Privacy policy

Privacy & Cookies Policy

Home Santo Ltd
Last updated: 31 October 2026

At Home Santo, we respect your privacy and are committed to protecting your personal information.

This Privacy & Cookies Policy explains how we collect, use, store, share and protect personal information when you visit our website, purchase our products, subscribe to our communications or contact us.

Our website is www.homesanto.com.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended.

1. Who We Are

Home Santo Ltd is the data controller responsible for personal information collected through our online store.

Company: Home Santo Ltd
Company Registration Number: SC819207
Registered Address: 4 Pilmuir Holdings, Pilmuir Road, Glasgow, G77 6PS, United Kingdom
Email: info@homesanto.com
Telephone: 0141 266 0244

For questions about how we handle your personal information or to exercise your data protection rights, please contact us using the details above.

2. Information We Collect

We may collect the following categories of personal information.

Information You Provide Directly

  • Name and contact information

  • Billing and delivery addresses

  • Email address and telephone number

  • Order details and purchase history

  • Customer account information

  • Customer service enquiries and correspondence

  • Product reviews and feedback

  • Newsletter subscriptions and marketing preferences

  • Information you provide when requesting product availability notifications

Payment details are processed securely by our payment providers. Home Santo does not directly store complete payment card numbers.

Information Collected Automatically

When you use our website, we may collect:

  • IP address

  • Browser type and device information

  • Website pages and products viewed

  • Shopping basket and checkout interactions

  • Website searches

  • Referring websites and advertising sources

  • Cookie preferences and consent choices

  • Website usage and performance information

Some information is collected through cookies and similar technologies, subject to applicable consent requirements.

Information From Third Parties

We may receive information from payment providers, delivery partners, ecommerce platforms, customer review services and advertising providers.

This information helps us process transactions, fulfil orders, provide customer support and understand website performance.

3. How We Use Your Information

We use personal information only where we have an appropriate lawful basis.

The principal purposes and lawful bases are:

Processing and delivering orders

We use your contact details, delivery address and order information to fulfil purchases, process payments, arrange deliveries and manage returns.

Lawful basis: Performance of a contract.

Customer service

We use your information to respond to enquiries, resolve problems and assist with orders.

Lawful basis: Performance of a contract or legitimate interests, depending on the circumstances.

Accounting and legal compliance

We retain relevant transaction and financial information to meet accounting, tax and other legal obligations.

Lawful basis: Legal obligation.

Fraud prevention and website security

We may process technical, transaction and account information to protect our customers, website and business against fraud, misuse and security threats.

Lawful basis: Legitimate interests or legal obligation, as applicable.

Website improvements

We use appropriate website performance and customer interaction information to improve navigation, product information and the shopping experience.

Lawful basis: Legitimate interests or consent, depending on the information and technology involved.

Marketing communications

We use contact information to send relevant updates, offers and product information where you have consented or where permitted by applicable electronic marketing rules.

Lawful basis: Consent or legitimate interests, where legally appropriate.

Advertising and measurement

Where permitted, we use information about website interactions to measure advertising effectiveness and help display relevant advertising.

Lawful basis: Consent where required, including for non-essential tracking technologies.

Where we rely on legitimate interests, these may include operating our business efficiently, improving our services, maintaining security and communicating appropriately with customers. We balance these interests against your rights and freedoms.

4. Sharing Your Information

We share personal information only where reasonably necessary to provide our services, operate our business, fulfil legal obligations or carry out permitted marketing activities.

Our service providers and partners may include:

Shopify

Our ecommerce platform, which provides website hosting, checkout functionality, customer account services and related store operations.

Shopify processes personal information when customers visit and make purchases from our store.

Depending on the Shopify services enabled, Shopify may also process information relating to interactions with our store, Shopify and other merchants to provide enhanced services, personalisation, fraud prevention and advertising measurement.

Further information is available in the Shopify Consumer Privacy Policy.

You can also learn about certain Shopify privacy choices at https://privacy.shopify.com.

Payment providers

PayPal and other secure card payment providers available at checkout.

Suppliers and delivery partners

Our product suppliers, couriers and specialist furniture delivery providers, where information is necessary to fulfil or resolve an order.

Customer reviews and notifications

Judge.me Reviews, which supports customer reviews and related communications, and Kbite Back In Stock, which supports product availability notifications.

Advertising and analytics

Google, Meta (Facebook and Instagram) and Microsoft, where their services are used for website measurement, advertising and related activities.

