Privacy Policy

Last updated: 31 August 2026

FARRINGTON respects your privacy and is committed to handling personal information responsibly, transparently and securely.

This Privacy Policy explains what personal information we collect, why we use it, who we may share it with, how long we keep it, and the rights available to you.

Who we are

FARRINGTON is a trading name of Sterling Northern Solutions Limited, a company registered in England and Wales under company number 15066575.

Our registered office is:

Sterling Northern Solutions Limited
Unit 9 Undershore Works
Brookside Road
Bolton
BL2 2SE
United Kingdom

For the purposes of UK data protection law, Sterling Northern Solutions Limited is the data controller responsible for the personal information described in this Privacy Policy, except where another organisation acts as an independent controller for its own processing.

You can contact us about privacy matters at:

studio@thefarrington.uk

The information we collect

The personal information we collect depends on how you interact with FARRINGTON.

We may collect the following categories of information.

Identity and contact information

This may include:

• your name;

• billing address;

• delivery address;

• email address; and

• telephone number.

Order and transaction information

When you place or attempt to place an order, we may process information including:

• products ordered;

• order number;

• purchase price;

• delivery method;

• delivery status;

• returns, cancellations or refunds;

• transaction dates; and

• payment status.

Payment information

Payments made through our website are processed through Shopify and the payment provider made available or selected at checkout.

FARRINGTON does not ordinarily receive or store your complete payment-card number or card security code.

We may receive limited payment-related information necessary to identify and administer a transaction, such as payment status, payment method, transaction reference and limited card information such as the card type or final digits.

Payment providers may process additional financial information in accordance with their own privacy notices.

Communications

If you contact us, we may collect the information contained in your correspondence, including enquiries relating to:

• purchases;

• deliveries;

• returns;

• product support;

• personalisation;

• trade or hospitality;

• press enquiries; and

• other communications with FARRINGTON.

Technical and device information

When you visit our website, information may be collected automatically about your device and use of the site, including:

• IP address;

• browser type;

• device type;

• operating system;

• approximate location derived from an IP address;

• pages viewed;

• date and time of visits;

• referring pages or websites;

• interactions with the site; and

• cookie or similar technology identifiers.

Some of this information is collected through Shopify and other technologies used to operate, secure, measure and improve the website.

Marketing information

Where applicable, we may record:

• whether you have requested marketing communications;

• the type of communication you have requested;

• when and how your preference was recorded;

• whether you have unsubscribed or opted out; and

• information required to ensure we respect your marketing preferences.

Information we do not need

Please do not send us sensitive or special-category personal information unless it is genuinely necessary and we have requested it.

We do not normally need information concerning matters such as health, ethnicity, religion, political opinions, sexual orientation or biometric information in order to provide our products or services.

How we obtain your information

We may obtain personal information:

• directly from you when you place an order;

• when you contact us;

• when you submit information through our website;

• automatically when you use our website;

• through Shopify and payment-service providers;

• through delivery and logistics providers;

• from professional or commercial partners where appropriate; and

• from publicly available sources where there is a legitimate and lawful reason to do so.

Where we obtain personal information from a third party, we will handle it in accordance with applicable data-protection law.

Why we use your information and our lawful bases

UK data-protection law requires us to have a lawful basis for using personal information.

The principal ways in which we use personal information are set out below.

Processing and fulfilling orders

We use your information to:

• process orders;

• receive and confirm payment;

• arrange delivery;

• provide order updates;

• administer cancellations;

• process returns and refunds; and

• provide after-sales support.

Lawful basis: performance of a contract with you, or taking steps at your request before entering into a contract.

Customer service and enquiries

We use your information to respond to questions, provide product support and manage our relationship with you.

Lawful basis: performance of a contract where the communication relates to an order or potential order, and our legitimate interests in operating FARRINGTON and providing effective customer service in other circumstances.

Accounting, tax and legal obligations

We may retain and use transaction, customer and order information where required for:

• accounting;

• tax;

• statutory company records;

• regulatory obligations;

• responding to lawful requests; and

• establishing, exercising or defending legal claims.

Lawful basis: compliance with our legal obligations and, where applicable, our legitimate interests in protecting and administering the business.

Fraud prevention, security and protection of the business

We may process information to:

• protect our website;

• identify suspicious transactions;

• reduce fraud;

• prevent misuse;

• investigate security incidents; and

• protect FARRINGTON, our customers and others.

Lawful basis: our legitimate interests in operating a secure business, protecting our customers and preventing fraud, together with legal obligations where applicable.

Improving our website and services

We may use information about how visitors interact with the website to understand performance, identify problems and improve the customer experience.

Lawful basis: our legitimate interests in understanding and improving our website and services where the processing is proportionate and permitted without consent.

