Privacy Policy

This Privacy Policy explains how Harrowby collects, uses, stores, protects, and otherwise processes personal information when you visit our website, contact us, create or use an account where available, place an order, purchase Men’s Swimwear, Men’s Sweatshirts & Hoodies, Men’s Sportswear, Men’s Socks, or otherwise interact with our online store.

We are committed to handling personal information fairly, lawfully, transparently, and securely in accordance with applicable United Kingdom data protection requirements, including the UK GDPR, the Data Protection Act 2018, applicable provisions introduced by the Data Use and Access Act 2025, and relevant electronic communications requirements.

1. Who We Are

Harrowby is responsible for determining how and why personal information collected through this website is processed.

Our contact details are:

Harrowby
5 MALDEN ROAD
HARROGATE
HG1 4SF
United Kingdom

Email: support@harrowby.online
Telephone: +44 7584039244

You may contact us using the details above if you have any questions about this Privacy Policy or about how your personal information is handled.

2. Personal Information We May Collect

Depending on how you use our website and services, we may collect personal information that you voluntarily provide to us or that is generated through your interaction with the website.

This may include:

  • Your first name and surname.

  • Billing address.

  • Delivery address.

  • Email address.

  • Telephone number.

  • Order and purchase details.

  • Products purchased, returned, exchanged, or otherwise associated with an order.

  • Information required to process, manage, or verify an order.

  • Information relating to delivery and fulfilment.

  • Communications you send to us.

  • Customer service enquiries and correspondence.

  • Return or refund requests.

  • Information you provide when reporting a problem with an order or product.

  • Account information where customer accounts are available.

  • Preferences and choices submitted through the website.

  • Technical information relating to your use of the website where collected through normal website functionality.

We only seek to collect personal information that is reasonably necessary for the purposes described in this Privacy Policy.

3. Information Collected When You Place an Order

When you purchase products through our website, we may collect information necessary to process and fulfil the transaction.

This may include your name, contact details, billing information, delivery information, details of the products ordered, quantities purchased, order value, delivery instructions where provided, and other information reasonably required to complete the transaction.

We use this information to:

  • Confirm your order.

  • Process your purchase.

  • Arrange order fulfilment.

  • Arrange delivery.

  • Communicate with you about your order.

  • Handle returns and refunds.

  • Respond to order-related questions.

  • Maintain appropriate business and transaction records.

  • Prevent or investigate suspected fraudulent transactions.

  • Comply with applicable legal, accounting, and regulatory obligations.

We do not require customers to provide information that is unrelated to the legitimate operation of the online store.

4. Payment Information

Payments may be processed through payment services made available through our website.

Information necessary to complete a payment may be transmitted to the relevant payment provider or financial institution for payment authorisation, processing, fraud prevention, verification, refunds, chargebacks, and related transaction functions.

We use payment-related information only where necessary to facilitate and manage transactions, comply with applicable legal requirements, maintain transaction records, resolve payment disputes, and protect our business and customers against fraud or unauthorised activity.

The information collected and retained by payment providers may be subject to their own security and data processing procedures.

5. How We Use Personal Information

We may process personal information for the following purposes where appropriate:

  • Providing access to our website and its functions.

  • Processing and managing customer orders.

  • Confirming purchases.

  • Preparing orders for dispatch.

  • Delivering products.

  • Providing customer support.

  • Responding to enquiries.

  • Managing returns and refunds.

  • Managing complaints.

  • Resolving delivery or order problems.

  • Communicating important information about transactions.

  • Maintaining records of purchases and communications.

  • Detecting and preventing fraud or misuse.

  • Protecting the security of our website.

  • Meeting legal and regulatory obligations.

  • Establishing, exercising, or defending legal claims.

  • Improving website functionality and customer experience using appropriate information.

  • Managing customer preferences where applicable.

  • Sending marketing communications where permitted by law and where the appropriate legal requirements have been satisfied.

We will not use personal information for purposes that are incompatible with the purpose for which it was originally collected unless permitted or required by applicable law.

6. Lawful Bases for Processing

We process personal information only when we have an appropriate lawful basis.

Depending on the circumstances, the lawful basis may include:

Contract: We may process personal information when processing is necessary to enter into or perform a contract with you. This includes processing an order, arranging delivery, handling a return, processing a refund, or communicating with you about your purchase.

Legal obligation: We may process information where necessary to comply with applicable legal, tax, accounting, regulatory, consumer protection, or other statutory obligations.

