Privacy & Security Policy

This website, is operated by or on behalf of Schwartz & von Halen Ltd., a company registered in the United Kingdom. Our registered office is International House, 142 Cromwell Road, London, SW7 4EF, United Kingdom, and our company registration number is 12849939. 

Thank you for visiting our online shop. Protecting your privacy and personal information is very important to us. This Privacy Policy explains how we collect, use, store and share your personal information when you visit our website, place an order, create an account, contact us or otherwise use our services.

We process your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations 2003 (PECR).

Last updated: 26 July 2026

1. Who is responsible for your personal information?

Schwartz & von Halen Ltd. is the data controller responsible for the personal information processed through this website.

You can contact us about this Privacy Policy or the use of your personal information using the following details:

• Email: info@schwartz-vonhalen.com
• Live chat: available through our website
• Postal address: Schwartz & von Halen Ltd., International House, 142 Cromwell Road, London, SW7 4EF, United Kingdom

2. Access data and website hosting

You may browse our website without creating a customer account. Whenever you visit the website, our web server and hosting providers may automatically collect certain technical information. This may include your IP address, browser type, device type, operating system, referring website, date and time of access, pages visited, files requested, the amount of data transferred and information about how you interact with the website.

We use this information to provide and secure the website, identify technical problems, prevent misuse and fraud, analyse website performance and improve our services.

The lawful basis for this processing is our legitimate interest under Article 6(1)(f) UK GDPR in operating a secure, reliable and user-friendly online shop. Where the processing is necessary to provide a service you have requested, the lawful basis may also be Article 6(1)(b) UK GDPR.

Server log information is normally retained only for as long as reasonably necessary for security, troubleshooting and operational purposes, unless a longer retention period is required to investigate suspected fraud, misuse or a security incident.

3. Personal information we collect

Depending on how you use our website and services, we may collect the following categories of personal information:

• Identity information: such as your name and, where applicable, your company name.
• Contact information: such as your billing address, delivery address, email address and telephone number.
• Order information: such as the products ordered, size, colour, price, order number, delivery method, returns and exchanges.
• Payment information: such as payment method, payment status and transaction reference. Full card details are generally processed directly by the relevant payment provider and are not stored by us.
• Account information: such as your login details, saved addresses, order history and account preferences.
• Communication information: such as messages sent by email, live chat, contact form or through customer service.
• Marketing information: such as your newsletter subscription, marketing preferences and interactions with our marketing communications.
• Technical and usage information: such as your IP address, browser, device, cookie identifiers and website activity.
• Review and feedback information: such as product reviews, ratings, photographs or comments you choose to submit.

4. Order processing and customer accounts

We collect personal information that you voluntarily provide when you place an order, create a customer account, submit a return or exchange request, or contact us by email, live chat or contact form.

Mandatory fields are marked as such because we need this information to process your order, deliver your products, administer a return or exchange, create your account or respond to your enquiry. If you do not provide information marked as mandatory, we may be unable to provide the relevant service.

We use this information to:

• process and fulfil your order;
• take and verify payment;
• arrange delivery through our delivery partners;
• provide order and delivery updates;
• administer returns, exchanges, refunds and store credit;
• provide customer service;
• create and manage your customer account;
• comply with accounting, tax and legal requirements; and
• detect and prevent fraudulent or unauthorised transactions.

The lawful basis for processing information required to fulfil your order or provide a requested service is Article 6(1)(b) UK GDPR. Where processing is required to comply with a legal obligation, we rely on Article 6(1)(c) UK GDPR. For fraud prevention, security and the improvement of our services, we may rely on our legitimate interests under Article 6(1)(f) UK GDPR.

If you choose to create a customer account, we use your information to maintain that account and make future purchases more convenient. You may request deletion of your customer account at any time by contacting us or by using an account-deletion function where one is available.

Deleting your account does not necessarily mean that all information will be deleted immediately. We may retain information where necessary to complete an order, process a return, resolve a dispute, prevent fraud or comply with legal, tax and accounting obligations.

