Privacy policy

Last updated: September 11, 2026

Hale & Hale is a trading name of MD Furniture Ltd, a company registered in England and Wales under company number 11580819. Our registered office is 120 Milton Street, Palfrey, Walsall, England, WS1 4LN, United Kingdom. MD Furniture Ltd (“Hale & Hale”, “we”, “us” or “our”) operates this online store and the related Services.

This Privacy Policy explains how we collect, use, disclose and protect personal information when you visit or use the Services, buy or enquire about a product, create or use a customer account, subscribe to marketing, contact us, or otherwise interact with us. MD FURNITURE LTD is the controller of the personal information described in this policy, except where another organisation is identified as a separate controller.

Please read this policy carefully. If there is a conflict between this Privacy Policy and our Terms of Service about the collection, use or disclosure of personal information, this Privacy Policy applies.

Personal information we collect

The information we collect depends on how you interact with us and may include:

Identity and contact information, such as your name, email address, telephone number, billing address and delivery address.
Order and transaction information, such as products viewed, placed in your basket or purchased, order history, delivery details, returns, refunds, cancellations and payment status.
Payment information. Payments are processed by Shopify and the payment providers made available at checkout. We generally receive confirmation and transaction details rather than your complete payment-card information.
Customer account information, such as account identifiers, order history, saved details, preferences and settings. Our Shopify customer accounts use passwordless authentication, so we do not maintain a conventional customer password for the Services.
Communications, including information in emails, telephone calls, support enquiries, reviews, feedback, surveys and other correspondence with us.
Marketing and preference information, such as newsletter choices, cookie choices and your interests inferred from interactions with the Services, where permitted by law.
Device, technical and usage information, such as IP address, browser and device type, operating system, unique identifiers, referring and exit pages, pages or products viewed, interactions with the Services, and approximate location derived from your IP address.
Fraud-prevention and security information, such as risk indicators, authentication results and information needed to investigate suspected misuse or fraud.

We do not intentionally collect more information than we need for the purposes described below. Please do not send us special-category or other highly sensitive personal information unless we specifically request it and have a lawful reason to process it.

How we collect personal information

We collect personal information:

Directly from you, for example when you browse or purchase products, create or use an account, complete a form, subscribe to marketing, request a return, or contact us.
Automatically when you use the Services, through cookies, pixels, logs and similar technologies, subject to your consent choices where required.
From Shopify and our service providers, including providers of ecommerce hosting, checkout, payments, delivery, customer support, fraud prevention, analytics and marketing services.
From other lawful sources, such as delivery partners, payment providers, advertising partners and publicly available sources, where relevant to the Services and permitted by law.

How and why we use personal information

Under UK data protection law, we must have a lawful basis for each use of personal information. Depending on the circumstances, we rely on:

Contract where processing is necessary to take steps at your request or to fulfil our contract with you.
Legal obligation where we must process information to comply with the law, including tax, accounting, consumer-protection and regulatory requirements.
Legitimate interests where processing is necessary for our or another party's legitimate business interests and those interests are not overridden by your rights and freedoms.
Consent where you have made an informed choice, including for certain marketing or non-essential cookies. You may withdraw consent at any time.

We use personal information for the following purposes:

Providing the Services and fulfilling orders, including processing checkout and payments, confirming orders, arranging delivery, managing accounts, handling returns and refunds, responding to enquiries and providing customer support. We generally rely on contract and, where applicable, legal obligations.
Operating and improving our store, including maintaining the website, remembering preferences, understanding performance, troubleshooting, developing products and services, and improving the shopping experience. We rely on legitimate interests and, for non-essential cookies or similar technologies, consent where required.
Marketing and advertising, including sending communications you have requested and measuring or personalising advertising. We rely on consent where required and, in limited cases permitted by law, our legitimate interest in promoting relevant products to existing customers. You can opt out at any time.
Security and fraud prevention, including authenticating account access, protecting checkout, detecting suspicious activity, preventing misuse, and defending our systems, customers and legal rights. We rely on legitimate interests and legal obligations.
Legal, regulatory and business administration, including keeping required records, responding to lawful requests, enforcing our terms, resolving disputes, obtaining professional advice and managing a sale, reorganisation or transfer of our business. We rely on legal obligations and legitimate interests.

Where we need personal information to enter into or perform a contract and you do not provide it, we may be unable to accept or fulfil an order or provide the requested Service.

Cookies and similar technologies

We and our partners, including Shopify, use cookies and similar technologies to operate checkout and other essential features, remember choices, protect the Services, understand performance and, where permitted, provide analytics, personalisation and advertising.

Strictly necessary technologies may be used without consent where the law permits. We ask for consent before using non-essential cookies or similar technologies where required. You can accept, reject or change non-essential cookie choices using the cookie banner or the Cookie preferences link available through the store. Withdrawing consent does not affect processing that took place before withdrawal, but some optional features may work differently.

Your browser may also let you block or delete cookies. Browser-level blocking can affect essential store, basket, checkout or account functions. Third-party services used by the store may set their own cookies and process information under their own privacy notices.

Shopify and the Services

The Services are hosted and powered by Shopify. Shopify processes personal information about your access to and use of the Services so that it can provide and improve ecommerce, checkout, security, payment and related services. Information you submit through the Services is transmitted to Shopify and may be shared with service providers in countries other than the country in which you live.

We use Shopify enhanced features that combine information from interactions with our store with information from interactions with Shopify and other merchants. Shopify uses this information to provide enhanced services that help protect, grow and improve our business, including personalisation, analytics and advertising features. For this processing, Shopify is responsible for responding to requests concerning its use of personal information for these enhanced services.

For more information about Shopify's processing and the privacy rights available to you in relation to Shopify, please read the Shopify Consumer Privacy Policy and visit the Shopify Privacy Portal.

Who we disclose personal information to

We disclose personal information only where reasonably necessary for the purposes described in this policy, including to:

Shopify, which provides the ecommerce platform, hosting, checkout, customer-account, security and related services.
Payment and fraud-prevention providers to authorise payments, process refunds, prevent fraud and manage disputes.
Warehousing, delivery and returns providers to fulfil orders, arrange delivery, provide tracking and process returns.
Technology and support providers, including providers of cloud hosting, IT support, communications, customer service, website functionality, data storage and security.
Analytics, marketing and advertising providers where their services are enabled and subject to your consent choices where required.
Professional advisers, such as lawyers, accountants, insurers and auditors.
Public authorities, courts and law-enforcement bodies where disclosure is required or permitted by law or is necessary to protect rights, safety and security.
Parties to a business transaction, such as a prospective buyer, seller or adviser in connection with a merger, reorganisation, financing, sale or insolvency, subject to appropriate confidentiality and data-protection measures.
Other parties at your direction or with your consent.

Our service providers are required to protect personal information and may use it only for the agreed services, unless they process it as a separate controller and provide their own privacy notice. We do not sell customer personal information for money.

International transfers

Shopify and some of our other service providers operate internationally. Personal information may therefore be transferred to, stored in or accessed from countries outside the United Kingdom. Where the destination is not recognised by the UK as providing an adequate level of protection, we use an approved safeguard where required, such as the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism. You may contact us for more information about the safeguards relevant to your information.

How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing accounts and Services, fulfilling orders, handling complaints and disputes, maintaining security, and meeting tax, accounting, legal and regulatory obligations. Retention periods vary according to the type of information, our relationship with you, legal limitation periods, and whether the information is needed to establish, exercise or defend legal claims. We securely delete or anonymise information when it is no longer required.

Security

We use reasonable technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, disclosure or access. These measures include access controls and the security features provided by Shopify and relevant service providers. No system or method of transmission is completely secure, so please avoid sending sensitive or confidential information through unsecured channels.

Children

The Services are intended for adults and are not directed to children. We do not knowingly collect personal information from children who are not old enough to provide it lawfully. If you believe a child has provided personal information to us, please contact us so that we can investigate and, where appropriate, delete it.

Your data protection rights

Depending on the circumstances and subject to legal conditions and exemptions, UK data protection law may give you the right to:

be informed about how your personal information is used;
request access to your personal information and receive a copy;
ask us to correct inaccurate or incomplete information;
ask us to delete personal information;
ask us to restrict how personal information is used;
object to processing based on legitimate interests and object at any time to direct marketing;
receive certain information in a structured, commonly used and machine-readable format and ask us to transfer it where technically feasible;
withdraw consent at any time where processing is based on consent; and
raise concerns about decisions based solely on automated processing where those decisions have legal or similarly significant effects.

To exercise a right, email gdpr@haleandhale.co.uk. Please describe your request clearly. We may ask for information reasonably necessary to verify your identity and authority. You may appoint an authorised representative, but we may require evidence of that authority. We will respond within the period required by law and will not discriminate against you for exercising a right.

Marketing choices

You can unsubscribe from promotional emails at any time using the unsubscribe link in the message or by contacting us. If you opt out of marketing, we may still send service messages about your account, orders, deliveries, returns, safety or changes that affect the Services.

Complaints

If you have a concern about our use of your personal information, please contact us first at gdpr@haleandhale.co.uk so that we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO). Information about making a data protection complaint is available at ico.org.uk. You may also have the right to complain to a data protection authority in the country where you live or work.

Third-party websites

The Services may link to websites, apps or platforms operated by third parties. We do not control those services and are not responsible for their privacy or security practices. Please review the privacy notice of any third-party service you use.

Changes to this policy

We may update this Privacy Policy to reflect changes to our Services, business practices or legal obligations. We will publish the revised policy here, update the "Last updated" date and provide additional notice where required by law.