Halo & Field — Privacy Policy

Last updated: 9 July 2026

Welcome to the Halo & Field Privacy Policy. This explains how Halo & Field ("we", "us", "our") collects, uses, and protects your personal information when you visit haloandfield.com (the "Site"), make a purchase, or otherwise contact us (together, the "Services"). "You" means anyone using our Services, whether a customer, website visitor, or otherwise.

This policy is written to comply with the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR), as updated by the Data (Use and Access) Act 2025. Please read it carefully.

1. Who We Are

Halo & Field is operated by Teeny Tales Ltd, a company registered in England and Wales under company number 15410132, trading as Halo & Field, of Concord Street, Leeds, LS2 7QB.

For any questions about this policy or your personal information, contact us at contact@haloandfield.com.

2. Information We Collect

• Identity & contact details — name, delivery and billing address, email address, phone number.
• Order & payment information — items purchased, order value, and payment confirmation. Your card details are processed directly by our payment provider; we don't store full card numbers ourselves.
• Account information — if you create an account, your login details and order history.
• Marketing preferences — whether you've opted in to hear from us, and what you engage with.
• Technical information — IP address, browser type, device type, and operating system.
• Usage information — pages viewed, products browsed, and how you interact with the Site, usually via cookies (see Section 4).

3. How We Use Your Information, and Our Legal Basis

UK data protection law requires a valid legal reason ("lawful basis") for each way we use your data:

Where we rely on "legitimate interests," we've checked this doesn't override your own rights and interests. Get in touch if you'd like more detail on any of these.

4. Cookies and Similar Technologies

We use cookies and similar technologies to run the Site and understand how it's used.

• Strictly necessary cookies (e.g. keeping items in your basket, keeping you logged in) don't require consent — the Site can't work properly without them.
• Analytics cookies used solely to understand overall site performance (not to track individuals for advertising) may not require consent under current PECR rules, but we'll always give clear information and an easy way to opt out.
• Marketing and advertising cookies (e.g. retargeting ads on social media or search) always require your consent, which you can give or withdraw through our cookie banner at any time.

You can also control cookies through your browser settings.

5. Who We Share Your Information With

We share personal information with trusted third parties who help us run Halo & Field, including:

• Payment processors (e.g. Stripe, PayPal, or similar), to take payment securely.
• Delivery couriers, to get your order to you.
• Our ecommerce and website hosting platform, which stores and processes data on our behalf.
• Email marketing providers, if you've opted in to marketing.
• Analytics and advertising providers, where you've consented to non-essential cookies.
• Professional advisers, regulators, or law enforcement, where we're legally required to.

We don't sell your personal information to anyone.

6. International Transfers

Some providers above may store or process data outside the UK (for example, in the US or EU). Where this happens, we make sure appropriate safeguards are in place — such as the UK's International Data Transfer Agreement, an EU Standard Contractual Clauses addendum, or transfers to countries recognised by the UK government as offering adequate protection. Contact us for details of the specific safeguards that apply.

7. How Long We Keep Your Information

We only keep personal information for as long as we need it:

• Order and transaction records — 6 years, to meet UK tax and accounting requirements.
• Account information — for as long as your account is active, plus a reasonable period afterwards.
• Marketing data — until you unsubscribe, or after a period of inactivity.
• Website usage data (cookies) — typically no more than 26 months, depending on the specific tool.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Erase your information in certain circumstances.
• Restrict or object to how we use it.
• Data portability — receive your data in a portable, machine-readable format.
• Withdraw consent at any time, where we rely on consent.

To exercise any of these, email contact@haloandfield.com. We'll respond within one month, as required by law.

9. Marketing Preferences

You can opt out of marketing emails at any time via the unsubscribe link in any email, or by contacting us at contact@haloandfield.com. This won't affect service emails, like order confirmations.

10. Children

Our Services aren't directed at children, and we don't knowingly collect personal information from anyone under 13. If you believe a child has given us personal information, please contact us and we'll delete it.

11. Data Security

We use industry-standard measures, including encryption and secure servers, to protect your information from unauthorised access, loss, or misuse. No method of transmission over the internet is completely secure, but we work hard to protect your data.

12. Changes to This Policy

We may update this policy from time to time. Significant changes will be highlighted on the Site, and the "last updated" date at the top will always reflect the latest version.

13. Complaints

If you're unhappy with how we've handled your personal information, please contact us first at contact@haloandfield.com — we'll aim to acknowledge your complaint within 30 days and work with you to put things right.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.