- Introduction
www.purecottontable.com (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, store, and disclose your information when you visit our website and purchase our cotton table linen products. This policy complies with the Data Protection Act 2018 and the United Kingdom General Data Protection Regulation (UK GDPR), as well as the General Data Protection Regulation (EU GDPR) for customers located within the European Economic Area (EEA).
As the data controller, www.purecottontable.com determines the purposes and means of the processing of your personal data.
- Information We Collect
We collect personal data that is necessary to process your orders, deliver our goods, and provide customer support. This information includes:
Identity and Contact Data: Your full name, delivery address, billing address, email address, and telephone number.
Transaction Data: Details regarding the products you have purchased from us and payment fulfillment status.
Technical and Usage Data: IP address, browser type, device information, and browsing interactions on our website collected via cookies and similar technologies.
- How We Use Your Personal Data
We process your personal data strictly under lawful bases recognized by UK and European data protection laws:
Performance of a Contract: To process your orders, arrange delivery of cotton table linen, and manage customer communications regarding your purchase.
Legal Obligation: To comply with mandatory financial, accounting, and tax record-keeping requirements under UK and European laws.
Legitimate Interests: To improve our website functionality, protect our website operations against fraudulent activities, and maintain business security.
- Payment Processing by Stripe
To process payments securely, www.purecottontable.com utilizes Stripe as our payment service provider. When you complete a purchase, your payment details (such as credit or debit card numbers) are provided directly to Stripe. Stripe processes your financial data in compliance with Payment Card Industry Data Security Standards (PCI-DSS).
We do not store complete credit or debit card numbers on our servers. For further information regarding how Stripe handles your personal data and privacy rights, please review Stripe’s Privacy Policy directly on their website.
- Data Retention Period
We retain your personal data only for as long as is necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Transaction and Financial Records: In accordance with UK and European financial and tax regulations (such as HMRC requirements), we retain customer transaction records, invoices, and associated communication data for 6 years following the end of the relevant financial year.
Account and Marketing Data: If you opt to create an account or subscribe to our updates, we retain your contact information until you request deletion or unsubscribe, after which data is securely archived or erased in accordance with statutory limitations.
- Data Sharing and International Transfers
We do not sell, trade, or rent your personal data to external parties. We may share necessary data with trusted service providers who assist us in operating our website, fulfilling orders, and delivering goods (such as courier and logistics partners), strictly under binding data processing agreements.
Where personal data is transferred outside the UK or the EEA, we ensure appropriate safeguards are implemented—such as Standard Contractual Clauses (SCCs) or adequacy decisions—to maintain an equivalent level of data protection.
- Your Legal Rights
Under UK and European data protection laws, you possess specific rights regarding your personal data:
Right of Access: You have the right to request copies of your personal data held by us.
Right to Rectification: You can request correction of inaccurate or incomplete information.
Right to Erasure: You may request the deletion of your personal data where retention is no longer necessary, subject to legal obligations.
Right to Restriction of Processing: You can ask us to suspend the processing of your personal data under specific circumstances.
Right to Data Portability: You have the right to request the transfer of your data to another organization or directly to you.
Right to Object: You may object to the processing of your personal data based on legitimate interests.
To exercise any of these rights, please contact our data controller team at alarm@purecottontable.com. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK or your local European data protection supervisory authority.
- Security Measures
We implement appropriate organizational, physical, and technical security measures designed to protect your personal data against unauthorized access, alteration, disclosure, or destruction. While we utilize industry-standard protocols to safeguard transmitted and stored data, no method of transmission over the internet is completely impenetrable.