Privacy Policy

A cookie is a small file which asks permission to be placed on your computer's hard drive. Cookies allow web applications to respond to you as an individual.

We use traffic log cookies to identify which pages are being used. We only use this information for statistical analysis purposes and to improve your experience on our website. Once this work is complete, the data is removed from the system.

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

We also use analytics tools (including Google Analytics) that automatically collect and store information about your visit, such as: the internet domain and IP address from which you access our website; the type of browser and operating system used; the date and time of your visit; the pages you enter, visit and exit from; and, if you linked to our website from another website, the address of that website.

Our website may contain links to other websites of interest. Once you have used these links to leave the Shaw Stone site, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting any other website. Please note that other websites have their own privacy policies, which you should read if you are concerned.

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. You may request details of personal information which we hold about you under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you would like a copy of the information held about you, or if you believe that any information we are holding is incorrect or incomplete, please contact us at [email protected].

We collect and use personal information to provide you with our services, process your orders, and communicate with you. The categories of information we may collect include:

• Identity and contact data: name, email address, telephone number, and delivery address — collected when you place an order or contact us.
• Transaction data: details of the products you have purchased from us and payment information (processed securely via Stripe; we do not store card details).
• Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, and operating system — collected automatically when you visit our website.
• Usage data: information about how you use our website, products, and services.
• Marketing preferences: your preferences in receiving marketing from us.

We use your personal information to: supply goods to you; process your payment; manage your order and communicate with you about it; improve our website and services; and, where you have given consent, to send you marketing communications about our products and services.

We will only share your personal data with organisations involved in fulfilling your order (such as delivery companies) or where required by law. We will never sell your personal data to third parties.

All payments are processed securely by Stripe, Inc. Shaw Stone Limited does not store, process, or transmit your full payment card details. Stripe's privacy policy is available at stripe.com/gb/privacy.

The information you share with us is stored and hosted within the UK or the European Economic Area (EEA). Where we need to transfer your personal data outside these areas, we will ensure appropriate safeguards are in place, such as standard contractual clauses approved by the relevant authority.

We only hold on to information for as long as we need to. The retention period depends on the kind of information and why we need it:

• Order and transaction records: 7 years (for legal and tax compliance).
• Customer account information: for as long as you remain an active customer, plus 3 years thereafter.
• Marketing preferences: until you withdraw consent or unsubscribe.
• Website analytics data: as per our analytics provider's retention settings (typically 26 months).

In certain circumstances we may retain your personal data where such retention is necessary for compliance with a legal obligation, to resolve disputes, or to enforce our agreements.

Under UK GDPR, you have the following rights:

• Access: You have the right to request a copy of the personal data we hold about you. We will aim to respond within one month of your request.
• Rectification: You have the right to ask us to correct any mistakes in your personal data.
• Erasure: You have the right to require us to delete your personal data in certain circumstances.
• Restriction of processing: You have the right to require us to restrict processing of your personal data in certain circumstances.
• Data portability: You have the right to receive the personal data you provided to us in a structured, commonly used and machine-readable format.
• Object: You have the right to object at any time to your personal data being processed for direct marketing purposes, or where we are relying on legitimate interests as the legal basis for processing.
• Withdraw consent: Where we are processing your data on the basis of your consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. All payment processing is handled by Stripe using industry-standard encryption. Despite these measures, no system can be 100% secure, and we will notify you and the ICO of any suspected data security breach where we are legally required to do so.

We may update this privacy policy from time to time. Where changes are substantial or have an impact on your rights, we will let you know. You should check this page periodically to ensure you are happy with any changes. This policy was last updated in March 2026.

If you have any questions about this privacy policy or how we handle your personal data, please contact us: