Privacy Policy

Privacy Policy: ghpm (trading as Sage and Stone)

ghpm (trading as Sage and Stone) is registered under the Data protection Act 1998 and we are committed to protecting, and respecting your privacy. In line with the Data protection Directive & General Data Protection Regulation (GDPR), this policy explains when and why we collect personal information about people who visit our website, what we collect and what we do with it.

We may change this Policy from time to time so please check this page occasionally to ensure that you’re happy with any changes. By using our website, you’re agreeing to be bound by this Policy.

Any questions regarding this Policy and our privacy practices should be sent by email

to shop@sageandstone.co.uk or by writing to Sage and Stone, Unit 4 Daisy May's Arcade, 2-4 Kings Road East, Swanage, Dorset BH19 1ES. Alternatively, you can telephone 01929 422141.

Our Privacy Policy explains:

• How we collect and use that information.
• What information we collect and why we collect it.

Who are we?

sageandstone.co.uk is a website operated by ghpm. We are registered in England.

How do we collect information from you?

We obtain information about you when you contact us about products and services or make a purchase.

Set out below is a description of the ways we intend to use your personal data and the legal grounds on which we will process such data. We have also explained what our legitimate interests are where relevant.

We may process your personal data for more than one lawful ground, depending on the specific purpose for which we are using your data.

Purpose/Activity

Type of data

Lawful basis for processing

To register you as a new customer

1. Identity
2. Contact

Performance of a contract with you

To process and deliver your order and manage payments

1. Identity
2. Contact
3. Financial
4. Transaction
5. Communications

1. Performance of a contract with you
2. Necessary for our legitimate interests to recover debts owed to us

To manage our relationship with you which will include: notifying you about changes to our terms or privacy policy

1. Identity
2. Contact
3. Communications

1. Performance of a contract with you
2. Necessary to comply with a legal obligation
3. Necessary for our legitimate interests to keep our records updated.

To administer and protect our business and our site (including troubleshooting, data analysis, testing, system

1. Identity
2. Contact
3. Technical

(a) Necessary for our legitimate interests for running our business, provision of administration and IT services, network security, to

maintenance, support, reporting and hosting of data)

prevent fraud and in the context of a business reorganisation or group restructuring exercise

(b) Necessary to comply with a legal obligation

What type of information is collected from you?

Personal Information

The personal information we collect, or which is supplied by you, might include your name, address, email address, telephone number and IP address. Following the successful completion of the order and delivery process, your personal data is destroyed.

Sensitive Data

We do not collect any Sensitive Data about you. Sensitive data refers to data that includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. We do not collect any information about criminal convictions and offences.

Review of this Policy

We keep this Policy under regular review. This Policy was last updated in January 2023.