Privacy policy

Last updated: 30 July 2026

ShedHaven ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or place an order, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

2. Information We Collect

Category	Examples
Contact details	Name, email address, phone number, delivery and billing address
Order information	Products purchased, order value, order history
Payment information	Processed securely by our payment provider; we do not store full card details on our servers
Technical data	IP address, browser type, device information, cookies
Communications	Emails or messages you send us, e.g. for customer support

3. How We Use Your Information

• To process and fulfil your orders, including delivery and returns
• To communicate with you about your order or enquiries
• To comply with legal and tax obligations
• To improve our website and product offering
• To send marketing communications, where you have opted in (you may unsubscribe at any time)
• To detect and prevent fraud

4. Legal Basis for Processing

We process your personal data under the following lawful bases: performance of a contract (fulfilling your order), legal obligation (tax and accounting records), legitimate interests (fraud prevention, improving our services), and consent (marketing communications, non-essential cookies).

5. Sharing Your Information

We share personal data only where necessary, with:

• Payment processors — to securely process your payment
• Courier and delivery partners — to deliver your order
• IT and website service providers — to operate our website and store systems
• Regulatory or tax authorities — where legally required

We do not sell your personal data to third parties.

6. Cookies

Our website uses cookies to ensure the site functions correctly, to remember your basket, and to understand how visitors use our site so we can improve it. You can control or disable cookies through your browser settings, though this may affect site functionality.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, including to satisfy legal, accounting, or reporting requirements (typically up to 6 years for order and tax records).

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at support@shedhaven.co.uk. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

10. Children's Privacy

Our website is not directed at children, and we do not knowingly collect personal data from anyone under the age of 16.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@shedhaven.co.uk.