Privacy Policy

Church & Hill Ltd

Website: www.churchandhillclothing.com
Effective date: 22 October 2026

1. Who We Are

Church & Hill Ltd (“Church & Hill”, “we”, “us” or “our”) is a company registered in England and Wales. We operate the Church & Hill clothing brand and online store, offering premium garments and accessories inspired by British heritage and South American craftsmanship.

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, purchase our products, contact us, subscribe to our marketing communications or interact with us through social media.

We are committed to protecting your privacy and handling your personal data fairly, lawfully and transparently, in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. The Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

Contact information

  • Your name, email address, telephone number and billing and delivery addresses.

Order and transaction information

  • Details of products you purchase, prices paid, order history, returns, refunds and exchanges.

  • Information relating to abandoned or incomplete purchases, where applicable.

Payment information

  • Payment status, transaction references and other information required to process your order.

  • Payment card details are processed by our payment service providers. We do not ordinarily store full payment card details on our own systems.

Account and communication information

  • Information you provide when creating an account, contacting customer service, submitting an enquiry or communicating with us by email or social media.

Marketing preferences

  • Your preferences regarding promotional emails, newsletters and other marketing communications, including records of consent and requests to unsubscribe.

Technical and website usage information

  • Your IP address, browser type, device information, operating system, website interactions, pages visited, products viewed, referral sources and information about your shopping basket, where collected.

Cookies and similar technologies

  • Information collected through cookies and comparable technologies, subject to your preferences and applicable consent requirements.

We may also receive personal data from third parties, such as payment providers, delivery companies, e-commerce platforms and advertising or analytics providers, where relevant to the services they provide.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

  • Processing orders: To accept and fulfil purchases, arrange delivery, process payments, and manage returns, refunds and exchanges.

  • Customer service: To respond to enquiries, resolve complaints and provide assistance.

  • Website operation: To maintain, secure and improve our website and shopping experience.

  • Payments and fraud prevention: To verify transactions, detect suspicious activity and protect our business and customers.

  • Marketing: To send promotional communications where permitted by law and, where required, with your consent.

  • Personalisation: To understand customer preferences and improve product recommendations or the relevance of our communications, where applicable and lawful.

  • Legal and accounting obligations: To maintain business records, comply with tax and other legal requirements, and respond to lawful requests from authorities.

We will not use your personal data for purposes that are incompatible with those described in this Privacy Policy without providing any information or obtaining any consent required by law.

4. Our Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for processing your personal data. Depending on the circumstances, we rely on the following:

  • Contract: Where processing is necessary to fulfil an order or take steps at your request before entering into a contract.

  • Legal obligation: Where processing is necessary to comply with legal, tax, accounting or regulatory requirements.

  • Legitimate interests: Where processing is necessary for legitimate business purposes, such as operating and improving our website, managing customer relationships, preventing fraud and protecting our business, provided those interests do not override your rights and freedoms.

  • Consent: Where you have given consent, for example for certain marketing communications or non-essential cookies where consent is required.

You may withdraw your consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.

5. Marketing Communications

We may send you information about Church & Hill products, new collections, brand news, special offers and other relevant updates where we are legally permitted to do so.

Where required, we will ask for your consent before sending marketing communications. In certain circumstances, we may rely on the existing-customer exception under applicable electronic marketing rules.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in the email or contacting us using the details in Section 13.

Unsubscribing from marketing communications will not affect essential messages relating to your orders, payments, deliveries, returns or other service-related matters.

We do not sell your personal data to third parties for their own marketing purposes.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support its functionality and improve your shopping experience.

Cookies are small text files stored on your device. Depending on the technologies in use, they may be used to:

  • Remember your preferences and shopping basket.

  • Enable essential website and checkout functions.

  • Understand how visitors use our website.

  • Measure website performance and improve our services.

  • Support advertising and marketing activities, where applicable.

Some cookies are essential for the website to operate. Other cookies, including certain analytics and advertising cookies, will only be used where the necessary consent has been obtained.

You can manage your cookie preferences through any cookie preference tool provided on our website and through your browser settings. Disabling certain cookies may affect some website functionality.