Legitimate interests: We may process information where necessary for legitimate business purposes, provided that those interests are not overridden by your rights and interests. This may include preventing fraud, securing our website, maintaining business records, resolving disputes, and improving our services.

Consent: Where applicable, we may rely on your consent for particular processing activities. Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

We assess the appropriate lawful basis according to the specific purpose for which personal information is processed.

7. Customer Communications

When you contact us by email, telephone, website contact functionality, or another available communication method, we may process the information you provide to us.

This may include your name, contact information, order information, the contents of your enquiry, and any information reasonably required to investigate or respond to your request.

We may retain relevant correspondence where necessary to:

  • Respond to your enquiry.

  • Provide customer service.

  • Resolve disputes.

  • Manage complaints.

  • Maintain appropriate customer service records.

  • Protect our legal rights.

  • Comply with applicable legal obligations.

Please avoid sending personal information that is not necessary for us to respond to your enquiry.

8. Cookies and Similar Technologies

Our website may use cookies or similar storage and access technologies where required for normal website operation, security, customer preferences, shopping functionality, analytics, or other permitted purposes.

Some technologies may be essential for functions such as maintaining a shopping basket, remembering selections, securing website sessions, processing checkout activity, or providing requested website functionality.

Where consent is legally required before non-essential technologies are used, those technologies should not be activated unless the required consent has been obtained.

Where applicable, users should have an appropriate opportunity to accept, reject, or manage non-essential technologies.

Information collected through such technologies may include technical information relating to browser activity, device information, website interaction, session information, or preferences, depending on the technology used.

9. Technical and Website Usage Information

When you visit our website, certain technical information may be generated automatically by the systems used to operate the website.

Depending on the website configuration, this may include:

  • Internet Protocol address.

  • Browser type.

  • Device type.

  • Operating system information.

  • Date and time of access.

  • Pages visited.

  • Website session information.

  • Error information.

  • Security-related logs.

  • General website interaction information.

Such information may be processed where reasonably necessary for website operation, security, troubleshooting, fraud prevention, system administration, and performance monitoring.

We aim to limit collection and use of technical information to what is appropriate for these purposes.

10. Sharing Personal Information

We do not sell personal information.

We may share personal information only where reasonably necessary for legitimate operational purposes, fulfilment of customer orders, legal compliance, or protection of our rights.

Depending on the services required to operate our business, information may be provided to appropriate service providers supporting functions such as:

  • Website hosting.

  • Website maintenance.

  • Payment processing.

  • Order processing.

  • Delivery and logistics.

  • Customer communications.

  • Information technology.

  • Website security.

  • Fraud prevention.

  • Accounting.

  • Professional or legal services where required.

We aim to disclose only the information reasonably necessary for the relevant service.

Where another organisation processes personal information on our behalf, appropriate data protection obligations should apply according to the nature of the relationship and applicable law.

We may also disclose information where required by law, legal proceedings, court order, regulatory requirement, or lawful request from an authorised public authority.

11. International Transfers of Personal Information

Some services supporting an online store may involve processing or storage of information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is handled in accordance with applicable United Kingdom data protection requirements.

Where required, this may involve relying on an applicable adequacy arrangement, appropriate contractual safeguards, or another legally permitted transfer mechanism.

We aim to ensure that international processing does not reduce the level of protection required for personal information under applicable law.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or for as long as required to satisfy applicable legal, regulatory, tax, accounting, contractual, dispute-resolution, or record-keeping requirements.

Retention periods may vary according to the type of information and the reason it is held.

When determining an appropriate retention period, we may consider:

  • The nature of the information.

  • The purpose for which it was collected.

  • Whether an ongoing customer relationship exists.

  • Applicable legal obligations.

  • Accounting and transaction record requirements.

  • Fraud prevention requirements.

  • The possibility of complaints or disputes.

  • The need to establish, exercise, or defend legal claims.

  • Security considerations.

Where information is no longer reasonably required, we may securely delete, anonymise, or otherwise dispose of it in accordance with appropriate procedures.

13. How We Protect Personal Information

We take reasonable administrative, organisational, and technical measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access, misuse, or other inappropriate processing.

Measures may include, where appropriate:

  • Restricting access to personal information.

  • Using access controls.

  • Maintaining website and system security.

  • Protecting administrative accounts.

  • Applying appropriate authentication measures.

  • Maintaining software and systems.

  • Limiting unnecessary collection of information.

