Privacy policy
Last updated: August 19, 2026
1. Who we are
GCL Ventures LLC, trading as Harrow & Vale UK, is the controller of personal information described in this policy. GCL Ventures LLC is a Kentucky limited liability company with organisation number 1554057 and a business address at 212 N. 2nd St., STE 100, Richmond, Kentucky 40475, United States. Privacy questions and rights requests can be sent to support@harrowvale.co.uk.
2. Information we collect
Depending on how you use the store, we may collect:
- identity and contact details, such as name, email, telephone number, billing address and delivery address;
- order and transaction details, such as products ordered, returns, refunds and payment status;
- limited payment information supplied by payment providers, such as card type and last four digits—we do not receive the full card number or security code;
- account details and preferences;
- communications with customer service;
- device, browser, IP address, cookie identifiers and website-usage information;
- marketing preferences and interactions with our communications; and
- fraud-prevention and security information;
- review information, such as a display name, rating, written review, photographs and verification of a related purchase; and
- delivery and tracking information, such as carrier events, parcel status and proof of delivery.
3. Why we use information and our lawful bases
We use personal information:
- to process orders, take payment, arrange delivery, manage returns and provide customer service—necessary to perform a contract or take steps requested before a contract;
- to keep financial, tax and transaction records and respond to lawful requests—necessary to comply with legal obligations;
- to prevent fraud, secure the store, improve services and manage ordinary business operations—our legitimate interests, balanced against customer rights;
- to send direct marketing—consent where required, or another lawful basis where electronic-marketing rules permit; and
- to request, verify, publish and moderate genuine customer reviews—performance of our contract, consent where required, and our legitimate interest in gathering authentic feedback; and
- to measure website use and advertising performance and show personalised advertising through Google Analytics, Google Ads and Meta Pixel—consent where UK law requires it.
Where information is required to enter or perform a contract, failure to provide it may prevent us from accepting or fulfilling an order.
4. Sources
We collect information directly from customers, automatically from devices and browsers, and from service providers such as Shopify, payment providers, review and tracking applications, fulfilment warehouses, delivery carriers, fraud-prevention services, Google and Meta.
5. Who receives information
We disclose only what is reasonably necessary to:
- Shopify, which hosts the store, provides checkout and supports store operations;
- Shopify Email, which we may use to send marketing and service communications;
- payment processors, card networks, digital-wallet providers and fraud-prevention providers used to authorise and secure transactions;
- UK fulfilment partners and warehouses that prepare orders and returns;
- delivery carriers and parcel-tracking providers that transport orders and provide delivery updates;
- review-platform providers that request, verify, host or display customer reviews;
- Google Analytics, which helps us understand website use and performance;
- Google Ads, which helps us measure advertising and, with consent where required, show or personalise advertising;
- Meta Pixel and Meta advertising services, which help us measure advertising and, with consent where required, show or personalise advertising;
- customer-service, security and IT providers used to operate the store;
- professional advisers, insurers, regulators and public authorities where appropriate; and
- a purchaser or successor in connection with a genuine corporate transaction.
The precise review, tracking, payment, fulfilment and carrier providers may change as our store develops. Current non-essential analytics and advertising technologies are identified through our cookie controls where required. We require service providers to handle information only for legitimate purposes and subject to appropriate contractual protections.
We do not sell personal information for money. We may disclose limited identifiers to analytics or advertising providers as described in this policy and through our cookie controls.
Google explains its handling of information in the Google Privacy Policy. Meta explains its handling of information in the Meta Privacy Policy.
6. Shopify
Shopify processes information to host the store, provide checkout and improve its services. Shopify may process information outside the UK. Customers can read the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal.
7. International transfers
GCL Ventures LLC is established in the United States, and service providers or fulfilment partners may operate in other countries. Where UK personal information is transferred internationally, we use a lawful transfer mechanism where required, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another valid safeguard. Customers may contact us for information about relevant safeguards.
8. Retention
We keep personal information only as long as reasonably necessary for the purpose collected, including order fulfilment, customer service, fraud prevention and legal, accounting or tax obligations. Retention periods depend on the record and applicable law. We delete or anonymise information when it is no longer required, subject to backups and legal holds.
Order and transaction records may be kept for up to six years after the relevant transaction where reasonably required for accounting, tax, fraud-prevention or legal purposes. Customer-service communications are normally kept only while needed to resolve the enquiry and manage related legal obligations. Marketing information is kept until consent is withdrawn or the information is no longer needed; a minimal suppression record may be retained to honour an opt-out. Other records are deleted or anonymised when no longer reasonably required, subject to secure backups and legal holds.
9. Cookies and similar technologies
The site uses technologies necessary for checkout, shopping-basket functionality, security, preferences and core operation. With consent where required, it also uses:
- Google Analytics to measure visits, navigation, device information and website performance;
- Google Ads technologies to measure conversions, build advertising audiences and show or personalise advertisements;
- Meta Pixel to measure conversions, build advertising audiences and show or personalise advertisements; and
- technologies associated with Shopify, review applications and tracking applications where those technologies are not strictly necessary.
Information collected through these technologies may include IP address, device and browser information, cookie or advertising identifiers, pages viewed, interactions, products viewed or added to the basket, checkout events and purchase events. We do not intentionally send full payment-card details to analytics or advertising providers.
Where consent is required, visitors can accept, reject or manage categories of non-essential technologies through our cookie controls. Consent can be withdrawn through those controls. Browser settings may also allow cookies to be blocked or deleted, although doing so can affect website functionality.
10. Marketing choices
Marketing emails include an unsubscribe link. Customers can also email us to change preferences. Opting out of marketing does not stop essential order or service messages. We keep a minimal suppression record where necessary to honour an opt-out.
11. Your UK data-protection rights
Subject to legal conditions and exceptions, individuals may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. They may also object to direct marketing at any time.
To exercise a right, email support@harrowvale.co.uk. We may request proportionate information to verify identity. We normally respond within one month, although the law permits an extension for complex or numerous requests.
12. Complaints
Please contact us first if you have a privacy concern. UK individuals may also complain to the Information Commissioner's Office through ico.org.uk/make-a-complaint. This does not affect other legal rights.
13. Children
The store is not directed to children, and we do not knowingly collect personal information from children in circumstances requiring parental authorisation. Contact us if you believe a child has provided information improperly.
14. Security
We use proportionate technical and organisational measures designed to protect personal information. No internet transmission or storage system can be guaranteed completely secure. Customers should not send full payment-card details or passwords by email.
15. External links
Third-party websites have their own privacy practices. Review their notices before providing information to them.
16. Updates
We may update this policy to reflect changes in law, technology or operations. We will update the review date and provide additional notice where required.
17. Contact Information
Store name: Harrow & Vale UK
Company name: GCL Ventures LLC, trading as Harrow & Vale UK
Company Address: 212 N. 2nd St. STE 100, Richmond, Kentucky 40475, United States
Warehouse Address: 4 Empire Centre, Imperial Way, Watford WD24 4YH, United Kingdom
Kentucky Organization No.: 1554057
Phone: +44 7882 511281
Email: support@harrowvale.co.uk
You can also get in touch with us via our Contact Us page.
Monday to Friday | 09:00–17:00 UK time
We aim to respond to your enquiries within 24 hours.