Last updated: 24 June 2026
This policy explains what personal data we collect when you use lampblack.co.uk, why we collect it, who we share it with, and what control you have over it.
1. Who controls your data
MARC HAYDON LTD, trading as Lampblack, is the data controller. We are registered in England and Wales under company number 11807404.
Registered office: 4 Tudor Gardens, London, SW13 0JS, United Kingdom.
Email: support@lampblack.co.uk
Telephone: 07451 268818
2. What we collect
When you place an order
- Name, delivery address, billing address
- Email address and telephone number
- Order contents, order value and order history
- Delivery notes you provide (access instructions, preferred delivery windows)
We do not receive or store your full card number. Payments are handled by our payment providers, who send us only a confirmation and the last four digits.
When you contact us
- Your name, email address, telephone number and the content of your message
- Photographs you send us in support of a damage or fault claim
When you browse the site
- IP address, browser type, device type and operating system
- Pages viewed, time on site, referring source
- Cookie identifiers — see section 7
When you subscribe to emails
- Your email address, and whether you open or click our emails
3. Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Process and deliver your order, take payment, send dispatch and tracking updates | Performance of a contract |
| Handle returns, refunds, faults and warranty claims | Performance of a contract / legal obligation |
| Answer your questions and provide support | Legitimate interests — running a business customers can contact |
| Keep accounting and tax records | Legal obligation |
| Prevent and investigate fraudulent orders | Legitimate interests — protecting the business from fraud |
| Improve the site and understand how it is used | Consent (analytics cookies) |
| Show you advertising and measure its performance | Consent (marketing cookies) |
| Send marketing emails | Consent, or legitimate interests where you are an existing customer buying similar goods |
Where we rely on consent, you can withdraw it at any time. Where we rely on legitimate interests, you can object — see section 8.
4. Who we share it with
We do not sell your personal data. We share it only where it is necessary to run the business:
- Shopify — our e-commerce platform, which hosts the store and processes orders on our behalf.
- Payment providers — Shopify Payments and PayPal, who process your payment and carry out fraud checks.
- Our fulfilment partners — where an item is dispatched directly from our UK distributor's warehouse, we pass them your name, delivery address and telephone number so they can pack and send your order. They may use it only for that purpose.
- Carriers — Royal Mail, DPD, Evri, pallet networks and two-person delivery teams, who need your name, address and phone number to deliver and to arrange a delivery window.
- Email provider — for order emails and, where you have subscribed, marketing emails.
- Analytics and advertising providers — Google and Meta, where you have accepted the relevant cookies.
- Our accountant — for bookkeeping and tax filing.
- Professional advisers, regulators or law enforcement — where we are legally required to disclose.
5. Where your data is held
Some of our providers store or process data outside the UK. Where they do, we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum, so your data keeps an equivalent level of protection.
6. How long we keep it
| Data | Retention |
|---|---|
| Order and transaction records | 7 years, to meet HMRC requirements |
| Support emails and enquiries | 2 years from last contact |
| Warranty and fault claims | Duration of the guarantee plus 2 years |
| Marketing subscriber data | Until you unsubscribe, then 12 months to honour the request |
| Analytics data | Up to 26 months |
7. Cookies
Cookies are small files stored on your device. We use:
- Essential cookies — keep your basket working, keep you logged in, and protect against fraud. These cannot be switched off and do not need your consent.
- Analytics cookies — tell us which pages are used and where people drop off.
- Marketing cookies — let us show relevant ads and measure whether they work.
We ask for your consent before setting analytics or marketing cookies, and you can change your choice at any time through the cookie settings link in our footer. You can also block or delete cookies in your browser settings, though the site may not work properly without the essential ones.
8. Your rights
Under UK data protection law you have the right to:
- Access — ask for a copy of the personal data we hold about you.
- Rectification — ask us to correct data that is wrong or incomplete.
- Erasure — ask us to delete your data, where we have no ongoing legal reason to keep it.
- Restriction — ask us to pause using your data while a dispute is resolved.
- Portability — ask for your data in a machine-readable format.
- Object — object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent — where we rely on consent, withdraw it at any time.
To exercise any of these, email support@lampblack.co.uk. We respond within one month. There is no charge unless a request is clearly excessive or repetitive.
We may ask you to confirm your identity before we act, so that we do not disclose your data to someone else.
9. Marketing
We only send marketing emails where you have opted in, or where you have bought from us and we are telling you about similar products. Every email has an unsubscribe link, and unsubscribing takes effect immediately. Unsubscribing from marketing does not stop order and delivery emails, which we have to send.
10. Security
The site runs over HTTPS. Access to the admin is limited and protected by two-factor authentication. We keep the number of people with access to customer data to the minimum needed to run the business. No system is perfectly secure, but we take these measures seriously and will tell you and the ICO if a breach puts your rights at risk.
11. Children
Our site is not aimed at children and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, email us and we will delete it.
12. Changes to this policy
We may update this policy. The current version is always on this page, with the date at the top. Where a change materially affects how we use your data, we will tell you directly.
13. Complaints
If you are unhappy with how we have handled your data, contact us first at support@lampblack.co.uk so we can put it right.
You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator: ico.org.uk, helpline 0303 123 1113.