Privacy policy
Privacy Policy
Last updated: 31 October 2026
At Sill & Spade, we take your privacy seriously. This Privacy Policy explains what personal information we collect, why we use it, who we may share it with and the rights you have in relation to your information.
Sill & Spade operates this website and online store. Our store is powered by Shopify, which provides the ecommerce platform we use to offer our products and services.
For the purposes of UK data protection law, Sill & Spade is the data controller for the personal information we process for our own purposes.
If you have any questions about this policy or how we use your personal information, you can contact us at:
Personal information we collect
The information we collect depends on how you interact with Sill & Spade.
It may include:
- Identity and contact information, such as your name, email address, telephone number, billing address and delivery address.
- Order and transaction information, including products ordered, order history, returns, refunds, cancellations and delivery information.
- Payment information. Payments are processed using our payment service providers. We may receive information about the status and method of a payment, but we do not ordinarily receive or store your full payment card details ourselves.
- Account information, if you choose to create or use a customer account.
- Communications, including information you provide when you contact us about an order, product or other enquiry.
- Technical and usage information, such as your IP address, browser, device information and information about how you interact with our website.
- Marketing preferences, including whether you have chosen to receive marketing communications from us.
- Cookie and similar technology information, where these technologies are used on our website.
How we collect your information
We may collect personal information:
- directly from you when you place an order, create an account, contact us, subscribe to marketing or otherwise provide information to us;
- automatically when you visit or interact with our website, including through cookies and similar technologies;
- from Shopify and other service providers that help us operate our store;
- from payment providers, delivery companies and fulfilment partners in connection with your order; and
- from advertising, analytics or other business partners where permitted by law and where we use those services.
Why we use your personal information
UK data protection law requires us to have a lawful basis for processing your personal information. The lawful basis we rely upon depends on what we’re using your information for.
Processing and fulfilling your order
We use your personal information to:
- process and manage your order;
- take and confirm payment;
- arrange fulfilment and delivery;
- provide order and delivery updates;
- process cancellations, returns and refunds; and
- provide customer service relating to your purchase.
Our lawful basis for this processing is generally performance of a contract, or taking steps at your request before entering into a contract.
Meeting our legal obligations
We may process and retain information where necessary to comply with our legal obligations, including accounting, tax, consumer protection and other regulatory requirements.
Our lawful basis is compliance with a legal obligation.
Operating and protecting Sill & Spade
We may use personal information where necessary to:
- operate and administer our website and business;
- prevent and detect fraud or misuse;
- maintain the security of our website and systems;
- understand and resolve technical problems;
- manage and defend legal claims; and
- understand how our business and website are performing.
Where appropriate, our lawful basis is our legitimate interests in operating, protecting and improving Sill & Spade, preventing fraud and providing an effective service to our customers.
Where we rely on legitimate interests, we consider whether our interests are necessary and proportionate and balance them against your rights and interests.
Marketing
If you choose to receive marketing from us, we may use your contact details and marketing preferences to send you news, product updates, offers and other Sill & Spade marketing.
Where consent is required, we rely on your consent. In circumstances where UK law permits marketing without consent, we will only do so where the relevant legal requirements are met.
You can unsubscribe from marketing emails at any time by using the unsubscribe link in an email or by contacting us at hello@sillandspade.co.uk.
Stopping marketing communications won’t prevent us from sending necessary service messages about an order you’ve placed.
Cookies, analytics and advertising
We may use cookies and similar technologies to operate our website, remember preferences, understand how visitors use our website and, where enabled, measure or personalise advertising.
Some technologies are necessary for the website to function and may not require consent. Where UK law requires consent for non-essential cookies or similar technologies, we will ask for your consent before using them.
You can manage available choices through the cookie controls on our website.
More information about the technologies we use may also be provided in our cookie settings or cookie policy.
Who we share personal information with
We only share personal information where there is a legitimate reason to do so.
Depending on your interaction with us, we may share relevant information with:
- Shopify, which provides the ecommerce technology used to operate our online store;
- Google, if we use the Google & YouTube channel and related Google services;
- payment processors and financial service providers used to process transactions;
- delivery and courier companies used to deliver orders;
- our product suppliers and fulfilment partners where they need information to prepare and deliver your order;
- email, hosting, IT and other technology service providers;
- analytics, advertising and marketing providers where we use those services and where permitted by law;
- professional advisers such as accountants, legal advisers or insurers where necessary; and
- regulators, courts, law enforcement bodies or other authorities where we’re legally required or permitted to disclose information.
We only provide suppliers and fulfilment partners with the information reasonably necessary to fulfil your order or provide the relevant service.
For example, because some Sill & Spade products may be dispatched directly by our fulfilment partners, we may need to provide them with your name, delivery address, contact information and details of the products you’ve ordered.
We do not sell your personal information.
Google services
If we use the Google & YouTube channel, relevant store, product and order information may be shared with Google to sync products with Google Merchant Center and provide related services.
If we connect Google Analytics or Google Ads, relevant website activity and events may also be processed for store analytics, advertising measurement or related purposes. The information processed depends on the Google services and features we enable.
Google may process information in accordance with its own privacy terms. Where UK law requires consent for cookies or similar technologies, we will seek consent through our website’s privacy controls before using them.
