Privacy Policy

We will not sell your data.​​

 

Baines London ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, www.baineslondon.com ("Site"). Please read this Privacy Policy carefully.

​

If you do not agree with the terms of this Privacy Policy, please do not access the Site.

Effective from date: 8/6/2026

1. Who We Are

Baines London is the data controller responsible for your personal data.

Email: info@baineslondon.com Website: www.baineslondon.com

If you have any questions about how we handle your data, please contact us using the details above.

1. Information We Collect

2.1 Personal Data

We may collect personally identifiable information that you voluntarily provide, including:

• Name

• Email address

• Phone number

• Billing and shipping addresses

• Payment information (processed securely via third-party payment processors)

• Any information submitted through forms (e.g., contact forms, enquiries)

2.2 Automatically Collected Data

When you visit the Site, we may automatically collect:

• IP address

• Browser type and version

• Device information

• Pages viewed

• Time and date of visits

• Referring URLs

• Data collected via cookies and similar tracking technologies

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies to improve user experience, analyse site performance, enable certain functionalities, and personalise content where applicable.

Under UK GDPR and the Privacy and Electronic Communications Regulations (PECR), non-essential cookies require your prior consent. You will be asked for your cookie preferences when you first visit the Site, and you can update your preferences at any time via our cookie settings or your browser settings.

For full details, please see our Cookie Policy.

1. How We Use Your Information

We may use your data for the following purposes:

• To operate and maintain the Site

• To fulfil orders and manage payments

• To communicate with you (customer support, order updates, and marketing communications where you have consented)

• To improve our products, services, and user experience

• To analyse website performance and usage trends

• To comply with legal and regulatory obligations

• To prevent fraudulent activity and enhance security

Marketing emails are only sent with your explicit consent. You may withdraw consent and opt out at any time via the unsubscribe link in any email or by contacting us directly.

1. Legal Bases for Processing

We process your personal data only where we have a lawful basis to do so. These are:

• Consent — for example, for marketing communications or non-essential cookies

• Contractual necessity — for example, processing your order and arranging delivery

• Legitimate interests — for example, improving our services, detecting fraud, and maintaining site security, where these interests are not overridden by your rights

• Legal obligation — where we are required to process data to comply with applicable law

Under the UK Data (Use and Access) Act 2025, certain processing activities may also rely on a "recognised legitimate interest" basis where this has been clearly established. We will always identify the specific legal basis we rely on for each processing activity upon request.

1. Sharing Your Information

We do not sell your personal information.

We may share your information with:

• Service providers (e.g., payment processors, website hosting, analytics services)

• Logistics and delivery partners

• Legal or regulatory authorities where required by law

• Professional advisers (e.g., accountants, lawyers) where necessary

All third-party providers are subject to data processing agreements and are only permitted to process your data on our instructions and for the purposes set out in this policy.

1. Payment Processing

We use third-party payment processors (such as Stripe, PayPal, or Shopify Payments) to handle payment transactions securely. We do not store or have access to your full card details. Please refer to your payment provider's privacy policy for further information on how they handle your data.

1. Automated Decision-Making

We do not currently make decisions about you based solely on automated processing that produce legal or similarly significant effects. If this changes, we will update this policy and provide you with appropriate information and rights in accordance with UK GDPR and the Data (Use and Access) Act 2025.

1. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy. Retention periods are determined by:

• The nature of our ongoing relationship with you

• Legal and regulatory obligations (e.g., financial records)

• Dispute resolution requirements

When data is no longer needed, it is securely deleted or anonymised.

1. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — to request a copy of the data we hold about you

• Right to rectification — to request correction of inaccurate or incomplete data

• Right to erasure — to request deletion of your data in certain circumstances

• Right to restrict processing — to ask us to limit how we use your data

• Right to data portability — to receive your data in a structured, machine-readable format

• Right to object — to object to processing based on legitimate interests or for direct marketing

• Right to withdraw consent — at any time, where processing is based on consent

• Rights in relation to automated decision-making — to request human review of any automated decisions that significantly affect you

To exercise any of these rights, please contact us at info@baineslondon.com. We will respond within one calendar month of receiving your request. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

Website: www.ico.org.uk Phone: 0303 123 1113

1. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These measures are reviewed and updated regularly.

No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.

1. International Data Transfers

Your data may be transferred to and processed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including:

• UK International Data Transfer Agreements (IDTAs) or Addendum to EU Standard Contractual Clauses

• Adequacy regulations recognised by the UK Secretary of State

• Binding contractual obligations with service providers

1. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any website you visit.

1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date. Where changes are significant, we will make reasonable efforts to notify you directly (e.g., by email or a prominent notice on the Site).

1. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Baines London Email: info@baineslondon.com