5. Payment processing and fraud prevention

When you place an order, payment information is processed by the payment provider selected during checkout. We share the information necessary to process and confirm your payment with the relevant bank, card network, payment provider or fraud-prevention service.

Payment providers may collect personal information directly from you and may process that information as independent data controllers. Their own privacy policies will apply to such processing.

We and our payment providers may carry out automated or manual fraud and security checks. These checks may consider information relating to your order, payment method, IP address, device, billing address and delivery address.

We process this information where necessary to perform our contract with you, comply with legal obligations and pursue our legitimate interests in preventing fraud, protecting customers and securing our business.

6. Delivery, returns and exchanges

We share your name, delivery address, contact details and relevant order information with our warehouse, fulfilment providers and delivery partners where this is necessary to pack, dispatch, deliver or return your order.

Delivery providers may use your contact details to provide tracking information, estimated delivery times, delivery notifications or information concerning a missed delivery.

This processing is necessary to perform our contract with you under Article 6(1)(b) UK GDPR.

7. Service providers and disclosure of information

We may share personal information with carefully selected service providers that help us operate our business and provide our services. These may include:

• website and e-commerce platform providers;
• hosting and cloud-storage providers;
• warehousing and fulfilment providers;
• delivery and returns providers;
• banks, card networks and payment providers;
• fraud-prevention and security providers;
• customer-service and live-chat providers;
• email, newsletter and marketing providers;
• analytics and advertising providers;
• review and customer-feedback platforms;
• IT, technical-support and professional advisers; and
• accountants, auditors, insurers, lawyers and regulatory authorities.

Service providers that process personal information on our behalf are permitted to use it only for the agreed purposes and are required to protect it appropriately.

We may also disclose personal information where required by law, court order or a competent authority, or where reasonably necessary to establish, exercise or defend legal claims, investigate fraud, protect our rights or protect the rights and safety of customers or others.

If our business or assets are sold, transferred, reorganised or merged, personal information may be disclosed to the prospective buyer, seller, adviser or successor organisation, subject to appropriate confidentiality and data-protection safeguards.

8. Email newsletters and direct marketing

Email marketing when you subscribe to our newsletter

If you subscribe to our newsletter, we will use your email address and any preferences you provide to send you news, product information, offers and other marketing communications.

Where consent is required, we rely on your consent under Article 6(1)(a) UK GDPR and PECR. In certain circumstances, we may send marketing about similar products to existing customers where permitted by the soft opt-in provisions of PECR.

You can unsubscribe at any time by selecting the unsubscribe link in any marketing email or by contacting us. Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

After you unsubscribe, we may retain limited information on a suppression list to ensure that we respect your request and do not send further marketing to that address.

Postal marketing and your right to opt out

Where permitted by law, we may use your name and postal address to send information about our products and offers by post. We rely on our legitimate interest under Article 6(1)(f) UK GDPR in promoting our products to existing and prospective customers.

You can object to postal marketing at any time by contacting us using the details in this Privacy Policy.

9. Reviews and rating reminders

We may invite you to review your order or the products you purchased. Where required, we will send review invitations based on your consent. In other circumstances, we may rely on our legitimate interest in obtaining customer feedback and improving our products and services, where permitted by law.

To send a review invitation, we may share limited information, such as your name, email address, order number and purchased products, with the review platform that provides the service.

If you publish a review, your review, rating, chosen display name and any photographs or other content you submit may be displayed publicly on our website and, where applicable, on the review provider's platform. Please do not include information in a public review that you do not wish to make publicly available.

You can withdraw your consent to review reminders or object to receiving further invitations by contacting us or using any opt-out method included in the invitation.

10. Trusted Shops

Where the Trusted Shops Trustbadge is displayed on our website, it may be used to show our Trusted Shops Trustmark, customer ratings and other Trusted Shops services.

The Trustbadge may collect technical access data, such as your IP address, date and time of access, browser information and the amount of data transferred. This information may be used to provide the Trustbadge, maintain security and document the request.

