Privacy policy

Privacy Policy

Last updated: 27 April 2026


Introduction

The Pull House is a trading name of Higgins & Morris Ltd, a company registered in England & Wales (Company No. 10589994). Our registered office is 167-169 Great Portland Street, 5th Floor, London, W1W 5PF.

This Privacy Policy describes how we collect, use, store, and disclose your personal information when you visit, use, or make a purchase through our website at thepullhouse.co.uk (the "Services"). The Pull House is powered by Shopify, which provides the technology platform enabling us to offer the Services to you.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your personal information as described.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Data Controller

For the purposes of UK GDPR and the Data Protection Act 2018, Higgins & Morris Ltd (trading as The Pull House) is the data controller of any personal information we collect about you.

Contact details:

  • Higgins & Morris Ltd

  • Registered office: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF

  • Company Registration No: 10589994

  • Email: hello@thepullhouse.co.uk

Personal Information We Collect

We may collect the following categories of personal information depending on how you interact with the Services:

  • Contact details: name, billing address, shipping address, phone number, and email address.

  • Payment information: payment card details and transaction information (processed securely through Shopify Payments and other payment providers — we do not store full card numbers).

  • Account information: username, password, preferences, and settings (where you create an account).

  • Transaction information: items viewed, added to cart, purchased, returned, exchanged, or cancelled, and order history.

  • Communications: information you include when contacting us via email, contact form, or other channels.

  • Device and usage information: IP address, browser type, device identifiers, pages visited, and how you interact with our website.

How We Collect Personal Information

We collect personal information from the following sources:

  • Directly from you when you create an account, place an order, contact us, or otherwise interact with the Services.

  • Automatically through your device when you visit our website, including through cookies and similar technologies.

  • From our service providers, including Shopify, payment processors, and shipping carriers.

  • From marketing partners and analytics providers (where you have consented).

How We Use Your Personal Information

We use your personal information for the following purposes, in accordance with the lawful bases under UK GDPR:

  • To provide the Services and fulfil our contract with you — including processing orders, taking payment, arranging delivery, managing returns, and providing customer support.

  • To communicate with you about your orders, account, or enquiries.

  • To send marketing communications by email, where you have given us consent to do so. You can withdraw consent at any time using the unsubscribe link in any marketing email.

  • To improve our website and Services through analytics and performance monitoring (legitimate interest).

  • To prevent fraud, ensure security, and protect our business and customers (legitimate interest).

  • To comply with our legal obligations, including tax, accounting, and consumer protection laws.

How We Share Your Personal Information

We share personal information with the following categories of recipients:

  • Shopify, which hosts our website and processes orders and payments on our behalf.

  • Payment processors (such as Shopify Payments, PayPal, and similar) for processing transactions securely.

  • Shipping carriers for delivery of orders.

  • Marketing and analytics providers (such as Google Analytics and Pinterest), where applicable and with appropriate consent.

  • Professional advisers (accountants, lawyers) where necessary.

  • Government authorities or law enforcement, where legally required.

  • Any successor entity in the event of a merger, acquisition, or sale of business assets.

We do not sell your personal information to third parties.

Relationship with Shopify

Our website is hosted by Shopify. When you interact with our Services, certain personal information is processed by Shopify in order to operate the platform. Shopify may also use certain enhanced features that involve processing of personal information across the Shopify network. For details, see Shopify's Consumer Privacy Policy at privacy.shopify.com.

International Transfers

Some of our service providers (including Shopify) may process your personal information outside the United Kingdom. Where this happens, we rely on recognised transfer mechanisms — such as the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or transfers to countries determined by the UK government to provide an adequate level of protection — to ensure your personal information remains protected.

How Long We Keep Your Personal Information

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Order and transaction records are typically kept for a minimum of six years to comply with HMRC requirements. Marketing data is kept until you withdraw consent or we determine it is no longer needed.

Your Rights Under UK GDPR

You have the following rights in relation to your personal information:

  • Right of access — to request a copy of the personal information we hold about you.

  • Right to rectification — to ask us to correct inaccurate or incomplete information.

  • Right to erasure — to ask us to delete your personal information in certain circumstances.

  • Right to restriction — to ask us to restrict processing in certain circumstances.

  • Right to data portability — to receive a copy of your personal information in a portable format.

  • Right to object — to object to processing based on legitimate interests, including direct marketing.

  • Right to withdraw consent — where we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, contact us at hello@thepullhouse.co.uk. We will respond within one month, in line with UK GDPR requirements.

If you are unhappy with how we have handled your personal information, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.

Cookies

We use cookies and similar technologies to operate our website, remember your preferences, analyse traffic, and (with your consent) deliver relevant marketing. You can manage your cookie preferences through the cookie banner displayed on our website, or by adjusting your browser settings.

Children's Data

Our Services are not intended for children under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Security

We take appropriate technical and organisational measures to protect your personal information against loss, misuse, unauthorised access, disclosure, alteration, and destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. Any updates will be posted on this page with a revised "Last updated" date. Material changes will be notified to you in line with applicable law.

Contact

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

  • Email: hello@thepullhouse.co.uk

  • Post: Higgins & Morris Ltd, 167-169 Great Portland Street, 5th Floor, London, W1W 5PF