Privacy Policy

Last updated: 6 October 2026

[DRAFT — have this reviewed against UK GDPR / Data Protection Act 2018 before relying on it. This is a plain-English starting point, not legal advice.]

1. Who we are

The Living Field is a trading name of Darklight Design Ltd, registered in England & Wales, company number 07006711, registered office Unit 10 Brookside Business Centre, Church Road, Swallowfield, Berkshire, RG7 1TH. We are the data controller for personal data collected through this site.

2. What we collect

Name and email address (contact form, newsletter signup), order, delivery and billing details (processed by Stripe — we do not store full card details), and, only if you accept analytics cookies, anonymised data about how the site is used (pages visited, approximate location, device and browser type).

3. Payment processing

Payments are handled entirely by Stripe. Stripe's own privacy policy governs how they process your payment data: stripe.com/gb/privacy.

4. How we use your data

To fulfil orders, respond to enquiries, send the newsletter (only if you opted in), and improve the site. Our legal bases are: performance of a contract (orders), legitimate interests (replying to enquiries, keeping the site secure), and your consent (newsletter and analytics cookies).

Cookies & analytics

We use Google Analytics 4 to understand how visitors use the site. It sets analytics cookies only if you click Accept on the cookie banner; if you click Decline (or ignore it), no analytics cookies are set. Your choice is remembered on your device, and you can change it at any time by clearing this site's data in your browser, which brings the banner back. Google acts as a processor for this data and may process it outside the UK; see policies.google.com/privacy. The basket uses your browser's local storage to remember items you add; this stays on your device.

5. Your rights

Under UK GDPR you have the right to access, correct, or delete your personal data, and to withdraw consent for marketing at any time. Contact us via the contact page to exercise these rights.

6. Data retention & third parties

We share personal data only with the services needed to run the shop: Stripe (payments), Netlify (website hosting and the contact form, which stores the details you submit), Brevo (sends our newsletter and welcome emails to people who sign up, and holds the email addresses on that list until you unsubscribe), and Google Analytics (only if you accept cookies). Some of these providers are based outside the UK and rely on recognised safeguards for international transfers.

When you place an order we also keep a copy of it (what you bought, your name, email and delivery address) in our private order records so we can dispatch it and look after you, and we email it to ourselves through Brevo. If you reach our checkout page and enter your email address but do not complete your purchase, we may email you once about your unfinished basket, because you were in the process of buying from us. The basket page tells you this and how to opt out: email hello@thelivingfield.co.uk at any time and we will not email you about it. Every such email also lets you tell us not to contact you again, and we will respect that straight away. Our legal basis is legitimate interests.

We keep order and invoice records for 6 years, as required for tax purposes. Enquiries are kept only as long as needed to deal with them. Newsletter addresses are kept until you unsubscribe, and you can ask us to remove yours at any time. We never sell your data.

7. Contact

Questions about this policy can be sent via our contact page.