Privacy policy

Privacy Policy

This policy explains what personal data Abloom Limited, trading as Simply Wood, collects when you use simplywooduk.com, why we collect it, and what rights you have. We are the data controller for that information.

Last updated: 14 August 2026

Who we are

Abloom Limited t/a Simply Wood
Registered in England and Wales, company number 05469001
Registered office: 98 Middlecroft Drive, Strensall, York, North Yorkshire, YO32 5YQ
Trading address: The Former Buffer Depot, Main Street, Wheldrake, York, YO19 6NA
Email: support@simplywooduk.com
Telephone: 0800 118 5141

What we collect

Data	When
Name, billing and delivery address, email, phone number	When you place an order or create an account
Order history and correspondence with us	When you buy from us or contact us
Payment card details	Entered directly with our payment providers - we never see or store full card numbers
Device and browsing data: IP address, browser, pages viewed, referring site	Automatically, via cookies and similar technologies
Email address for marketing	Only if you opt in

Why we use it, and our legal basis

To fulfil your order - taking payment, arranging delivery, handling returns and answering questions. Legal basis: performance of a contract with you.
To meet legal obligations - keeping tax and accounting records, and complying with consumer law. Legal basis: legal obligation.
To run and protect the site - security, fraud prevention, fixing faults, and understanding how the site is used. Legal basis: our legitimate interests in operating a safe and functioning shop.
To send marketing emails - only where you have opted in, or where you have bought from us and we are telling you about similar products. Legal basis: consent, or legitimate interests under the soft opt-in. You can unsubscribe from any email in one click.
Analytics and advertising cookies — we do not currently use these. If we introduce them, we will ask for your consent first.

Who we share it with

We share personal data only with organisations that help us run the business, and only as far as they need it:

Shopify Inc. - hosts this store and processes orders on our behalf.
Payment providers (such as Shopify Payments and PayPal) - to take payment and screen for fraud.
Delivery carriers - your name, address and phone number, so they can deliver your order.
Shopify (email and analytics) - order confirmations and other transactional emails about your order are sent through Shopify, and Shopify's built-in first-party analytics tells us how many people visit the shop and which products sell. We do not use a separate email marketing platform, and we do not use Google Analytics, Google Tag Manager, Google Ads remarketing, Meta Pixel or any other third-party analytics or advertising provider.
ParcelPanel - our order-tracking app, which uses your order and shipment details so we can show you delivery tracking.
Professional advisers and authorities - where we are required by law.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

International transfers

Some of our providers process data outside the UK. Where that happens, we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum, so that your data keeps an equivalent level of protection. You may ask us for details of the safeguards in place.

How long we keep it

Order and transaction records: seven years, to meet HMRC requirements.
Customer account data: until you ask us to close the account, then deleted or anonymised.
Marketing consent records: until you unsubscribe, plus a suppression record so we do not contact you again.
Enquiries that do not lead to an order: two years.

Cookies

Cookies strictly necessary to run the shop — keeping your basket and session, and securing checkout — are set automatically, as the law permits.

We do not currently set analytics or advertising cookies on this site. If we introduce them, we will ask for your consent through a cookie banner before any are set, and you will be able to change or withdraw that choice at any time. You can also block or clear cookies through your browser settings whenever you like.

Your rights

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

ask for a copy of the personal data we hold about you;
have inaccurate data corrected;
ask us to erase data where there is no continuing reason for us to hold it;
restrict or object to how we use it, including objecting to direct marketing at any time;
ask for your data in a portable, machine-readable format;
withdraw consent at any time, without affecting processing already carried out.

To exercise any of these, email support@simplywooduk.com. We will respond within one month. There is no charge.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113.

Children

This shop is intended for adults. We do not knowingly collect data from children under 13. If you believe a child has given us personal data, contact us, and we will delete it.