claims.
When personal data is no longer needed, we will delete it or anonymise it securely.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and obtain a copy of that data.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request that we limit processing in certain circumstances.
- Data portability: to request that we provide certain data in a structured, commonly used, machine-readable format or transmit it to another controller where technically feasible.
- Objection: to object to processing based on legitimate interests and to object at any time to direct marketing.
These rights are not absolute and may be subject to exceptions, limitations, or conditions under applicable law. We may need to verify your identity before responding to your request.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.
If you withdraw consent, we may no longer be able to provide certain optional features, communications, or services based on that consent. You can withdraw consent by using the relevant unsubscribe or preference options, where available, or by contacting us using the details below.
10. Right to complain
If you have concerns about how Harrington & Vale Limited handles your personal data, we encourage you to contact us first so that we can try to resolve the matter.
You also have the right to lodge a complaint with the relevant supervisory authority, particularly in the country where you live, work, or where the issue arose. In the United Kingdom, this is the Information Commissioner's Office (ICO).
11. Data security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include access controls, encryption where appropriate, secure storage, staff training, confidentiality obligations, and regular review of our security practices.
No method of transmission over the internet or method of electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.
12. Contact information
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:
Harrington & Vale Limited
Harrington & Vale, 14 St Mary's Street, Faversham, Kent ME13 8EG, United Kingdom
Email: [email protected]
Telephone: +44 1795 483726
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. Any updated version will be posted on our website with a revised effective date where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how Harrington & Vale Limited processes personal data.