Privacy Policy
How we look after your personal information and the rights you have over your data. Written to be readable, and to comply with the UK GDPR and Data Protection Act 2018.
Who we are
Accessories Hub is a UK-based business selling premium and custom-designed phone cases. When we say "we", "us" or "our" in this policy, we mean Accessories Hub. When we say "you", we mean anyone visiting our website or placing an order.
We are the data controller for your personal information. That means we decide how and why it's used, and we are the ones legally responsible for looking after it. You can reach us any time at hello@accessorieshub.co.uk.
What we collect
We only collect what we need to run the business and deliver a good service. There are two ways your data reaches us:
Information you give us directly
- Your name, email address, delivery and billing addresses, and phone number when you buy something or create an account.
- Order details, including any custom designs you upload to our Design Studio.
- Payment details, handled by our payment providers. We never see or store full card numbers.
- Any messages you send us by email, contact form or social media.
Information we collect automatically
- Your device, browser, IP address and referring URL, so we can serve the site properly and prevent abuse.
- How you use the site: pages visited, time spent, features used.
- Cookies and similar technologies (more on those below).
How we use it
We use your data for a small number of clear purposes:
- To process, print and deliver your order, and to keep you updated along the way.
- To answer questions when you contact us.
- To send marketing emails, but only if you have opted in.
- To improve the site, our products, and the service we give you.
- To prevent fraud, protect our systems, and meet our legal obligations.
Legal basis for processing
Under UK GDPR we have to have a lawful reason for using your data. Ours are:
- Contract — to fulfil the order you placed with us.
- Legitimate interests — to run the business, improve our service, and prevent fraud.
- Consent — for marketing emails and non-essential cookies. You can withdraw this at any time.
- Legal obligation — to keep tax records and comply with consumer protection laws.
Marketing communications
We only send marketing emails if you have chosen to receive them. Every marketing email has a one-click unsubscribe link, and you can also change your preferences in your account at any time.
Order updates — confirmations, dispatch notes, delivery updates, refund confirmations — are transactional. You will receive these regardless of your marketing preferences, because they relate to the contract we have with you.
Cookies
We use cookies to remember your basket, keep you signed in, understand how the site is used, and measure the effectiveness of our advertising. When you first visit, you can choose to accept or reject non-essential cookies. Essential cookies (basket, login, security) don't require your consent because the site can't function without them.
You can clear or block cookies at any time through your browser settings.
Third parties who process your data
We share the minimum amount of data required with providers who help us run the business. We don't sell your personal data.
- Payment processors — Stripe and PayPal handle secure card and wallet payments.
- Delivery couriers — Royal Mail, DPD, and Evri receive just your name and address to deliver your order.
- Email service — for transactional and marketing emails.
- Analytics — Google Analytics, with IP anonymisation enabled.
- Hosting — our web hosting provider stores data on servers in the UK and EU.
How long we keep your data
- Order records — six years, as required by UK tax law.
- Account data — until you close your account, plus 12 months to handle any late queries or fraud checks.
- Marketing preferences — until you unsubscribe.
- Support messages — 24 months from resolution.
Your rights
You have the following rights over your personal data:
- Access a copy of what we hold about you.
- Rectify anything that's inaccurate or incomplete.
- Erase your data, subject to legal retention obligations.
- Restrict processing in certain circumstances.
- Object to processing based on legitimate interests.
- Portability — receive your data in a portable format.
- Withdraw consent at any time, which doesn't affect the lawfulness of processing before the withdrawal.
- Complain to the Information Commissioner's Office at ico.org.uk.
To exercise any of these rights, email privacy@accessorieshub.co.uk. We aim to respond within one month.
Security
We protect your data with SSL/TLS encryption in transit, encrypted storage, restricted access, and regular security reviews. Payment card details are handled by PCI-DSS compliant processors and never touch our systems.
Changes to this policy
We may update this policy from time to time. The date at the top always reflects the latest version. If we make material changes we'll flag it with a prominent notice on the site or notify you by email.
Questions about your data?
Get in touch and we'll do what we can to help. We aim to reply within two working days.
