Privacy policy
This Privacy Policy describes how greenloft.co.uk (the “Site”, “we”, “us” or “our”) collects, uses, and shares your personal information when you visit or make a purchase from the Site.
1. Contact Details
If you have any questions about this Privacy Policy, our data practices, or if you would like to exercise your privacy rights, you can contact us at:
Email: info@greenloft.co.uk
Postal address:
MHG Textiles Limited
Unit B1, Fieldhouse Industrial Estate
Rochdale
OL12 2NA
United Kingdom
2. Personal Information We Collect
When you use our Site, we collect certain information about you and your device. In this Privacy Policy, “Personal Information” means any information that can identify you directly or indirectly.
a) Device Information
What we collect:
IP address
Browser type and version
Time zone setting
Cookie identifiers
Information about how you interact with the Site (pages viewed, products viewed, search terms, clicks, etc.)
How we collect it:
Automatically when you visit the Site, through cookies, log files, pixels, tags, and similar technologies.
Why we collect it (purpose):
To load the Site correctly on your device
To maintain the security and performance of the Site
To understand how visitors use our Site and improve our services (analytics)
Who we share it with (examples):
Our e-commerce and analytics providers, such as Shopify and Linnworks
b) Order Information
What we collect:
When you place an order or attempt to place an order through the Site, we collect:
Name
Billing address
Shipping address
Contact details (email address and phone number)
Payment information (such as credit/debit card details, PayPal, Apple Pay, Google Pay, Stripe – processed via our payment providers)
Order details (products purchased, order value, delivery preferences)
Why we collect it (purpose):
To process and fulfil your order
To take payment and issue invoices/receipts
To arrange shipping and delivery
To communicate with you about your order, including updates and customer service
To screen orders for potential risk or fraud
Where you have opted in, to send you marketing communications related to our products and services
Who we share it with (examples):
Our e-commerce platform: Shopify
Order and stock management: Linnworks
Delivery partners: e.g. Amazon Shipping, Yodel, DPD
Payment providers: e.g. PayPal, Apple Pay, Google Pay, Stripe
We share only the information necessary to perform these services.
c) Customer Support Information
What we collect:
Information you provide when you contact us (via email, contact form, phone, or post)
Order history and any related communications
Any additional details you choose to share (e.g. photos of damaged items, feedback, queries)
Why we collect it (purpose):
To respond to your enquiries
To provide customer service and handle complaints
To improve our products and services
Who we share it with:
Where necessary, with our e-commerce and logistics partners (e.g. Shopify, Linnworks, couriers) in order to investigate and resolve issues.
3. Minors
Our Site is not intended for individuals under the age of 16, and we do not knowingly collect Personal Information from children.
If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us using the details above, and we will delete it.
4. How We Share Personal Information
We share your Personal Information with third parties to help us operate our business, provide our services, and comply with our legal obligations. For example:
Shopify powers our online store. You can read more about how Shopify uses Personal Information here:
https://www.shopify.com/legal/privacy
We share information with our payment providers to process payments securely.
We share information with delivery partners to fulfil and deliver your orders.
We may share Personal Information if required to do so by law (e.g. to comply with a subpoena, court order, or legal process) or to protect our rights and the rights of others.
We do not sell your Personal Information.
5. Behavioural Advertising & Analytics
We may use your Personal Information to show you relevant advertising and to better understand how customers use our Site.
For example:
We use analytics tools (such as Google Analytics or Shopify analytics) to understand website traffic and usage patterns.
We may work with advertising and social media partners who may use cookies or similar technologies to show you ads based on your browsing behaviour and interests.
You can learn more about how Google uses your information here:
https://www.google.com/intl/en/policies/privacy/
You can opt out of Google Analytics here:
https://tools.google.com/dlpage/gaoptout
You can also opt out of interest-based advertising from some networks by visiting:
https://optout.aboutads.info/
Your browser or device may offer tools to block cookies or limit tracking. Please note that disabling cookies may affect how the Site functions.
6. Legal Bases for Processing (GDPR / UK GDPR)
If you are located in the European Economic Area (EEA) or the UK, we process your Personal Information under the following legal bases:
Contract: To perform our contract with you (e.g. when you place an order).
Consent: Where you have given consent (e.g. for certain types of cookies or email marketing). You can withdraw consent at any time.
Legitimate interests: To operate and improve our Site, prevent fraud, and market our products (where these interests do not override your rights and freedoms).
Legal obligation: To comply with our legal and regulatory obligations (e.g. record-keeping, tax).
7. Retention of Personal Information
We keep your Personal Information only for as long as necessary for the purposes described in this Privacy Policy, including:
For as long as needed to fulfil your orders and provide services
For our legitimate business purposes (e.g. maintaining records)
To comply with legal, accounting, or reporting obligations
When it is no longer necessary to retain your data, we will delete or anonymise it.
8. Automated Decision-Making
We do not engage in fully automated decision-making that has a legal or similarly significant effect on you.
However, our e-commerce provider Shopify may use limited automated tools to help prevent fraud, such as temporarily blacklisting IP addresses or payment methods associated with suspicious activity. These measures are designed to protect both us and our customers.
9. International Transfers
Your Personal Information may be transferred, stored, and processed outside the UK and EEA (for example, where our service providers are based overseas, such as in Canada or the United States).
Shopify and other partners use appropriate safeguards (such as standard contractual clauses) to ensure that your data is protected in line with applicable data protection laws. For more details, please refer to Shopify’s GDPR resources:
https://help.shopify.com/en/manual/your-account/privacy/GDPR
10. Your Rights (UK / EEA Residents)
If you are a resident of the UK or EEA, you have the following rights in relation to your Personal Information:
Right of access – to request a copy of the Personal Information we hold about you
Right to rectification – to request correction of inaccurate or incomplete data
Right to erasure – to request deletion of your Personal Information (in certain circumstances)
Right to restrict processing – to request that we limit how we use your data
Right to data portability – to request your data in a structured, commonly used format and to transfer it to another provider
Right to object – to object to processing based on legitimate interests or for direct marketing
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact us using the details in the Contact section.
You also have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner’s Office (ICO):
https://ico.org.uk/make-a-complaint/
11. Cookies
Cookies are small text files placed on your device when you visit our Site. They help:
Recognise your device and preferences
Enable core site functionality (e.g. shopping cart, checkout)
Improve performance and security
Provide analytics and, where applicable, personalised advertising
We use a combination of:
Strictly necessary cookies – required for the Site to function (e.g. checkout, account login)
Performance and analytics cookies – to understand how visitors use our Site
Functional cookies – to remember your preferences (such as language or region)
Advertising cookies – where used, to deliver relevant ads
Because our Site is powered by Shopify, cookies used may include those listed in Shopify’s cookie policy:
https://www.shopify.com/legal/cookies
You can manage cookies through your browser settings. For more information on cookies and how to control them, you can visit:
https://www.allaboutcookies.org/
Please note that disabling cookies may affect your experience and some parts of the Site may not work properly.
12. Do Not Track
Some browsers offer a “Do Not Track” (DNT) setting. As there is currently no industry standard for responding to DNT signals, our Site does not change its data collection practices when a DNT signal is detected.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. The updated version will be posted on this page with a new “Last updated” date.
Last updated: 9 December 2025