Where applicable, our website may use third-party services that place or access cookies or similar technologies. Further information about these technologies and your available choices will be provided through our cookie settings or a separate Cookie Policy.

7. Sharing Your Personal Data

We may share personal data with trusted third parties where necessary to operate our business and provide our services. These may include:

  • E-commerce and website providers: To operate our online shop and manage orders.

  • Payment providers: To process payments, refunds and transaction-related enquiries.

  • Delivery and fulfilment providers: To deliver your purchases and manage shipping, tracking and returns.

  • IT, hosting and security providers: To maintain our website, systems and data security.

  • Analytics and marketing providers: To understand website performance and manage permitted marketing activities.

  • Professional advisers: Such as accountants, lawyers and other advisers where reasonably necessary.

  • Public authorities and regulators: Where disclosure is required by law or necessary to protect our legal rights.

We only share personal data to the extent reasonably necessary for the relevant purpose. Where required, we put appropriate contractual and data protection safeguards in place with our service providers.

8. International Transfers of Personal Data

Some of our service providers may process or store personal data outside the United Kingdom.

Where personal data is transferred internationally, we will ensure that the transfer complies with applicable data protection law. This may include transferring data to a country recognised as providing an adequate level of protection or using appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, where required.

You may contact us for further information about the safeguards applicable to relevant international transfers.

9. How Long We Keep Your Personal Data

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including meeting legal, accounting, tax and reporting obligations.

Retention periods vary according to the type of information and the reason it is held. For example:

  • Order and transaction records may be retained for the period required by applicable tax and accounting laws.

  • Customer service correspondence may be retained for as long as necessary to resolve enquiries and maintain appropriate records.

  • Marketing information will be retained until you unsubscribe or withdraw your consent, subject to any limited records we need to retain to respect your preferences and comply with the law.

  • Technical and cookie-related information will be retained in accordance with the relevant service settings and applicable requirements.

When personal data is no longer required, we will delete it or securely anonymise it, where appropriate.

10. How We Protect Your Personal Data

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, disclosure or destruction.

These measures may include access controls, secure systems, the use of reputable service providers and appropriate security procedures.

However, no method of transmission over the internet or electronic storage is completely secure. While we take reasonable steps to protect your personal data, we cannot guarantee absolute security.

11. Your Data Protection Rights

Under applicable data protection law, you may have the right to:

  • Access: Request a copy of the personal data we hold about you.

  • Rectification: Ask us to correct inaccurate or incomplete personal data.

  • Erasure: Request deletion of your personal data in certain circumstances.

  • Restriction: Ask us to restrict the processing of your personal data in certain circumstances.

  • Objection: Object to processing based on legitimate interests and, at any time, object to the use of your personal data for direct marketing.

  • Data portability: Request a copy of certain personal data in a commonly used, machine-readable format, where the legal requirements are met.

  • Withdraw consent: Withdraw consent where processing relies on your consent.

These rights are subject to applicable legal conditions and exemptions.

To exercise your rights, please contact us using the details in Section 13. We may need to verify your identity before responding.

We will respond within the time limits required by law, generally within one month of receiving a valid request. Where legally permitted, this period may be extended for complex or multiple requests.

We will not ordinarily charge a fee for handling a request. A reasonable fee may be charged, or a request refused, where permitted by law, such as where a request is manifestly unfounded or excessive.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at www.ico.org.uk if you believe your personal data has been handled unlawfully.

12. Third-Party Websites and Social Media

Our website may contain links to third-party websites, social media platforms or other external services.

If you follow these links or interact with those services, their own privacy policies and terms will apply. We are not responsible for the privacy practices, security or content of third-party websites that we do not control.

We recommend reviewing the relevant privacy policies before providing personal information to those services.

13. Contact Us

If you have questions about this Privacy Policy, how we handle your personal data or wish to exercise your data protection rights, please contact:

Church & Hill Ltd

Website: www.churchandhillclothing.com

Email: privacy@churchandhillclothing.com

Registered office: Unit 6, Country Business Park, Northallerton, North Yorkshire, DL6 2NQ

Company registration number: 17491567

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, service providers or applicable legal requirements.

Any updated version will be published on our website, with the effective date amended accordingly. We encourage you to review this page periodically to remain informed about how we protect your personal data.