This Privacy Policy explains how Loft Stilt (“we”, “us”, “our”) collects, uses, stores and protects your personal data when you use our website and services. We comply with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (GDPR) where applicable, and with applicable data protection laws in the United Kingdom and the European Economic Area.

1. Data controller

Loft Stilt is the data controller responsible for your personal data. You can contact us at info@loftstilt.com for any questions about this policy or your data.

2. Personal data we collect

We may collect and process the following categories of personal data:

• Identity and contact data: name, email address, phone number, billing and shipping address, city, postal code.
• Transaction data: order details, payment method (e.g. bank transfer), order history.
• Technical data: IP address, browser type, device information, cookies and similar technologies (see our Cookie Policy).
• Usage data: how you use our website (e.g. pages visited, time spent).

3. How we use your data

We use your personal data for the following purposes, on the basis of contract performance, consent, or our legitimate interests (as permitted by law):

• To process and fulfil your orders (including contacting you to agree final product and shipping costs and to issue your invoice).
• To communicate with you about your order, delivery and customer service.
• To manage your account and provide support.
• To send you service-related communications (e.g. order confirmation, shipping updates).
• To improve our website, products and services.
• To comply with legal and regulatory obligations.

4. Legal basis (UK/EU)

We process your data only where we have a lawful basis: performance of a contract (e.g. fulfilling your order), your consent (e.g. marketing where applicable), compliance with a legal obligation, or our legitimate interests (e.g. fraud prevention, website security), provided your rights do not override those interests.

5. Data sharing and transfers

We may share your data with:

• Carriers and logistics providers for delivery (including international shipment from Turkey to the UK/EEA).
• Payment and banking partners where you choose to pay by bank transfer.
• Service providers who process data on our behalf (e.g. hosting), under strict data processing agreements.

We do not sell your personal data. Where data is transferred outside the UK/EEA, we ensure appropriate safeguards (e.g. adequacy decisions, standard contractual clauses) are in place as required by UK and EU law.

6. Data retention

We retain your data only for as long as necessary for the purposes set out in this policy, including to satisfy legal, accounting or reporting requirements. Order and customer data are typically retained for the period required by applicable law (e.g. tax and consumer rights in the UK/EEA).

7. Your rights (UK/EU)

Under UK GDPR and EU GDPR you have the right to:

• Access your personal data and receive a copy.
• Rectification of inaccurate or incomplete data.
• Erasure (“right to be forgotten”) in certain circumstances.
• Restriction of processing in certain circumstances.
• Data portability where processing is by automated means and based on contract or consent.
• Object to processing based on legitimate interests or for direct marketing.
• Withdraw consent where processing is based on consent (without affecting the lawfulness of processing before withdrawal).
• Lodge a complaint with a supervisory authority (e.g. the ICO in the UK or your local data protection authority in the EEA).

To exercise these rights, contact us at info@loftstilt.com.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction, in line with our legal obligations.

9. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will be revised. We encourage you to review this page periodically. Continued use of our services after changes constitutes acceptance of the updated policy where permitted by law.

10. Contact

For any questions about this Privacy Policy or your personal data, please contact us at info@loftstilt.com or via our Support page.