Privacy Policy

Last updated: [14 May 2026]

This privacy policy explains how Pom Lampson Limited collects, uses and protects your personal data when you visit pomlampson.com, buy from us, or contact us.

Who we are

Pom Lampson Limited is the data controller for the personal data we collect about you. We're a company registered in England & Wales (company number 04666548), trading from 7 Fernshaw Road, London, SW10 0TB.

If you have any questions about this policy or how we handle your data, contact us at help@pomlampson.com.

What data we collect and why

We collect different types of personal data depending on how you interact with us.

When you place an order, we collect your name, billing and delivery address, email address, phone number, and what you've bought. We use this data to process your order, take payment, deliver your goods, manage returns, and meet our legal obligations around tax and accounting. The lawful basis is performance of a contract with you and, for tax records, compliance with a legal obligation.

When you sign up to our marketing emails, we collect your email address and any preferences you give us. We use this data to send you news about products, offers and content from Pom Lampson. The lawful basis is your consent, which you can withdraw at any time by clicking the unsubscribe link in any email.

When you browse our site, we collect technical information including your IP address, device type, browser, pages visited, and how you got to us. We use this data to keep the site running, prevent fraud, understand which products and content people find useful, and improve the site. The lawful basis is our legitimate interest in running and improving a secure, useful website.

When you leave a product review, your name (or display name) and review content appear publicly on the site. The lawful basis is your consent when you submit the review.

When you contact us, we collect whatever information you give us in your message. We use it to answer your enquiry and keep a record of the correspondence. The lawful basis is our legitimate interest in responding to customer enquiries.

Who we share your data with

We use a number of third parties to run our business. We only share the data they need to provide their service. These include:

• Shopify Inc. hosts our online store, processes orders, and powers our marketing emails through Shopify Email. Shopify is based in Canada with infrastructure globally.
• Shop Pay (Shopify) for accelerated checkout, if you choose to use it.
• Payment providers chosen at checkout, who process your payment details. We don't see or store your card details.
• Royal Mail and other couriers to deliver your order.
• Judge.me handles our product reviews. Judge.me is incorporated in Hong Kong with global operations.
• Google LLC for analytics (Google Analytics 4) and advertising (Google Ads). Google is based in the United States.
• Meta Platforms for advertising (Facebook and Instagram). Meta is based in the United States and Ireland.
• TikTok for advertising. TikTok in Europe is operated from Ireland with infrastructure in the US.
• Instafeed (nfcube) for displaying our Instagram feed on the site.
• Our accountants at Hillside, Albion Street, Chipping Norton, OX7 5BH, who handle our company filings and tax returns.

We don't sell your personal data to anyone.

International transfers

Some of the third parties listed above are based outside the UK, principally in the United States. Where this happens, we rely on UK-approved transfer mechanisms (such as the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework where applicable) to protect your data.

How long we keep your data

We keep your data for different periods depending on why we have it:

• Order records: 6 years after your order, to meet HMRC's requirement to keep records of business transactions.
• Marketing email list: until you unsubscribe, plus a short period afterwards to make sure your unsubscribe is honoured.
• Customer support enquiries: 2 years after the last contact, unless we need to keep them longer to resolve an issue.
• Website analytics: Default GA4 retention setting, typically 2 or 14 months
• Reviews: for as long as the review is useful to other customers, unless you ask us to remove it.

Your rights

Under UK GDPR you have the following rights over your personal data:

• Access: ask for a copy of the data we hold about you.
• Rectification: ask us to correct data that's wrong.
• Erasure: ask us to delete your data, in certain circumstances.
• Restriction: ask us to stop using your data, in certain circumstances.
• Portability: ask us to give you your data in a portable format.
• Objection: object to us using your data, in certain circumstances. You can always object to direct marketing.
• Withdraw consent: where our use of your data is based on your consent, you can withdraw it at any time.
• Automated decisions: we don't make decisions about you using only automated processing.

To exercise any of these rights, email us at help@pomlampson.com.

Complaints

If you're not happy with how we've handled your data, please contact us first so we can try to resolve it. If you're still not satisfied, you have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can reach the ICO at ico.org.uk, by phone on 0303 123 1113, or by post at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Cookies

We use cookies and similar technologies on our site. Some are essential for the site to work (such as keeping the contents of your basket). Others help us understand how people use the site, deliver advertising, and personalise content. 

For more detail about each cookie we use, see our Cookie Policy.

Changes to this policy

We may update this policy from time to time. The version on the site is the current one and the date at the top tells you when it was last updated.