Last updated: 2 September 2026
1. Who we are
This website is operated by HOMEWORK, the trading name of [full legal name of the business or sole trader].
Our website address is:
https://www.homework-handmade.com
For the purposes of UK data protection law, [full legal name] is the data controller responsible for the personal information described in this policy.
Business address: [full UK business or correspondence address]
Email: [privacy/contact email address]
Telephone: [telephone number, if applicable]
2. Information we collect
Depending on how you use our website, we may collect the following information.
Information you provide to us
This may include:
- Your name.
- Billing and delivery addresses.
- Email address and telephone number.
- Account username and password.
- Order, delivery, return and refund information.
- Messages and enquiries sent to us.
- Product reviews, comments or other content you submit.
- Marketing preferences.
- Photographs or other files that you choose to upload.
Payment information
Payments are processed by our payment service provider, [insert provider, for example Stripe or PayPal].
Depending on the payment method used, your payment provider may collect your card, bank or account details directly. We do not normally receive or store your complete payment card number.
Please refer to the payment provider’s own privacy policy for further information about how it processes your personal information.
Information collected automatically
When you visit the website, we and our service providers may automatically collect:
- Your IP address.
- Browser type and version.
- Device and operating-system information.
- Pages viewed and actions taken on the website.
- Date, time and approximate location of access.
- Referring website or source.
- Cookie identifiers and similar technical information.
- Security, error and server-log information.
3. How we use your information
We use personal information only where we have a lawful basis under UK data protection law.
To process and deliver orders
We use your name, contact details, delivery information and order details to:
- Process payments.
- Confirm and fulfil your order.
- Arrange delivery or collection.
- Provide order updates.
- Manage cancellations, returns, exchanges and refunds.
- Respond to questions concerning your purchase.
Our lawful basis is that the processing is necessary to perform our contract with you or to take steps at your request before entering into a contract.
To operate customer accounts
If you create an account, we use your information to provide account functions, display previous orders, save delivery information and help secure your account.
Our lawful basis is performance of our contract with you and our legitimate interest in providing and protecting customer-account services.
To provide customer service
We use messages, contact details and relevant order information to answer enquiries, resolve complaints and provide after-sales support.
Our lawful basis may be performance of our contract, compliance with a legal obligation or our legitimate interest in providing effective customer service.
To meet legal and financial obligations
We may use and retain order, payment, refund and correspondence records for accounting, tax, consumer-protection, product-safety and other legal purposes.
Our lawful basis is compliance with our legal obligations.
To protect the website and our business
We may process technical, account and transaction information to:
- Keep the website secure.
- Detect or prevent fraud and misuse.
- Troubleshoot technical problems.
- Enforce our terms.
- Establish, exercise or defend legal claims.
Our lawful basis is compliance with legal obligations and our legitimate interests in protecting our customers, website and business.
Marketing communications
We may send marketing emails only where you have consented or where applicable law otherwise permits us to do so.
You can unsubscribe at any time by:
- Selecting the unsubscribe link in a marketing email; or
- Contacting us at [email address].
Withdrawing from marketing will not stop service messages relating to an existing order, account, return or customer-service request.
Our lawful basis is consent or, where legally permitted, our legitimate interest in communicating with existing customers about relevant products. We also comply with the Privacy and Electronic Communications Regulations.
Analytics and website improvement
Where permitted and, when required, after obtaining your consent, we may use analytics information to understand how visitors use the website and improve its content, performance and design.
Our lawful basis is your consent where information is collected through non-essential cookies or similar technologies.
4. Product reviews, comments and uploaded media
If you leave a product review or comment, we may collect the information entered in the form together with your IP address, browser information and submission time. We use this information to publish and manage reviews, prevent spam and investigate misuse.
Information that you deliberately include in a public review or comment may be visible to anyone visiting the website. Please do not include sensitive or unnecessary personal information.
If the website allows image uploads, you should remove embedded location information, including EXIF GPS data, before uploading. Visitors may be able to download publicly displayed images and extract embedded information.
Delete this section if reviews, comments and customer uploads are not enabled.
5. Cookies and similar technologies
We use cookies and similar technologies to operate the website and, where enabled, remember preferences, measure website use and support marketing.
Cookie categories may include:
- Strictly necessary cookies: Required for functions such as the shopping basket, checkout, security, account login and cookie preferences.
- Preference cookies: Remember choices such as display, language or account settings.
- Analytics cookies: Help us understand how visitors use the website.
- Marketing cookies: May be used to measure advertising or show relevant advertising.
Strictly necessary cookies do not normally require consent. Where consent is required, analytics, advertising and other non-essential technologies will not be activated until you have made a choice.
