Privacy Policy

Effective date: 27 October 2026

Hearth & Hush (“we,” “us,” or “our”) respects your privacy. This page explains what data we collect when you visit hearthandhush.co.uk, why we collect it, how it’s stored, and the rights you have under EU and UK data protection law.

Who is the data controller

Hearth & Hush, contactable at hello@hearthandhush.co.uk, is operated from the Czech Republic.

For the purposes of the EU General Data Protection Regulation (GDPR) — and the UK GDPR, which continues to apply in respect of our UK-based readers — we are the data controller for the personal data described below.

What data we collect

We try to collect as little as possible. In practice that means:

Data you provide directly

  • Email address — if you sign up to our newsletter via the on-site form (used only to send the newsletter; we do not share or sell it)
  • Email and message — if you contact us via our contact form

Data collected automatically

  • Cookies and analytics — see the Cookies section below
  • Server logs — your IP address, browser type, pages visited, and the time of your visit are logged by our hosting provider (Hostinger) for security and abuse-prevention purposes. These logs are retained for approximately 30 days and are not used for marketing.

Data we do not collect

  • We do not sell or rent your data
  • We do not run banner advertising or behavioural-tracking ad networks
  • We do not collect financial information (purchases happen on the retailers’ sites, not ours)

Cookies

A cookie is a small text file stored on your device. We use:

  • Strictly necessary cookies — required for the site to function (e.g. session management). These don’t require consent.
  • Analytics cookies — Google Analytics 4 and Microsoft Clarity, used to understand which pages are popular and how the site performs. These are anonymised where possible. We ask consent for these via the cookie banner on your first visit.
  • Affiliate cookies — when you click a link to a retailer, the retailer’s affiliate network (Awin, Amazon Associates, Skimlinks) sets a cookie on your browser that lets them attribute a sale back to us if you buy. See our affiliate disclosure for details. These are managed via the cookie banner.

You can withdraw or change consent any time by clicking the “Cookies” link in our footer.

Lawful basis for processing

Under the GDPR, we process your data on the following lawful bases:

  • Consent — for newsletter sign-ups, optional cookies (analytics, affiliate)
  • Legitimate interests — for security logs and strictly-necessary cookies, where our interest in running a secure, functional site is balanced against your reasonable expectations as a visitor

Third parties we share data with

  • Hostinger — our hosting provider (server logs only)
  • Google Analytics 4 — anonymised analytics
  • Microsoft Clarity — anonymised heatmap analytics
  • Substack / ConvertKit — newsletter delivery (only the email address you submitted)
  • Affiliate networks (Awin, Amazon Associates, Skimlinks) — handle their own cookies for sales tracking, governed by their own privacy policies

We do not share your data with any other third party without your explicit consent.

How long we keep your data

  • Newsletter email addresses — for as long as you remain subscribed. You can unsubscribe at any time using the link in every email.
  • Contact-form messages — for up to 12 months from receipt, after which they are deleted.
  • Server logs — approximately 30 days.
  • Analytics data — Google Analytics 4 retains data for up to 14 months by default.

Your rights

Under the GDPR (and the equivalent UK GDPR for our UK readers) you have the right to:

  • Access — request a copy of the personal data we hold on you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data (“the right to be forgotten”)
  • Restriction — ask us to pause processing
  • Portability — receive your data in a machine-readable format
  • Object — object to processing on grounds of legitimate interests
  • Withdraw consent — at any time, where we relied on your consent

To exercise any right, email hello@hearthandhush.co.uk. We’ll respond within 30 days.

If you’re unhappy with how we’ve handled your data, you can complain to a data protection authority. If you’re in the EU, that’s your local authority or the Czech Úřad pro ochranu osobních údajů (ÚOOÚ) at uoou.gov.cz. If you’re in the UK, that’s the Information Commissioner’s Office at ico.org.uk.

Children

Hearth & Hush is not directed at children under 13 and we do not knowingly collect data from children. If you believe a child has submitted information through our site, contact us and we’ll delete it.

Changes to this policy

We may update this policy occasionally. The “effective date” at the top will reflect the most recent change. Material changes will be flagged in the cookie banner or via email to newsletter subscribers.

Contact

For any privacy-related question, email hello@hearthandhush.co.uk.