This store requires javascript to be enabled for some features to work correctly.

0

Privacy & Cookies

Privacy & Cookie Policy

Last updated: 6 November 2026

Who we are

This website, www.truefittandhill.co.uk, is run by Truefitt & Hill (Gentlemen’s Grooming) Limited (“T&H”, “we” or “us”). We are a company registered in England and Wales under company number 02817993. Our registered office is 71 St James’s Street, London, SW1A 1PH, United Kingdom.

We are the data controller for the personal data described in this policy. We are registered with the Information Commissioner’s Office (ICO) under registration number A8354891.

This policy explains what personal data we collect, why we use it, who we share it with, how long we keep it and the rights you have. It applies when you use our website, buy from us, book an appointment at our barbershop or contact us. It should be read with our terms and conditions.

Information we collect

Information you give us. This includes your name, billing and delivery addresses, email address, phone number and order details. It also includes anything you tell us when you create an account, sign up to our emails or texts, book an appointment, enter a competition or survey, leave a review or contact us.

Information we collect automatically. When you visit our website we collect technical information such as your IP address, browser and device type, operating system and time zone. We also collect information about your visit, such as the pages you view, products you search for, how long you stay and how you reached us. Some of this is collected through cookies and similar technologies, as explained in the Cookies section below.

Information from other sources. We receive information from our booking provider when you book a barbershop appointment, from payment providers when you pay, and from delivery companies about the status of your order.

We do not collect special category data (such as information about your health, ethnicity, religion or sexual orientation) or information about criminal convictions.

How we use your information and our legal basis

We only use your personal data where the law allows us to. We rely on the following legal bases:

  • Contract: to process and deliver your orders, take payment, manage returns, run your account, manage barbershop bookings and provide customer service.
  • Legal obligation: to keep tax and accounting records and to comply with other laws that apply to us.
  • Legitimate interests: to run, secure and improve our website, prevent fraud, understand how customers use our services and manage our business. We only rely on this where our interests are not overridden by your rights.
  • Consent: to send you marketing emails and text messages (except where the soft opt-in below applies) and to use non-essential cookies. You can withdraw your consent at any time.

Marketing

We will only send you marketing emails or text messages if you have agreed to receive them. If you have bought from us before and did not opt out at the time, we may also email you about similar products and services of our own. This is known as the “soft opt-in”.

You can stop marketing at any time. Use the unsubscribe link in any email, reply STOP to any text message, update your preferences in your account, or contact us using the details below. We will then add your email address or phone number to a suppression list, so that we do not contact you again.

If you accept marketing cookies, advertising platforms such as Google, Meta, Microsoft and TikTok may show you our adverts on other websites and apps, based on your visits to our website.

We do not sell your personal data.

Payments

Payments on our website are processed by Shopify, our e-commerce platform, and by Klarna if you choose a pay-later option. Card details are encrypted and handled in line with the Payment Card Industry Data Security Standard (PCI-DSS). We do not store your full card details.

Who we share your information with

We share personal data with service providers who help us run our business. They may only use it to provide their services to us and must keep it secure. The main service providers we currently use are:

  • Shopify: our e-commerce platform and payment processing
  • Klarna: pay-later payment options at checkout
  • Klaviyo: email and SMS marketing
  • Booksy: barbershop appointment bookings
  • Google: website analytics and advertising
  • Meta (Facebook and Instagram): advertising
  • Microsoft Advertising (Bing): advertising
  • TikTok: advertising
  • Hotjar: website usage analysis and session recording

We also share your name, address and contact details with delivery companies so they can deliver your order.

We may also disclose personal data:

  • to our professional advisers, such as lawyers and accountants;
  • where we must do so by law, or to protect the rights, property or safety of T&H, our customers or others, including to prevent fraud;
  • to a buyer or prospective buyer if we sell or transfer all or part of our business.

International transfers

Some of our service providers store or access personal data outside the UK, including in the European Economic Area and the United States. Where this happens, we make sure the transfer is protected. We rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework, where the provider is certified) or on the ICO’s International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses. Please contact us if you would like more information.

How long we keep your information

  • Order, payment and other transaction records: six years from the end of the financial year in which the order was placed, to meet tax and accounting rules.
  • Account details: for as long as your account is open.
  • Marketing data: until you unsubscribe or withdraw consent. We then keep your email address or phone number on a suppression list so that we do not contact you again.
  • Customer service correspondence: for as long as needed to deal with your query and any follow-up.
  • Cookie data: for the periods set out in our cookie banner.

After these periods we delete or anonymise your data.

Security

We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. No method of sending data over the internet is completely secure, so we cannot guarantee the security of data you send to us. Please keep your account password private.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data we hold about you;
  • ask us to correct data that is wrong or incomplete;
  • ask us to delete your data;
  • ask us to restrict how we use your data;
  • ask us to transfer your data to you or another organisation;
  • object to our use of your data where we rely on legitimate interests;
  • object to direct marketing at any time;
  • withdraw your consent at any time, where we rely on consent.

Some of these rights only apply in certain circumstances. To use any of them, please contact us using the details below. We will usually respond within one month and will not normally charge a fee. We may ask you to confirm your identity first.

Cookies

Cookies are small text files placed on your device when you visit a website. We use them to make our website work, to understand how it is used and, with your consent, for advertising.

When you first visit our website, a cookie banner asks for your choice. We only set strictly necessary cookies until you make a choice. Analytics and marketing cookies are only set if you accept them. You can change your choice at any time through the cookie settings on our website, or by deleting cookies in your browser. You can find out how to manage cookies in your browser at www.allaboutcookies.org.

Strictly necessary cookies

These are needed for the website to work, for example to keep items in your basket, let you sign in and complete checkout. They do not need your consent. They are set by Shopify, our e-commerce platform, and include:

  • _secure_session_id | Shopify | Keeps your session as you move through the store
  • cart, cart_sig, cart_ts | Shopify | Keep your basket working
  • checkout_token, secret | Shopify | Used during checkout
  • secure_customer_sig, storefront_digest | Shopify | Used when you sign in to your account
  • _ab | Shopify | Used in connection with access to the store admin

Analytics cookies (with your consent)

These help us understand how visitors use our website, so we can improve it.

  • _landing_page, _orig_referrer, _s, _shopify_s, _shopify_y, _y and similar | Shopify | Store analytics
  • Google Analytics | Google | Measures how visitors use our website. Privacy policy
  • Hotjar | Hotjar | Analyses how visitors use our pages, including session recordings. Privacy policy

Marketing cookies (with your consent)

These are used to show you relevant adverts on other websites and to measure how well our advertising works.

Social media

We have pages on social media platforms. If you interact with us there, the platform’s own privacy policy also applies:

Children

Our website is not intended for children under 13 and we do not knowingly collect their personal data.

Complaints

If you have a concern about how we use your personal data, please contact us first and we will try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.

Contact us

If you have any questions about this policy or want to use your rights, please contact us:

  • By post: Truefitt & Hill (Gentlemen’s Grooming) Limited, 71 St James’s Street, London, SW1A 1PH, United Kingdom
  • By email: info@truefittandhill.co.uk