Where non-essential cookies or similar technologies are used by Trusted Shops, they will only be activated after you provide the required consent through our cookie-preference tool.

If you choose to use a Trusted Shops service after completing an order, relevant personal information may be provided directly to Trusted Shops or transferred with your permission. Trusted Shops' own privacy information will apply to its independent processing.

11. Cookies and similar technologies

We use cookies and similar technologies on our website. Cookies are small text files stored on your device. Similar technologies may include pixels, tags, scripts, local storage and device identifiers.

Some cookies are strictly necessary for the website to operate. For example, they may be required to remember the contents of your basket, maintain security, process checkout or remember your privacy preferences. These technologies may be used without consent where permitted by PECR.

Other cookies, including analytics, personalisation and advertising cookies, are used only where you have provided consent through our cookie banner or cookie-preference tool.

Depending on your selections, cookies may be used to:

• provide essential website functions;
• remember your basket, language, country and preferences;
• measure website traffic and performance;
• understand how visitors use the website;
• improve our products, website and customer experience;
• personalise website content;
• measure the effectiveness of marketing campaigns; and
• display relevant advertising, where permitted.

You can accept, reject or manage non-essential cookies through the cookie banner displayed when you visit our website. You can change or withdraw your preferences at any time through the Cookie Settings link available on our website.

You may also configure your browser to block or delete cookies. However, blocking strictly necessary cookies may prevent certain parts of the website, including the basket or checkout, from operating correctly.

Further details about the specific cookies and similar technologies used on our website, including their providers, purposes and duration, are available through our cookie-preference tool or Cookie Policy.

12. Website analytics

Google Analytics

Where you have provided consent, we may use Google Analytics to understand how visitors use our website. Google Analytics may collect information such as pages viewed, interactions, approximate location, device and browser information, referral source and identifiers stored in cookies or similar technologies.

We use this information to measure website performance, understand customer behaviour and improve our website, products and services.

Google Analytics is provided by Google. Depending on the service configuration and your location, information may be processed by Google entities or service providers located outside the United Kingdom.

Analytics cookies will not be activated unless you provide consent through our cookie-preference tool. The lawful basis for storing or accessing non-essential analytics technologies is your consent under PECR. The lawful basis for the associated processing of personal information is Article 6(1)(a) UK GDPR.

You can withdraw your consent at any time through our Cookie Settings. You may also be able to use browser settings or tools provided by Google to restrict Google Analytics.

13. Advertising and social-media technologies

Where you have provided consent, we may use advertising pixels, tags or similar technologies provided by advertising and social-media platforms. These technologies may help us measure advertising performance, understand whether a purchase followed an advertisement and show advertisements that may be more relevant to you.

Advertising providers may combine information collected through our website with information they have collected through other websites, applications or services. They may process personal information as independent data controllers in accordance with their own privacy policies.

Non-essential advertising technologies will only be activated after you provide consent. You may withdraw your consent at any time through our Cookie Settings.

14. International transfers

Some of our service providers, group companies or business partners may be located outside the United Kingdom or may process personal information using systems located outside the United Kingdom.

Where personal information is transferred to a country that has been recognised by the UK Government as providing an adequate level of protection, we may rely on the applicable UK adequacy regulations.

Where an adequacy regulation does not apply, we use an appropriate lawful safeguard where required. This may include the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses or another transfer mechanism permitted under UK GDPR.

For transfers to an eligible organisation in the United States, we may rely on the UK Extension to the EU–US Data Privacy Framework where the receiving organisation is certified and the framework applies to the relevant information.

Where required, we also assess whether additional contractual, organisational or technical measures are necessary to protect personal information.

You may contact us for further information about the safeguards used for international transfers relevant to your personal information.

15. How long we retain personal information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to fulfil orders, provide customer service, administer returns, maintain appropriate business records and comply with legal, tax, accounting and regulatory obligations.

