Last updated: June 2026
Privacy Policy
Your privacy matters. This policy explains what information we collect, how we use it, and how we keep it safe. Helen White is the data controller for helenwhite.co.uk.
1. Information We Collect
When you place an order or make an enquiry we may collect your name, email address, postal address, phone number and payment information (processed securely via our payment provider – we do not store card details). If you contact us directly we retain the content of that correspondence.
2. How We Use Your Information
We use your information solely to process and fulfil your order, communicate with you about your purchase, and (where you have opted in) to send you updates about new work and collections. We do not sell, rent or share your personal data with third parties for marketing purposes.
3. Cookies
This site uses essential cookies to make the shop function correctly (cart, checkout, session). We also use analytics cookies (Google Analytics) to understand how visitors use the site – this data is anonymised and aggregated. You can manage cookie preferences at any time via your browser settings. For full details see our Cookie Policy.
4. Third-Party Services
We use WooCommerce (Automattic) to power our shop, and a secure third-party payment processor to handle transactions. Shipping is handled by third-party couriers who will receive your delivery address. These providers have their own privacy policies and are only given the data necessary to fulfil your order.
5. Data Retention
We retain order records for as long as required by UK tax law (typically 6 years). If you contact us by email your correspondence is kept for as long as relevant to any ongoing relationship. You may request deletion of your personal data at any time – see Section 7 below.
6. Security
This site uses SSL encryption for all data in transit. Payment information is handled entirely by our payment processor and is never stored on our servers. We take reasonable technical and organisational measures to protect your data against unauthorised access.
7. Your Rights
Under UK GDPR you have the right to access, correct, or request deletion of your personal data. You also have the right to object to processing, request restriction of processing, and to data portability. To exercise any of these rights please contact us at [email protected]. We will respond within 30 days.
8. Contact
Questions about this policy? Email us at [email protected]. If you are unhappy with how we have handled your data you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.