Privacy policy
We collect what we need to send you a light fitting and answer you if something goes wrong. Nothing more. We do not sell your data, and we do not share it with anyone who is not doing a job for us.
1. Who is responsible for your data
The data controller is Ned Fenwick, trading as Flint, a sole trader established in the United Kingdom.
Shilstone, Modbury, Ivybridge, Devon, PL21 0TW, United Kingdom
hello@flintlighting.com
This policy is written under the UK GDPR and the Data Protection Act 2018.
2. What we collect, and why
| What | Why | Lawful basis |
|---|---|---|
| Name, delivery and billing address, email, phone number if you give one | To take, pack, send and support your order | Performance of a contract |
| Order history and correspondence | To handle returns, refunds, guarantee claims and questions | Performance of a contract; legal obligation |
| Payment confirmation — the result, the last four digits and the card type | To reconcile and refund orders | Performance of a contract |
| Email address, if you subscribe | To send you our occasional email | Consent |
| Device, browser and pages viewed | To keep the shop working and understand what people look at | Consent, for anything beyond what is strictly necessary |
We never see your full card number. Card details are entered into Shopify's checkout and handled by the payment provider. They do not reach us and we could not retrieve them if we wanted to.
3. Who we share it with
Only those who need it to do a job for us, and only as much as that job requires:
- Shopify — the platform this shop runs on, which hosts the site and processes orders.
- Payment providers — to take payment and issue refunds.
- Our fulfilment and order-management software, and the warehouse and carriers who pick and deliver your parcel — they receive your name, delivery address and contact details so the parcel can reach you.
- Tracking services — to turn a carrier reference into a status you can read.
- Email and analytics providers — for order emails, our newsletter if you subscribe, and site statistics.
We do not sell your personal data. We do not pass it to anyone for their own marketing.
4. Transfers outside the UK
Some of these providers operate outside the United Kingdom. Where personal data is transferred abroad we rely on UK adequacy regulations, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, so that your data keeps the protection UK law gives it.
5. How long we keep it
- Order and transaction records — six years from the end of the tax year they fall in, which is what HMRC requires.
- Customer service correspondence — two years from the last message.
- Newsletter subscriptions — until you unsubscribe, and we remove the record shortly afterwards.
- Analytics — as set by the provider, typically 14 months.
6. Cookies
Some cookies are strictly necessary: they keep your basket, keep you signed in and keep checkout secure. These are set without consent because the shop cannot function without them.
Anything else — analytics and any advertising measurement — is set only if you agree, through the banner shown on your first visit. You can change your mind at any time through the cookie preferences link, or by clearing cookies in your browser.
7. Marketing
We only email marketing to people who have asked for it, or who have bought from us and were offered the chance to opt out at the time. Every email carries an unsubscribe link that works immediately. Unsubscribing has no effect on the emails we must send about an order you have placed.
8. Your rights
Under UK data protection law you have the right to:
- ask what we hold about you, and get a copy;
- have inaccurate data corrected;
- have data erased, where we have no continuing reason to keep it;
- restrict or object to how we use it, including objecting to direct marketing at any time;
- receive data you gave us in a portable format;
- withdraw consent at any time, where consent is what we relied on.
Write to hello@flintlighting.com and we will respond within one month. There is no charge.
9. Complaints
If you are unhappy with how we have handled your data, please tell us first — we would rather fix it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113.
10. Children
This shop is not intended for children, and we do not knowingly collect data about anyone under 16. If you believe we hold data about a child, tell us and we will delete it.
11. Changes
If we change this policy we will update the date below, and where the change is significant we will say so on the site.
Last updated 9 September 2026.