Fires of London

Privacy Policy

This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

We are the data controller responsible for your personal data.

Business name: Fires of London Ltd
Email: info@firesoflondon.com
Address: 128 City Road, London, EC1V 2NX

2. Information We Collect

We collect personal data necessary to process orders and provide our services, including:

  • Name

  • Billing and shipping address

  • Email address and phone number

  • Order and transaction details

  • IP address and device/browser information

Payment Information:
Payments are processed securely via Stripe. We do not store your full card details. Stripe may collect and process payment data in accordance with their own privacy policy.

3. How We Use Your Information (Lawful Basis)

We process your personal data under the following lawful bases:

  • Contract: to process and fulfil your orders, including payment, delivery, and customer support

  • Legal obligation: to comply with tax, accounting, and fraud prevention laws

  • Legitimate interests: to improve our website, prevent fraud, and maintain security

  • Consent: for marketing communications (where applicable)

4. How Payments Are Processed

All payments are handled by Stripe. When you make a purchase:

  • Your payment details are sent directly to Stripe via secure encryption

  • Stripe processes payments and may perform fraud checks

  • We only receive limited information (e.g., transaction status, last 4 digits of card)

For more information, please review Stripe’s privacy policy.

5. Data Retention

We retain personal data only as long as necessary to:

  • Fulfil orders and provide customer support

  • Comply with legal obligations (e.g., tax records typically kept for 6 years in the UK)

6. Data Security

We implement appropriate technical and organisational measures, including:

  • Secure (HTTPS) connections

  • Access controls

  • Payment processing through PCI-DSS compliant providers

7. Sharing of Personal Data

We may share your data with trusted third parties only where necessary, including:

  • Payment processors (e.g., Stripe)

  • Delivery and logistics providers

  • IT and website hosting providers

We do not sell your personal data.

8. International Transfers

Some of our service providers (including Stripe) may process data outside the UK. Where this occurs, we ensure appropriate safeguards such as Standard Contractual Clauses are in place.

9. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

10. Cookies and Tracking

We may use cookies and similar technologies to:

  • Enable essential website functionality (e.g., shopping cart)

  • Improve user experience

  • Analyse website traffic

Where required, we will request your consent before placing non-essential cookies.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for their privacy practices.

12. Refusal to Provide Data

If you choose not to provide required personal data, we may be unable to process your order or provide certain services.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

14. Contact Us

If you have any questions about this policy or your data, please contact:

Email: info@firesoflondon.com
Address: 128 City Road, London, EC1V 2NX

Effective date: 17 March 2026