Privacy Policy

Privacy Policy

Last updated: 31 July 2026

Who we are

This website is operated by JG Smith, a sole trader trading as The Loft UK.

Website: https://theloftuk.co.uk
Email: hello@theloftuk.co.uk
Postal address: 6 Lufton Close, The Rings, TS17 5LR, United Kingdom

JG Smith, trading as The Loft UK, is the data controller responsible for the personal information described in this privacy policy.

Information we collect

When you browse our website, contact us, create an account or place an order, we may collect:

  • your name;
  • your billing and delivery addresses;
  • your email address and telephone number;
  • information about the products you order;
  • payment, refund and delivery information;
  • your order history;
  • account information, where you create an account;
  • messages and customer-service correspondence;
  • marketplace order references;
  • your IP address, browser type and device information;
  • information about how you use our website;
  • cookie preferences and information collected through website cookies.

We do not normally receive or store your complete payment-card details. Payments are processed securely by the payment provider selected during checkout.

Information received from marketplaces

Where you place an order through eBay, Etsy or another marketplace, we may receive information from that marketplace rather than directly from you.

This may include:

  • your name;
  • your delivery address;
  • your contact details;
  • your marketplace username;
  • your order reference;
  • details of the items purchased;
  • payment and refund status;
  • delivery and fulfilment information.

The relevant marketplace is separately responsible for explaining how it collects and uses information on its own platform.

How we use your information

We use personal information to:

  • process and deliver orders;
  • take payment and issue refunds;
  • communicate with you about an order;
  • respond to questions and customer-service enquiries;
  • maintain customer accounts;
  • prevent fraud and protect our website and business;
  • maintain financial, tax, stock and order records;
  • manage our eBay, Etsy and website product listings;
  • manage deliveries and returns;
  • comply with legal and regulatory obligations;
  • improve our website, products and services;
  • send marketing communications where you have agreed to receive them.

Our lawful bases

We rely on the following lawful bases when using personal information:

Contract

We use personal information where it is necessary to enter into or fulfil a contract with you. This includes processing an order, taking payment, arranging delivery, dealing with returns and providing customer service.

Legal obligation

We use and retain certain information where this is necessary to comply with legal obligations, including tax, accounting, fraud-prevention and regulatory requirements.

Legitimate interests

We may use information where it is reasonably necessary for our legitimate interests in operating and protecting the business. This includes:

  • managing stock and product listings;
  • preventing fraud;
  • maintaining the security of our website and systems;
  • responding to customer enquiries;
  • improving our products and services;
  • keeping appropriate business records.

We consider whether these interests could unfairly affect your rights before relying on legitimate interests.

Consent

We rely on consent for activities such as optional marketing communications and non-essential cookies where consent is required.

You may withdraw your consent at any time by contacting us or changing your cookie preferences.

Information needed to complete an order

Certain information, including your name, delivery address, contact details and payment information, is required so that we can process and fulfil your order.

If you do not provide this information, we may be unable to accept, process or deliver your order.

Marketplace and GrantStock integration

We use our internal GrantStock inventory-management system to help manage stock, orders, deliveries and product listings.

GrantStock may securely receive, process or store information from our eBay, Etsy and website sales channels, including:

  • marketplace order references;
  • product SKUs and listing identifiers;
  • product names, prices and quantities;
  • order, delivery and fulfilment status;
  • customer and delivery information needed to process an order.

GrantStock may also update marketplace stock quantities to reduce the risk of products being oversold.

Access to marketplace accounts is authorised securely through the relevant marketplace. Marketplace credentials and access tokens are restricted and are not sold to advertisers.

Who we share information with

Where necessary, we may share personal information with:

  • website-hosting and ecommerce providers;
  • payment processors;
  • Royal Mail and other delivery companies;
  • eBay, Etsy and other marketplaces used to complete a transaction;
  • IT, inventory-management, website-support and security providers;
  • accountants and professional advisers;
  • government departments, regulators and tax authorities;
  • police, courts or public authorities where disclosure is legally required.

We only share information that is reasonably necessary for the relevant service or purpose.

International transfers

Some service providers and marketplaces may process information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate legal transfer mechanism and suitable safeguards are in place.

How long we retain information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

Business, order, invoice, payment and tax records will normally be retained for at least five years after the 31 January Self Assessment submission deadline for the relevant tax year. Records may be retained for longer where required by law, an HMRC enquiry, an investigation, a dispute or a legal claim.

Customer-service correspondence, account information and other records are reviewed periodically and deleted or anonymised when they are no longer required.

How we protect your information

We take reasonable technical and organisational measures to protect personal information against:

  • unauthorised access;
  • accidental loss;
  • misuse;
  • alteration;
  • disclosure;
  • destruction.

Access to customer and marketplace information is restricted to people and systems that require it for legitimate business purposes.

No method of transmitting or storing information can be guaranteed to be completely secure.

Your data-protection rights

Depending on the circumstances, you may have the right to:

  • request access to the personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete personal information;
  • ask us to restrict how information is used;
  • object to certain uses of your information;
  • request information in a portable format;
  • withdraw consent where processing relies on consent;
  • complain about how your information has been handled.

These rights may be subject to legal conditions or exceptions. For example, we may need to retain information to comply with tax or accounting obligations.

The ICO states that privacy notices should explain people’s information rights, lawful bases, sharing arrangements and how to make a complaint.

Marketing communications

We will only send electronic marketing communications where we have an appropriate lawful basis to do so.

You can unsubscribe at any time by:

We may still contact you about an existing order, delivery, refund or customer-service enquiry.

Cookies

Our website uses cookies and similar technologies.

Some cookies are necessary for functions such as:

  • keeping products in your basket;
  • completing checkout;
  • account login;
  • security;
  • remembering essential website settings.

We may also use optional analytics or marketing cookies. Where consent is required, these cookies should not be placed until you have accepted them.

You can manage optional cookies through the cookie controls displayed on our website and through your browser settings.

Visitors must be told about cookies and their purpose, and the privacy information should be clear and accessible.

Links and embedded content

Our website may contain links to, or embedded content from, other websites.

Those websites may collect information, use cookies or track interactions under their own privacy policies. We are not responsible for the privacy practices of other websites.

Changes to this privacy policy

We may update this privacy policy where our services, systems or legal obligations change.

The latest version will always be published on this page. The date at the top of the policy shows when it was last updated.

Contact us

For questions about this privacy policy, to exercise your data-protection rights or to raise a concern, contact:

JG Smith trading as The Loft UK
6 Lufton Close
The Rings
TS17 5LR
United Kingdom

Email: hello@theloftuk.co.uk

We may need to ask for information to confirm your identity before responding to a data-protection request.

Complaints

Please contact us first so that we have an opportunity to resolve your concern.

You also have the right to complain to the UK data-protection regulator:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: https://ico.org.uk