Other service providers

Accounting, email hosting, technical support, security and other service providers necessary for operating Home Santo.

Relevant service providers may act as data processors on our behalf or as independent data controllers, depending on the service.

We do not sell customer contact lists to data brokers. However, certain advertising and analytics activities may involve sharing information with third-party platforms, subject to applicable law and privacy choices.

We may disclose information where required by law or where necessary to establish, exercise or defend legal claims.

5. Marketing Communications

If you subscribe to our newsletter, we may send you communications about:

  • New products and collections

  • Furniture and home accessories

  • Home interiors inspiration

  • Special offers and promotions

  • Relevant Home Santo news

We may also contact existing customers about similar products where the applicable legal requirements for existing-customer marketing are satisfied, including providing appropriate opportunities to opt out.

You can unsubscribe at any time using the unsubscribe link in our marketing emails or by contacting info@homesanto.com.

We respect marketing opt-outs and may retain limited information necessary to prevent further unwanted communications.

Essential communications, such as order confirmations, delivery updates and responses to customer service enquiries, are separate from marketing emails.

6. Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies.

Cookies are small files stored on your device that help websites function, remember preferences and, where permitted, understand visitor activity.

We use the following categories.

Strictly Necessary Cookies

These support essential website functions, including:

  • Shopping baskets

  • Secure checkout

  • Customer account access

  • Website security

  • Essential session management

These cookies do not require consent where an applicable legal exemption applies.

Personalisation Cookies

These may help remember preferences and improve or personalise your browsing experience.

Analytics Cookies

These help us understand how customers use our website, including pages viewed, shopping behaviour and website performance.

Analytics services may include Shopify analytics and Google-related services.

We apply the consent requirements or exemptions relevant to the particular technology and its use.

Marketing Cookies

These may be used by platforms including Google, Meta and Microsoft to measure advertising performance and, where permitted, deliver relevant advertising.

Marketing tracking technologies that require consent are subject to your cookie choices.

7. Managing Your Cookie Preferences

When you visit Home Santo, our cookie banner provides options to:

  • Accept optional cookies

  • Decline optional cookies

  • Manage individual cookie categories

Where consent is legally required, we request permission before using the relevant non-essential tracking technologies.

Simply continuing to browse our website does not constitute consent.

You can change or withdraw your cookie preferences at any time.

To do this, select Cookie Preferences in the footer of our website.

This opens our cookie settings, where you can review and update your choices for Personalisation, Marketing and Analytics.

You may also manage cookies through your browser settings. However, restricting essential cookies may affect the operation of certain website features.

Our website uses Shopify's customer privacy controls. Third-party technologies are subject to their applicable privacy settings and legal requirements.

8. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including relevant legal, accounting and operational requirements.

Our retention arrangements include:

Order and financial records

Relevant accounting and tax records are generally retained for six years from the end of the applicable financial year or accounting period, or longer where legally required.

Customer order information

Order details may be retained where necessary for customer service, warranty enquiries, returns, accounting obligations and legal claims.

Customer enquiries

Correspondence is retained for an appropriate period based on its purpose, the nature of the enquiry and any related legal obligations.

Marketing information

Marketing subscription information is retained while an appropriate lawful basis exists, subject to your right to unsubscribe or object.

Limited suppression records may be retained to respect marketing opt-outs.

Cookies and analytics

Retention depends on the type of cookie, service provider, configuration and applicable legal requirements.

When information is no longer required, we take appropriate steps to delete, anonymise or securely dispose of it.

9. How We Protect Your Information

We take reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration or disclosure.

These measures may include:

  • Secure ecommerce and payment processing services

  • Appropriate account and access controls

  • Website security measures

  • Restricted access to customer information

  • Appropriate management of service providers

Although no online system can guarantee absolute security, we take data protection seriously and work to safeguard personal information.

10. International Data Transfers

Some of our service providers may process or store personal information outside the United Kingdom.

Where international transfers are subject to UK data protection requirements, we rely on an appropriate lawful mechanism.

Depending on the circumstances, this may include UK adequacy regulations, an International Data Transfer Agreement, the UK Addendum to standard contractual clauses or another permitted transfer mechanism.

Where applicable, you may request further information about the safeguards used by contacting us.

11. Your Rights Under UK Data Protection Law

Depending on the circumstances, you may have the right to:

  • Access: Request a copy of your personal information.