Privacy Policy
How we collect, use and protect your personal information.
Last updated: January 2026
Weave of Honour ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase from us. Please read this policy carefully. By using our website, you consent to the practices described in this policy.
1. Information We Collect
Personal Information
We may collect personal information that you voluntarily provide when you:
- Place an order on our website
- Create an account
- Subscribe to our newsletter
- Contact us with enquiries
- Participate in surveys or promotions
This information may include:
- Name and contact details (email address, phone number, postal address)
- Billing and shipping information
- Payment card details (processed securely by our payment provider)
- Order history and preferences
- Communication preferences
Automatically Collected Information
When you visit our website, we may automatically collect certain information, including:
- IP address and browser type
- Device information and operating system
- Pages visited and time spent on site
- Referring website addresses
- Cookies and similar tracking technologies
2. How We Use Your Information
We use the information we collect to:
- Process and fulfil your orders
- Communicate with you about your orders and enquiries
- Send you marketing communications (with your consent)
- Improve our website and services
- Detect and prevent fraud
- Comply with legal obligations
- Personalise your shopping experience
- Analyse website usage and trends
3. Legal Basis for Processing (UK GDPR)
We process your personal data under the following legal bases:
- Contract: Processing necessary to fulfil our contract with you (e.g., processing orders)
- Legitimate Interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, improving services)
- Consent: Where you have given explicit consent (e.g., marketing communications)
- Legal Obligation: Processing necessary to comply with legal requirements
4. Information Sharing
We do not sell your personal information. We may share your information with:
- Service Providers: Third parties who help us operate our business (payment processors, shipping carriers, email service providers)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
All third-party service providers are required to protect your information and use it only for the purposes we specify.
5. Cookies
We use cookies and similar technologies to:
- Remember your preferences and settings
- Keep you signed in to your account
- Understand how you use our website
- Improve our website and services
- Deliver relevant advertising (with consent)
You can control cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal information, including:
- SSL/TLS encryption for data transmission
- Secure payment processing through PCI-compliant providers
- Regular security assessments
- Access controls and authentication measures
- Staff training on data protection
While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
7. Your Rights
Under UK GDPR, you have the following rights:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data (subject to legal obligations)
- Right to Restrict Processing: Request limitation of how we use your data
- Right to Data Portability: Request transfer of your data to another service
- Right to Object: Object to processing based on legitimate interests or for marketing
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us using the details below. We will respond within one month of receiving your request.
8. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including:
- Order and transaction records: 7 years (for tax and legal compliance)
- Customer account information: Until account deletion is requested
- Marketing preferences: Until consent is withdrawn
- Website analytics data: 26 months
9. Children's Privacy
Our website is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will take steps to delete such information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. Visit ico.org.uk for more information.
Ready to Create Your Display?
Browse our collection or design a custom ribbon display to honour service and dedication.