Where applicable law requires consent for a particular cookie or similar technology, we rely on consent instead.

Marketing

Where we send direct marketing, we may use your contact information to tell you about FARRINGTON products, editions, launches or related developments.

For electronic marketing to individuals, we will only send communications where:

• you have provided the required consent; or

• another lawful exception applies, such as the permitted existing-customer or “soft opt-in” provisions, where all relevant legal requirements are satisfied.

We will provide a straightforward means of opting out of electronic marketing.

Lawful basis under data-protection law: consent or our legitimate interests in promoting relevant FARRINGTON products where appropriate and lawful.

Electronic marketing is also subject to the Privacy and Electronic Communications Regulations.

You can withdraw your consent or opt out of marketing at any time.

Service communications relating to an existing order are not marketing and may still be sent where necessary.

Our legitimate interests

Where we rely on legitimate interests, those interests may include:

• operating and developing FARRINGTON;

• responding effectively to customers and enquiries;

• protecting the security of our website and transactions;

• preventing fraud and misuse;

• understanding how our website and services perform;

• maintaining appropriate business records;

• protecting our legal rights; and

• promoting our products to appropriate audiences where the law permits this.

We consider whether our interests are proportionate and whether your rights and interests override them before relying on this basis.

Shopify

Our online store is hosted and supported by Shopify.

Shopify provides the ecommerce infrastructure that enables us to operate our website, shopping bag and checkout, process orders and provide related functionality.

As a result, personal information submitted through the website may be processed by Shopify and companies providing services through the Shopify platform.

In some circumstances Shopify processes information on our behalf.

In other circumstances Shopify may act as an independent controller and use information for its own purposes in accordance with its own privacy documentation.

For further information about Shopify's own processing, you can review the Shopify Consumer Privacy Policy and the privacy controls provided by Shopify.

Payment providers

Payments are processed securely through the payment services available at checkout.

Payment providers may collect and process information necessary to:

• authorise payments;

• verify transactions;

• prevent fraud;

• process refunds; and

• comply with financial and regulatory obligations.

Those organisations may act as independent data controllers for some of their processing and will have their own privacy notices.

FARRINGTON does not ordinarily store full payment-card credentials.

Who we share personal information with

We do not sell customer personal information as a conventional data-broker business.

We may share personal information where reasonably necessary with the following categories of recipient.

Shopify

To host and operate our ecommerce services, shopping bag, checkout and order-management functions.

Payment providers

To process and administer payments, refunds and fraud-prevention measures.

Delivery and logistics providers

To deliver products and administer delivery enquiries, losses, damage or returns.

We provide only information reasonably required to fulfil the relevant delivery service.

Technology and professional service providers

We may use carefully selected providers for services such as:

• website hosting and infrastructure;

• email and communications;

• IT support;

• security;

• data storage;

• analytics;

• accounting;

• legal advice; and

• other professional services.

These organisations receive personal information only where reasonably necessary for the relevant service and subject to appropriate legal arrangements.

Marketing and analytics providers

Where we use third-party marketing, advertising or analytics technologies, personal information may be disclosed to or collected by the relevant providers.

Where consent is legally required for such technologies, we will use them only in accordance with your consent choices.

Public authorities and legal recipients

We may disclose personal information where reasonably necessary to:

• comply with law;

• comply with a court order or lawful regulatory request;

• respond to law-enforcement authorities;

• protect our legal rights;

• prevent or investigate fraud; or

• establish, exercise or defend legal claims.

Business transactions

If Sterling Northern Solutions Limited undergoes a reorganisation, financing, sale, merger or transfer of all or part of its business or assets, personal information may be disclosed to appropriate advisers, prospective parties and successors where lawful and necessary.

Cookies and similar technologies

Our website uses cookies and similar technologies to operate and secure the site and, where applicable, understand how it is used.

These technologies may be used for purposes including:

• maintaining shopping-bag and checkout functionality;

• security and fraud prevention;

• remembering choices;

• measuring website performance;

• understanding website usage; and

• advertising or personalisation where enabled.

Some technologies are necessary to provide services you request and may be used without consent.

UK law also permits certain limited uses without consent where the relevant legal exemption applies, including some forms of low-risk statistical measurement and functionality.

Where a cookie or similar technology requires your consent, we will ask for that consent before using it.

You can change available privacy or cookie choices through the controls provided on the website or through your browser settings.

Rejecting certain optional technologies should not prevent access to the core website, although disabling technologies that are strictly necessary for requested functions may affect those functions.

International transfers

Some of our service providers, including Shopify and organisations supporting ecommerce, technology and payment services, may process personal information outside the United Kingdom.

Where personal information is transferred to a country outside the UK, we take steps to ensure that the transfer is lawful.

