Privacy policy

Last updated: 21 September 2026

Who we are

The Doorstep Edit is operated by Edward Harden, a sole trader trading as The Doorstep Edit. Edward Harden is the controller responsible for the personal information described in this notice, except where a service provider acts as an independent controller as explained below.

You can contact us at hello@thedoorstepedit.co.uk or write to Edward Harden trading as The Doorstep Edit, 61 Albert Bridge Road, London SW11 4QA, United Kingdom. This notice explains how we handle personal information when you visit our website, contact us, subscribe to updates or place an order.

Information we collect and where it comes from

• Contact and order details: Your name, email address, billing and delivery addresses, telephone number if provided, products ordered, order history, delivery information and correspondence.
• Personalisation: Names, initials, house names, numbers, messages and other details you submit for a personalised product. Where you order a gift, we receive the recipient's details from you. Please provide only information needed for the order and ensure you are entitled to share it.
• Payment information: Payment status, transaction references and information supplied by the payment services available at checkout. Payment providers handle card and payment credentials; please do not send full card details to us by email.
• Website and device information: IP address, browser and device information, pages viewed, shopping activity and cookie preferences, collected through Shopify and relevant cookies or similar technologies.
• Preferences and support: Marketing choices, enquiries, complaints, returns information and any account details you choose to provide where accounts are available.

We receive information directly from you, automatically through our website, and from providers involved in payments, store hosting, fraud prevention and delivery. You do not have to provide optional information, but without essential order, payment, delivery and personalisation details we cannot fulfil an order.

Why we use information and our lawful bases

• Taking and fulfilling orders: To process payments, prepare personalised products, arrange delivery, send order updates and handle contractual returns or remedies. Our lawful basis is performance of our contract with you, or steps you ask us to take before entering it.
• Customer enquiries: To answer pre-purchase enquiries and support existing orders. We rely on contract where relevant and otherwise our legitimate interest in responding to people who contact our business.
• Gift recipients: To personalise and deliver a purchaser's gift using the recipient details supplied. We rely on our legitimate interest in fulfilling the purchaser's instructions, limited to the information needed for that purpose.
• Legal and accounting records: To maintain records, meet tax and other legal duties, and respond to lawful requests. We rely on compliance with legal obligations.
• Security and disputes: To secure the website, prevent fraud, resolve complaints and establish or defend legal claims. We rely on our legitimate interests in protecting customers and running a secure business, balanced against your rights.
• Marketing: To send optional promotional emails when you subscribe. We rely on your consent. You can unsubscribe through any marketing email or contact us; necessary order and service emails are separate.
• Optional analytics, personalisation and advertising: To understand website use and support relevant shopping experiences and advertising, including the Shopify features described below. We rely on consent where required for these activities or their cookies. Essential website operation and security instead rely on contract or our legitimate interests, as appropriate.

Who receives information

We share relevant information with Shopify for store hosting and commerce services; payment and fraud-prevention providers; production and fulfilment partners; delivery companies; email and IT service providers; and professional advisers or authorities where necessary. For example, a production partner needs the design and personalisation details, and a fulfilment partner or carrier needs delivery details.

We limit disclosures to what is needed for the relevant purpose. Providers acting on our behalf must process information under appropriate contractual protections; some providers, such as payment services, also process information for their own legal and regulatory purposes under their own privacy notices.

Shopify and enhanced services

Our store is hosted by Shopify. Shopify collects and processes information about visits, shopping activity and transactions to provide and improve its services. Information is shared with Shopify and its service providers, which may be located outside the United Kingdom.

Shopify Network Intelligence is enabled for our store. Shopify may combine information from interactions with this store, other merchants and Shopify to provide enhanced services such as personalisation, understanding store and advertising performance, and more relevant advertising, subject to applicable consent and privacy choices. For these enhanced services, and services you use directly such as Shop or Shop Pay, Shopify may act as an independent controller responsible for its own processing.

Read the Shopify Consumer Privacy Policy for details. You can also visit Shopify's privacy portal to exercise rights relating to Shopify's own processing. Contact us for requests about information we control.

Cookies and your choices

Our website uses cookies and similar technologies. Essential technologies support functions such as the shopping basket, checkout, security and remembering privacy choices. Other technologies can support analytics, personalisation and advertising.

Shopify's cookie banner is enabled for visitors in the United Kingdom. Use its controls to accept, reject or manage optional categories. Where consent is required, we use optional technologies only with your consent. You may change your choices through the store's cookie preferences controls when available. If you cannot find those controls, contact us for help. Browser settings also allow cookies to be deleted or blocked, although blocking essential cookies may affect shopping functions.

International transfers

Our providers may process information outside the United Kingdom, including in the European Economic Area, Canada, the United States and other locations where Shopify or its providers operate. When a transfer requires safeguards under UK data protection law, we rely on an applicable UK adequacy regulation or appropriate contractual safeguards, such as approved standard contractual clauses with the UK Addendum or a UK International Data Transfer Agreement, as appropriate.

Shopify's arrangements are described in its Data Processing Addendum. Contact us if you would like information about the safeguards relevant to your information or a copy where available.

How long we keep information

We keep information only for as long as needed for the purpose for which it was collected, taking account of the following criteria:

• Order and accounting records: The time needed to fulfil the order, meet applicable tax and record-keeping duties, and deal with any relevant legal claim or dispute.
• Personalisation and production information: The time needed to produce and deliver the item, resolve errors or replacements, and retain necessary evidence concerning the order. We do not need to keep separate production copies indefinitely.
• Enquiries and complaints: Until the matter is resolved and any relevant follow-up, complaint or legal-claim period has ended.
• Marketing information: While your subscription remains active, with a limited record of an opt-out retained where needed to respect your choice.
• Technical and cookie information: According to its function, the relevant provider's settings and whether it remains necessary for security, consent records or the permitted purpose.

If a legal obligation or an active dispute requires information to be retained longer, we restrict its use to that purpose. Information no longer needed is deleted or anonymised.

Your rights and complaints

Subject to the conditions and exceptions in data protection law, you can ask to access or correct your information, erase it, restrict its use, or receive a portable copy. You can object to processing based on legitimate interests and object to direct marketing at any time. Where we rely on consent, you can withdraw it without affecting the lawfulness of earlier processing.

Email hello@thedoorstepedit.co.uk to exercise your rights. We may need proportionate information to verify your identity. Requests are normally free and we normally respond within one calendar month; if a lawful extension or other exception applies, we will explain it.

If you are unhappy with how we handle your information, contact us using the details above so we can investigate. We will acknowledge a data protection complaint within 30 days of receipt, investigate without undue delay, and keep you informed of the outcome. You also have the right to complain to the UK's Information Commissioner's Office through its data protection complaints service.

Security, children and changes

We use appropriate organisational and technical measures to protect information, but no online service can guarantee absolute security. Keep account credentials confidential and do not email sensitive financial information.

Our shop is intended for adult purchasers and is not directed at children. Contact us if a child has supplied information so we can assess and address it. Personalisation supplied by an adult may include a gift recipient's name, so please avoid unnecessary information about children.

We may update this notice when our practices or legal requirements change. The date above identifies the current version, and we will provide additional notice where required.