You can accept, reject or change your cookie choices through [insert Cookie Settings link or button].
Your browser may also allow you to block or delete cookies. Blocking strictly necessary cookies may prevent the basket, checkout, account or other website features from working correctly.
For full details of the cookies currently used, their providers, purposes and expiry periods, please see our [Cookie Policy].
6. Embedded content and third-party links
Pages on this website may include embedded content such as videos, maps, images, social-media posts or payment functions.
Embedded content may allow the relevant third party to collect information about your device and your interaction with that content. If you are logged in to the third party’s service, it may associate the interaction with your account.
Third-party websites and services operate under their own privacy policies. We are not responsible for the privacy practices of websites that we do not control.
7. Who we share personal information with
Where necessary, we may share personal information with:
- Website-hosting and technical-support providers: [insert provider].
- Payment processors: [insert provider].
- Delivery and postal providers: [insert Royal Mail, courier or other provider].
- Email and customer-communication providers: [insert provider].
- Accounting, tax and professional advisers.
- Fraud-prevention and website-security providers.
- Analytics or advertising providers that you have consented to: [insert provider or state “none”].
- Government departments, regulators, law-enforcement bodies or courts where disclosure is legally required.
- A purchaser or adviser involved in a genuine sale, restructuring or transfer of the business.
Service providers may use personal information only as permitted by their contracts with us and applicable law.
We do not sell personal information.
8. International transfers
Some service providers may process or store personal information outside the United Kingdom.
Where this constitutes a restricted international transfer, we use a legally recognised safeguard. This may include:
- A UK adequacy regulation.
- The UK International Data Transfer Agreement.
- The UK Addendum to approved contractual clauses.
- Another safeguard permitted by UK data protection law.
You may contact us for more information about the safeguards used for a particular service provider.
9. How long we keep personal information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, security and dispute-resolution requirements.
Our usual retention approach is:
- Order, payment, invoice and tax records: Normally up to six years after the end of the relevant financial year, or longer where required by law.
- Customer accounts: For as long as the account remains active and for a reasonable period afterwards, unless deletion is requested and we have no legal reason to retain the information.
- Customer-service correspondence: For as long as required to resolve the matter and manage possible complaints or legal claims.
- Marketing records: Until you unsubscribe or withdraw consent. We may retain limited suppression information to ensure that we continue to respect your request.
- Website security and server logs: [insert actual period, for example 30 or 90 days], unless required for longer to investigate a security incident.
- Reviews and public comments: For as long as the review or comment remains published, unless removal is requested and no legal reason requires retention.
- Cookie information: According to the lifetime stated in our Cookie Policy.
We may retain information for longer if required by law, a regulator, a court, an unresolved dispute or the establishment, exercise or defence of legal claims.
10. Your data protection rights
Depending on the circumstances and the lawful basis used, you may have the right to:
- Ask for access to your personal information.
- Ask us to correct inaccurate or incomplete information.
- Ask us to delete your information.
- Ask us to restrict how your information is used.
- Object to particular uses of your information.
- Receive certain information in a portable format.
- Withdraw consent at any time where processing is based on consent.
- Complain about how we handle your personal information.
These rights are not absolute and may be subject to legal exemptions.
Your right to object
You have the right to object at any time to the use of your personal information for direct marketing.
You may also object to processing based on our legitimate interests. We will stop that processing unless we have compelling legitimate grounds to continue or need the information for legal claims.
To exercise a right, contact [privacy email address]. We may ask for information needed to confirm your identity. We will normally respond within one month, subject to any extension permitted by law.
11. Complaints
If you have concerns about how we use your personal information, please contact us first at [privacy email address] so that we can investigate.
You also have the right to complain to the UK Information Commissioner’s Office:
Information Commissioner’s Office
https://ico.org.uk/make-a-complaint/
You do not have to contact us before making a complaint to the ICO.
12. Security
We use appropriate technical and organisational measures designed to protect personal information against accidental loss, unauthorised access, alteration, disclosure or destruction.
However, no internet transmission or storage system can be guaranteed to be completely secure. Customers are responsible for keeping their account password confidential and should contact us if they believe that their account has been compromised.
13. Children’s information
Our website is not intended for children under 13, and we do not knowingly collect personal information directly from children under 13.
If you believe that a child has provided personal information to us, please contact [privacy email address].
14. Automated decision-making
We do not use personal information to make solely automated decisions that have legal or similarly significant effects on you.
Payment and fraud-prevention providers may carry out automated security or fraud checks under their own privacy policies.
15. Changes to this policy
We may update this Privacy Policy when our services, providers or legal obligations change.
The latest version will be published on this page and identified by the “Last updated” date above. Where a change materially affects how we use personal information, we will provide additional notice where appropriate.