Depending on the circumstances, this may include relying on:

• UK adequacy regulations;

• the UK International Data Transfer Agreement;

• the UK Addendum to approved standard contractual clauses; or

• another lawful transfer mechanism or exception.

Where another organisation acts as an independent controller, its own privacy notice should explain the transfer safeguards it uses.

You may contact us if you would like further information about safeguards relevant to your personal information.

How long we keep personal information

We do not keep personal information for longer than reasonably necessary for the purposes for which it was collected, subject to legal, accounting and regulatory requirements.

Retention periods depend on the type of information and why we hold it.

Order and accounting records

Information forming part of our accounting, transaction and company records will generally be retained for at least six years from the end of the relevant company financial year, or longer where required by law or reasonably necessary in connection with an ongoing matter.

Customer-service correspondence

Customer-service and product-support correspondence will generally be kept for as long as reasonably necessary to resolve the enquiry and manage any related order, warranty, dispute or legal obligation.

Marketing information

Marketing information will normally be retained while you remain subscribed or while we otherwise have a lawful reason to use it.

If you unsubscribe or object to marketing, we may retain limited information on a suppression list so that we can ensure your preference continues to be respected.

Technical and security information

Technical, analytics and security records are retained for periods appropriate to their purpose, taking account of security needs, legal obligations and the settings of relevant service providers.

Where information is no longer required, we will delete it or anonymise it where reasonably practicable.

Your rights

Depending on the circumstances, UK data-protection law gives you rights in relation to your personal information.

These may include the following.

Right of access

You may ask us whether we process your personal information and request a copy of personal information we hold about you.

Right to rectification

You may ask us to correct personal information that is inaccurate or incomplete.

Right to erasure

In certain circumstances, you may ask us to delete your personal information.

This right is not absolute. We may need to retain information where there is a legal obligation or another lawful reason to do so.

Right to restriction

In certain circumstances, you may ask us to restrict how we use your personal information.

Right to data portability

Where applicable, you may have the right to receive personal information you provided to us in a structured, commonly used and machine-readable form or ask for it to be transferred to another organisation.

Right to object

You may have the right to object to processing based on our legitimate interests.

You have a particular right to object to the use of your personal information for direct marketing.

Right to withdraw consent

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Exercising your rights

To exercise a data-protection right, contact:

studio@thefarrington.uk

Please describe the request clearly enough for us to understand what you are asking us to do.

We may need to request reasonable information to confirm your identity before acting on certain requests. This is intended to protect personal information against unauthorised disclosure.

We will respond within the period required by applicable law.

There is normally no fee for exercising your data-protection rights, although the law permits fees or refusal in certain limited circumstances.

Automated decision-making

FARRINGTON does not currently use personal information to make solely automated decisions that produce legal effects, or similarly significant effects, for customers.

Shopify, payment providers or fraud-prevention providers may use automated systems to identify potentially fraudulent or suspicious activity. Their own privacy information provides further information about processing for which they are independently responsible.

Children

FARRINGTON's website and products are intended for a general adult consumer audience and are not specifically directed at children.

We do not knowingly seek to collect personal information from children where there is no lawful reason to do so.

If you believe a child has provided personal information to us inappropriately, please contact us.

Keeping your information secure

We take appropriate technical and organisational measures intended to protect personal information against:

• unauthorised access;

• accidental loss;

• misuse;

• alteration; and

• unauthorised disclosure.

We also use service providers, including Shopify and payment providers, whose systems incorporate security measures appropriate to ecommerce services.

No internet transmission or storage system can be guaranteed to be completely secure.

Please do not send payment-card details, passwords or other unnecessary sensitive information to us by ordinary email.

Third-party websites

Our website may contain links to websites or services operated by other organisations.

Those organisations are responsible for their own privacy practices.

This Privacy Policy does not govern third-party websites merely because we provide a link to them.

We recommend reviewing the privacy information provided by the relevant organisation before giving it personal information.

Complaints

If you have a concern about how FARRINGTON has handled your personal information, please contact us first so that we have the opportunity to investigate and respond.

Contact:

studio@thefarrington.uk

You also have the right to make a complaint to the UK's data-protection regulator, the Information Commissioner's Office (ICO).

You do not have to contact us before making a complaint to the ICO.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to our services;

• changes to the technologies we use;

• changes to our data-processing activities; or

• legal or regulatory developments.

When we make changes, we will update the date shown at the beginning of this policy.

Where a change materially affects how we use personal information, we will provide additional notice where required by law.

Contact us

Questions about this Privacy Policy, our use of personal information or your data-protection rights can be sent to:

FARRINGTON
A trading name of Sterling Northern Solutions Limited
Registered in England and Wales
Company No. 15066575
Unit 9 Undershore Works
Brookside Road
Bolton
BL2 2SE
United Kingdom

studio@thefarrington.uk