Privacy Policy
Last updated: January 2024
Introduction
Neoplastic Hub Ltd ("we", "us", "our") is committed to protecting the privacy of everyone who interacts with our business. This policy explains how we handle personal information when you visit our premises, use our website, purchase products, or participate in our workshops and events.
We operate as a craft supplies retailer and workshop provider based in Leicester, United Kingdom. Our company registration number is 07234891, and our registered address is Unit 14-16 Makers Yard, Thorneycroft Lane, Leicester, LE3 5GH.
Information We Collect
The personal information we gather depends on how you interact with us:
When You Make a Purchase
To process orders, we collect your name, delivery address, billing address, email address, and payment details. Payment card information is processed securely through our payment provider and is never stored on our systems.
When You Book a Workshop
Workshop bookings require your name, email address, and sometimes additional information relevant to the session—such as dietary requirements for events with refreshments, or accessibility needs so we can make appropriate arrangements.
When You Contact Us
Enquiries by email or in person may involve you sharing your name, contact details, and any other information you choose to provide in your message.
When You Browse Our Website
Our website uses cookies and similar technologies that collect technical data such as your IP address, browser type, pages visited, and time spent on site. See our separate Cookies Policy for full details.
How We Use Your Information
We use personal data for the following purposes:
- Processing and fulfilling orders you place with us
- Managing workshop bookings and communicating session details
- Responding to enquiries and providing customer support
- Sending order confirmations, receipts, and delivery updates
- Administering your account if you create one
- Improving our website, products, and services
- Complying with legal obligations such as tax and accounting requirements
With your consent, we may also send occasional updates about new workshops, products, or events that might interest you. You can withdraw this consent at any time.
Legal Basis for Processing
Under UK data protection law, we need a valid reason to use your personal information. Our processing activities rely on the following legal bases:
- Contract: Processing necessary to fulfil orders or workshop bookings
- Legitimate interests: Improving our services, preventing fraud, and administering our business
- Consent: Marketing communications where you have opted in
- Legal obligation: Retaining records for tax and regulatory purposes
Sharing Your Information
We share personal data only when necessary and with appropriate safeguards:
- Delivery partners: To fulfil product orders, we share your name and address with courier services
- Payment processors: Card payments are handled by authorised payment service providers
- Professional advisers: Accountants and legal professionals may access relevant records
- Authorities: Where required by law, we may disclose information to regulatory bodies
We do not sell personal information to third parties, nor do we share it for marketing purposes without your explicit consent.
Data Retention
We keep personal information only as long as necessary for the purposes described in this policy:
- Order records: 7 years (for accounting and tax purposes)
- Workshop booking records: 3 years after the event
- Marketing preferences: Until you unsubscribe or withdraw consent
- Website analytics: 26 months (standard retention period)
- General enquiries: 2 years unless an ongoing relationship exists
Your Rights
Under UK data protection legislation, you have several rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you
- Rectification: Ask us to correct inaccurate information
- Erasure: Request deletion of your data in certain circumstances
- Restriction: Ask us to limit how we use your information
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
To exercise any of these rights, contact us at [email protected]. We will respond within one month.
Data Security
We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections for data transmission, secure storage systems, and restricted access to personal data within our organisation.
International Transfers
We primarily store and process data within the United Kingdom. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office.
Changes to This Policy
We may update this privacy policy periodically. Significant changes will be communicated through our website, and where appropriate, by email. The date at the top of this page indicates when the policy was last revised.
Contact Us
For questions about this policy or our data practices, please contact:
Data Protection Enquiries
Neoplastic Hub Ltd
Unit 14-16 Makers Yard
Thorneycroft Lane
Leicester, LE3 5GH
Email: [email protected]
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. Visit ico.org.uk for more information.