Privacy Policy

HOMART LIMITED (trading as Plinth Studio) is the data controller for personal data collected through plinthstudiostore.com. Company number 15257354, registered office 30 Uphall Road, Ilford, England, IG1 2JF. Contact for any privacy matter: support@homartuk.com.

This policy explains what we collect, why, how long we keep it and what you can do about it. It is written to the UK GDPR and the Data Protection Act 2018.

What we collect

Data	When
Name, email, delivery and billing address, phone number	When you order, request a quote or open a trade account
Order and quote history, including drawings or specifications you send us	When you buy or ask for a price
Email address alone	If you subscribe to our updates
Correspondence with us	When you email or call
Device and usage data — IP address, browser, pages viewed	Automatically, via Shopify and cookies
Business name, VAT number, purchase order references	Trade and institutional accounts only

We never see your full card number. Payments are processed by Shopify Payments and the card networks. We receive only a confirmation, the last four digits and the card type.

Why, and on what lawful basis

Purpose	Lawful basis
Taking and fulfilling your order; arranging delivery; answering you	Contract — we cannot do it without this data
Quoting for made-to-measure work	Contract, or steps taken at your request before a contract
Keeping accounting and tax records	Legal obligation — HMRC requires six years
Handling returns, guarantee claims and complaints	Legal obligation and legitimate interests
Fraud prevention and site security	Legitimate interests in protecting the business and our customers
Marketing emails	Consent — which you may withdraw at any time
Analytics and improving the site	Consent for non-essential cookies; legitimate interests for aggregate, non-identifying measurement

Who we share it with

Only where it is needed to run the shop, and never for anyone else's marketing. We do not sell personal data.

Shopify Inc. — our ecommerce platform and payment processor.
Carriers and delivery partners — name, address and phone number, so they can deliver and call you about a two-person booking.
Our manufacturing partners — delivery details and the specification, for made-to-measure and drop-shipped items.
Our accountants and, where legally required, HMRC and other authorities.
Email and analytics providers, where you have consented.

Some of these providers operate outside the UK. Where data is transferred abroad it is protected by UK adequacy regulations or by the International Data Transfer Agreement or Addendum, as required by the UK GDPR.

How long we keep it

Record	Retention
Order and transaction records	6 years after the end of the relevant tax year
Quotes and drawings not converted to an order	2 years
Guarantee and warranty records	6 years from delivery
Marketing consent and email address	Until you unsubscribe, then a suppression record so we don't email you again
General correspondence	2 years
Website analytics	Per the provider's retention, typically 14 months

Cookies

Essential cookies keep your basket and your session working and cannot be turned off. Non-essential cookies — analytics and any marketing tags — are set only with your consent, which you can give or refuse in the cookie banner and change at any time in your browser settings. Refusing them does not stop you buying anything.

Your rights

Under the UK GDPR you have the right to:

Access a copy of the personal data we hold about you.
Rectification of anything inaccurate.
Erasure, where we have no overriding legal reason to keep it — note that tax law obliges us to retain order records for six years.
Restriction of processing while a dispute is resolved.
Object to processing based on legitimate interests, and to direct marketing at any time.
Data portability — a machine-readable copy of data you gave us.
Withdraw consent at any time, with no effect on processing already carried out.

Email support@homartuk.com. We respond within one month, free of charge, and we may ask you to confirm your identity first.

Security

The site runs over HTTPS. Card data never reaches our systems. Access to customer records is limited to those who need it and protected by strong authentication. If a breach occurs that is likely to risk your rights, we will tell the ICO within 72 hours and tell you without undue delay.

Children

This shop is intended for adults and we do not knowingly collect data from anyone under 16. If you believe we hold a child's data, tell us and we will delete it.

Complaints

Please raise it with us first — most things are a misunderstanding we can fix. You also have the right to complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, 0303 123 1113, ico.org.uk.