  • Limiting access according to operational requirements.

  • Taking reasonable precautions when selecting service providers.

No internet-based service can guarantee absolute security. Users should also take reasonable precautions to protect their own devices, passwords, accounts, and communications.

14. Your Data Protection Rights

Subject to applicable law and any relevant limitations or exemptions, you may have rights relating to your personal information.

These may include:

Right of access: You may request confirmation as to whether we process your personal information and request access to relevant personal information.

Right to rectification: You may request correction of personal information that is inaccurate and completion of information that is incomplete where appropriate.

Right to erasure: In certain circumstances, you may request deletion of personal information.

Right to restriction: In certain circumstances, you may request restriction of the processing of your personal information.

Right to object: Where processing is based on certain lawful grounds, you may have the right to object to that processing.

Right to data portability: Where applicable, you may have the right to receive certain personal information in a structured, commonly used, machine-readable format and request transmission to another organisation where legally available.

Right to withdraw consent: Where processing relies on consent, you may withdraw that consent at any time.

Rights relating to certain automated decisions: Where applicable, you may have rights regarding decisions based solely on automated processing where those decisions produce legal or similarly significant effects.

These rights are not absolute and may be subject to conditions, restrictions, or exemptions under applicable law.

15. Exercising Your Privacy Rights

You may contact us to exercise an applicable data protection right using:

Email: support@harrowby.online
Telephone: +44 7584039244

Postal correspondence may be sent to:

Harrowby
5 MALDEN ROAD
HARROGATE
HG1 4SF
United Kingdom

When responding to a privacy request, we may need to take reasonable steps to verify your identity before disclosing, correcting, deleting, transferring, or restricting personal information.

This is intended to help protect personal information from unauthorised access.

We may request only information reasonably necessary to confirm identity or understand the scope of the request.

We will respond to valid requests in accordance with the timeframes and requirements established by applicable United Kingdom data protection law.

16. Marketing Communications

Where marketing communications are offered, we will process contact information for marketing only where an appropriate lawful basis exists and applicable electronic marketing requirements have been satisfied.

Where consent is required, marketing communications will not be sent on the basis of consent unless valid consent has been obtained.

You may request to stop receiving marketing communications at any time.

A request to stop marketing communications will not prevent us from sending necessary transactional or service communications relating to an order, return, refund, complaint, security matter, or other existing customer relationship where those communications are required.

We may retain limited information necessary to record and respect a marketing opt-out.

17. Children’s Privacy

Our website sells Men’s Swimwear, Men’s Sweatshirts & Hoodies, Men’s Sportswear, and Men’s Socks and is not specifically designed as a service directed toward children.

We do not intentionally seek to collect personal information from children where it is unnecessary for the operation of our services.

Where we become aware that children’s personal information is being processed, we will consider the additional protections required by applicable United Kingdom data protection law and the nature of the processing involved.

Where appropriate, we will take steps to ensure privacy information and processing practices are suitable for the individuals concerned.

18. Fraud Prevention, Security, and Legal Compliance

We may process personal information where reasonably necessary to protect customers, our website, our transactions, and our business against fraud, misuse, unauthorised transactions, cyber-security threats, abuse, or unlawful activity.

This may include reviewing transaction information, account activity where applicable, website security information, communication records, or other relevant information.

We may also retain or disclose information where reasonably necessary to:

  • Comply with applicable laws.

  • Respond to lawful requests.

  • Protect legal rights.

  • Investigate suspected fraud.

  • Enforce contractual rights.

  • Resolve disputes.

  • Establish, exercise, or defend legal claims.

  • Protect customers or other individuals where legally appropriate.

Any such processing will be limited to what is reasonably necessary for the relevant purpose.

19. Changes to This Privacy Policy

We may revise this Privacy Policy when necessary to reflect changes in our website, business operations, processing practices, legal obligations, regulatory requirements, or the services used to operate our online store.

Where a change materially affects how personal information is used, we will take reasonable steps to provide appropriate information about that change before using personal information for a materially different purpose where required by law.

Users are encouraged to review the Privacy Policy available on the website periodically so they remain informed about how personal information is handled.

20. Contact Us About Privacy

If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or the way personal information is handled, please contact us using the following details:

Harrowby
5 MALDEN ROAD
HARROGATE
HG1 4SF
United Kingdom

Email: support@harrowby.online
Telephone: +44 7584039244

We will review privacy enquiries and requests and respond in accordance with applicable United Kingdom data protection requirements.