When deciding how long to retain information, we consider the nature and sensitivity of the information, the purposes for which it is used, the risk of harm from unauthorised use or disclosure, applicable legal requirements and whether those purposes can be achieved in another way.

In general:

• order, invoice, payment and accounting records may be retained for the period required under applicable tax and accounting laws;
• customer-service communications may be retained for as long as necessary to resolve the enquiry and maintain appropriate records;
• account information is retained while the account remains active and for a reasonable period afterwards where required;
• marketing information is retained until you unsubscribe, withdraw consent or object, subject to retaining limited suppression information; and
• cookie and analytics information is retained in accordance with the periods shown in our cookie-preference tool.

After the relevant retention period has expired, information will be deleted, anonymised or securely restricted unless continued retention is required or permitted by law.

16. How we protect your personal information

We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include access controls, secure connections, account authentication, supplier agreements, staff-access restrictions, system monitoring and appropriate security procedures.

No online service or transmission method can be guaranteed to be completely secure. You are responsible for keeping your account password confidential and should not share it with anyone.

17. Your rights

Depending on the circumstances and subject to applicable legal conditions, you may have the following rights under UK data-protection law:

• Right of access: the right to request confirmation of whether we process your personal information and receive a copy of it.
• Right to rectification: the right to ask us to correct inaccurate or incomplete personal information.
• Right to erasure: the right to ask us to delete personal information in certain circumstances.
• Right to restriction: the right to ask us to restrict the processing of personal information in certain circumstances.
• Right to data portability: the right, in certain circumstances, to receive personal information you provided in a structured, commonly used and machine-readable format or request its transmission to another controller.
• Right to object: the right to object to processing based on legitimate interests and to object at any time to processing for direct marketing.
• Right to withdraw consent: where processing is based on consent, the right to withdraw that consent at any time.
• Rights concerning automated decisions: rights relating to certain decisions made solely by automated means that produce legal or similarly significant effects.
• Right to complain: the right to complain to the Information Commissioner's Office.

These rights are not absolute and may be subject to exemptions or legal restrictions. For example, we may need to retain certain information to comply with a legal obligation or establish, exercise or defend a legal claim.

To exercise your rights, please contact us using the details at the beginning or end of this Privacy Policy. We may request information necessary to verify your identity and ensure that personal information is not disclosed to an unauthorised person.

We normally respond to valid requests within one month. Where a request is particularly complex or multiple requests have been made, the response period may be extended where permitted by law. We will inform you if an extension is necessary.

Right to object

Where we process personal information on the basis of our legitimate interests, you have the right to object to that processing on grounds relating to your particular situation.

If you object, we will stop processing the relevant information unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.

You have an absolute right to object to the processing of your personal information for direct-marketing purposes. If you object to direct marketing, we will stop using your information for that purpose.

18. Complaints to the Information Commissioner's Office

If you have concerns about how we process your personal information, please contact us first so that we can try to resolve the matter.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the independent supervisory authority for data protection in the United Kingdom.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Website: https://ico.org.uk/make-a-complaint/

19. Third-party websites

Our website may contain links to websites, applications or services operated by third parties. We are not responsible for the privacy practices or content of those third-party services.

We recommend reviewing the privacy policy of any third-party website or service before providing personal information.

20. Children's privacy

Our website and products are not directed at children, and we do not knowingly collect personal information from children without appropriate authorisation. If you believe that a child has provided personal information to us improperly, please contact us so that we can investigate and take appropriate action.

21. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, services, technology, legal requirements or data-processing activities.

The latest version will always be published on this page. Where changes are material, we may provide an additional notice through the website, your account or another appropriate communication method.

22. Contact us

If you have questions about this Privacy Policy, wish to exercise your rights or want to enquire about how we collect, use, store or share your personal information, please contact us:

• Email: info@schwartz-vonhalen.com
• Live chat: available through our website
• Postal address:
  Schwartz & von Halen Ltd.
  International House
  142 Cromwell Road
  London
  SW7 4EF
  United Kingdom