Privacy policy

Last updated: 15 October 2026

Harmonious Homes and Gardens is the trading name of M.M Noblet, a sole trader based in Scotland. We operate this store and website, including all related content, features, tools, products and services (the "Services"). Our website is powered by Shopify. This Privacy Policy explains how we collect, use and share your personal information when you visit the Services, buy from us, or get in touch. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls how your personal information is handled.

Please read it carefully. By using the Services, you confirm you have read and understood it.

**Who is responsible for your data**
For the purposes of UK data protection law, M.M Noblet, trading as Harmonious Homes and Gardens, is the data controller of your personal information. Our contact details are at the end of this policy.

**Personal information we collect**
"Personal information" means information that identifies you or can reasonably be linked to you. Depending on how you use the Services, we may collect:

- **Contact details:** your name, billing and delivery addresses, phone number and email address.
- **Payment information:** payment card details, transaction details and payment confirmations. Payments are processed securely by our payment providers, and we do not see or store your full card number.
- **Account information:** your username, password and preferences.
- **Order information:** items you view, add to your basket, buy, return or cancel, and your past orders.
- **Communications:** anything you send us, for example in a customer support enquiry or a WhatsApp message.
- **Device and usage information:** your IP address, browser and device details, and how you use and move around the Services.

**Where we get your information**
We collect it directly from you, automatically through the Services (including cookies and similar technologies), from our service providers, and from our partners or other third parties.

**How we use your information, and our legal reasons**
Under UK GDPR we must have a legal basis for using your information. We rely on these:

- **To provide the Services and fulfil your order** (contract): to process payments, deliver your order, handle returns and refunds, manage your account and give you customer support.
- **To improve and tailor the Services** (legitimate interests): to understand how our site is used and to improve your shopping experience.
- **Marketing** (consent, or legitimate interests where the law allows): to send you marketing emails or messages and to show you relevant adverts. You can opt out at any time.
- **Security and fraud prevention** (legitimate interests): to protect our site, your account and payments.
- **Legal obligations** (legal obligation): for example to keep tax and accounting records and respond to lawful requests from authorities.

**Who we share your information with**
We only share your information where we need to, with:

- Shopify, and service providers who help us run the business, such as payment processors, delivery carriers and couriers, IT and cloud storage providers, and email providers.
- Marketing and advertising partners, where you have consented to this through our cookie banner. They use your information under their own privacy notices.
- Others where you ask us to, or where the law requires, for example to comply with legal process or to protect our rights.
- A buyer or successor, if the business is ever sold or transferred.

We do not sell your personal information for money.

**Facebook and Instagram**
We use Meta's Facebook and Instagram sales channel to list and sell products through those platforms. As part of this, limited customer data, such as cart and order information, may be shared with Meta to enable the shopping features and to support advertising. You can find out more about how Meta handles this information in Meta's own privacy policy.

**Meta Pixel**
We may use the Meta Pixel on our website to understand how visitors use our site and to help us show relevant advertising on Facebook and Instagram. This may involve sharing information about your browsing activity on our site with Meta. We only do this if you accept marketing cookies on our cookie banner. You can manage your ad preferences through your Facebook or Instagram account settings.

**WhatsApp**
Customers can contact us through WhatsApp. If you message us there, we receive your phone number, your WhatsApp profile name and the content of your messages. We use these only to reply to your enquiry and to deal with your order or any issue with it. WhatsApp is run by Meta, which processes your messages under its own privacy policy. We do not send marketing messages through WhatsApp. If that ever changes, we will only do it with your consent, and you will be able to opt out at any time.

**Cookies and similar technologies**
We use cookies and similar technologies. Essential cookies are needed for the site and checkout to work. We only use cookies for analytics, personalisation or marketing if you agree through our cookie banner. You can change your choice at any time using the "Cookie preferences" link at the bottom of any page.

**Relationship with Shopify**
The Services are hosted by Shopify, which collects and processes personal information about your use of the Services in order to provide and improve them. Your information may be shared with Shopify and with third parties located in other countries. We also use certain Shopify enhanced features that use data from your interactions with our store, other merchants and Shopify. Where Shopify uses your information for its own purposes, Shopify is responsible for that processing, including responding to your requests about it. To learn more or to use your rights, visit the Shopify Consumer Privacy Policy at https://privacy.shopify.com/en.

**Third-party websites and links**
The Services may link to websites run by others. We are not responsible for their privacy or security practices, so please read their policies. Information you share on third-party social networks may be visible to others.

**Children**
The Services are not intended for children, and we do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has given us their information, please contact us and we will delete it.

**Security and retention**
We take reasonable steps to protect your information, but no system is perfectly secure and information sent over the internet may not be fully secure in transit. Please do not send sensitive information to us by unsecure means.

We keep your information only for as long as we need it, for example to provide the Services, to keep tax and accounting records (we generally keep order records for 6 years), to resolve disputes and to meet our legal obligations. After that we delete it or anonymise it.

**Your rights**
Under UK data protection law you have the right to:

- **Access** the personal information we hold about you.
- **Correct** information that is inaccurate or incomplete.
- **Erase** your information, in certain circumstances.
- **Restrict** how we use your information, in certain circumstances.
- **Object** to us using your information, including for direct marketing, which we will always stop if you ask.
- **Data portability**, meaning to receive your information in a portable format and have it passed to another provider, in certain circumstances.
- **Withdraw your consent** at any time where we rely on it. This does not affect anything done before you withdrew it.

You can opt out of marketing emails at any time using the unsubscribe link in them. We may still send you service messages about your orders or account. These rights are not absolute and can be limited by law. We may need to verify your identity before acting on a request, and we will normally reply within one month. You can exercise your rights by contacting us using the details below, or through Shopify as described above where it holds your information.

**Complaints**
If you are unhappy with how we have handled your personal information, please contact us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at https://ico.org.uk or on 0303 123 1113.

**International transfers**
Some of our service providers, including Shopify and Meta (which runs Facebook, Instagram and WhatsApp), may process your information outside the UK. Where we transfer your information outside the UK, we make sure it is protected, for example through approved safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or by transferring to a country the UK has recognised as providing adequate protection.

**Changes to this policy**
We may update this Privacy Policy from time to time, for example if our practices or the law change. We will post the new version here and update the "Last updated" date. Where the law requires, we will tell you about important changes.

**Contact us**
If you have any questions about this policy or want to exercise your rights, contact us at:

Harmonious Homes and Gardens (M. Noblet)
The Hatton, Rattray, Perth and Kinross PH10 7HD, United Kingdom
Email: margaretnoblet@outlook.com
Phone: +44 7904 223058