Shopify
Our online store is powered by Shopify.
Shopify processes personal information about your access to and use of our store in order to provide its ecommerce services to us and to you.
We also use certain Shopify enhanced services, including Shopify Network Intelligence. Where these services are enabled, Shopify may use information about your interactions with Sill & Spade together with information about your interactions with other Shopify merchants and Shopify to provide and improve services such as personalisation, store performance, fraud prevention and advertising.
Where consent is required, these uses are subject to the choices you make through our cookie and privacy controls. You can change your cookie preferences using the privacy controls available on our website.
For some of these activities, Shopify is responsible for its own processing of your personal information. You can find further information about how Shopify processes personal information, and exercise applicable privacy rights in relation to Shopify’s processing, through the Shopify Consumer Privacy Policy and Shopify Privacy Portal.
Information processed through Shopify may be transferred to and processed in countries outside the United Kingdom. Where required, appropriate safeguards are used for international transfers.
Payments
Payments made through our website are handled by our payment service providers.
Payment providers may process information such as your payment card details, billing information and transaction information in order to authorise and process your payment, prevent fraud and comply with their legal obligations.
Sill & Spade does not ordinarily receive or store your complete payment card details.
Order fulfilment and delivery
Some products sold by Sill & Spade may be stored, prepared or dispatched by third-party fulfilment partners.
When this happens, we provide the relevant partner with the information necessary to fulfil and deliver your order. This may include your name, delivery address, contact details and the products you’ve ordered.
Delivery companies will similarly receive information necessary to deliver your parcel and provide relevant delivery services.
Sill & Spade remains your retailer and point of contact in relation to your purchase.
Email and communications
We use third-party technology providers to operate our business email and communications.
Information you send to us by email may therefore be processed and stored using those services.
We only retain communications for as long as reasonably necessary for customer service, business administration, legal or regulatory purposes.
International transfers
Some of the organisations that provide services to us, including Shopify, Google and other technology providers, may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take steps to ensure that appropriate protections required by UK data protection law are in place.
Depending on the destination and provider, these may include UK adequacy regulations or approved contractual safeguards such as the UK International Data Transfer Agreement or an appropriate UK Addendum to standard contractual clauses.
How long we keep your information
We don’t keep personal information for longer than we reasonably need it.
The appropriate retention period depends on the type of information and why we hold it.
For example:
- information relating to purchases and financial transactions may be retained for the period necessary to meet accounting, tax and other legal obligations;
- customer service communications may be retained while they’re needed to manage an enquiry, complaint or potential dispute;
- customer account information may be retained while the account remains active and for an appropriate period afterwards;
- marketing information is retained while you remain subscribed or while we have another lawful reason to retain it; and
- information needed to record that you’ve opted out of marketing may be retained so that we can respect that preference.
When information is no longer required, we will delete or anonymise it where appropriate.
Your data protection rights
Under UK data protection law, you may have rights in relation to your personal information. These include the right to:
- access personal information we hold about you;
- correct personal information that is inaccurate or incomplete;
- request deletion of your personal information in certain circumstances;
- request restriction of how we process your information in certain circumstances;
- object to certain processing, including an absolute right to object to the use of your personal information for direct marketing;
- data portability, allowing you in certain circumstances to obtain information you provided to us in a structured, commonly used and machine-readable format; and
- withdraw consent at any time where we rely on your consent.
These rights don’t apply in every circumstance, and there may be lawful reasons why we’re unable to comply with a particular request.
You will not be treated unfairly for exercising your data protection rights.
To exercise any of these rights, please contact:
We may need to ask for information reasonably necessary to confirm your identity before responding to a request.
Automated decision-making
Sill & Spade does not currently make decisions about customers based solely on automated processing that produce legal or similarly significant effects.
Some of our service providers may use automated systems for purposes such as fraud prevention and payment security. Where they act independently in relation to that processing, their own privacy information will explain how those systems operate and the rights available to you.
Children’s privacy
Sill & Spade is intended for a general adult shopping audience and isn’t directed at children.
We don’t knowingly collect personal information from children where we do not have a lawful basis to do so.
If you believe a child has provided personal information to us inappropriately, please contact us at hello@sillandspade.co.uk.
Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.
We also use established service providers to operate important parts of our ecommerce and technology infrastructure.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
Third-party websites
Our website may contain links to websites, social networks or services operated by other organisations.
If you follow one of these links, that organisation will process information in accordance with its own privacy practices. Sill & Spade isn’t responsible for the privacy practices of websites or services that we don’t operate.
We encourage you to review their privacy information before providing personal information to them.
Complaints
If you have a concern about how we use your personal information, please contact us first at:
We’ll do our best to resolve your concern.
You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), if you’re unhappy with how your personal information has been handled.
Information about raising a data protection complaint is available from the Information Commissioner’s Office.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, the services and technologies we use, or legal and regulatory requirements.
When we make changes, we’ll publish the updated policy on our website and update the Last updated date above.
Where required by law, we’ll provide additional notice of significant changes.
Contact us
If you have questions about this Privacy Policy, want to exercise your data protection rights or have a concern about how your information is being used, please contact:
Sill & Spade
Email: hello@sillandspade.co.uk