Privacy Policy
Last Updated: 17 June 2026
Introduction
Studio DMP Ltd (“we”, “our”, “us”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, create an account, place an order, contact us, or otherwise interact with our services.
For the purposes of UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Studio DMP Ltd is the Data Controller of your personal data.
Data Controller Details
Studio DMP Ltd
Email: team@halmogrills.com
Address: Studio DMP Limited, Bennett Corner House, 33 Coleshill Street, Sutton Coldfield, West Midlands, United Kingdom, B72 1SD
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us using the details above.
Information We Collect
We may collect and process the following categories of personal information:
Information You Provide
When placing an order, creating an account, or contacting us, we may collect:
- Full name
- Billing address
- Shipping address
- Email address
- Telephone number
- Account login details
- Order information and purchase history
- Information submitted through contact forms or customer support enquiries
Information Collected Automatically
When you use our website, we may automatically collect:
- IP address
- Browser type and version
- Device information
- Operating system
- Website usage information
- Pages viewed and actions taken on the website
- Referral URLs
- Cookie and tracking information
How We Use Your Information
We use personal information for the following purposes:
To Process and Fulfil Orders
- Process payments
- Deliver products and services
- Provide order confirmations and updates
- Manage returns and refunds
- Provide customer support
To Manage Customer Accounts
- Create and maintain customer accounts
- Allow access to order history
- Improve account security
To Communicate With You
- Respond to enquiries
- Provide customer support
- Send service-related communications
Marketing Communications
Where you have provided consent, we may send information about products, services, promotions or updates.
You may withdraw your consent or unsubscribe at any time.
Website Administration and Security
- Maintain website functionality
- Detect fraud and abuse
- Monitor website performance
- Protect customer accounts and data
Legal and Regulatory Compliance
- Meet accounting, tax and legal obligations
- Maintain business records
- Respond to lawful requests from authorities
Lawful Bases for Processing
Under UK GDPR, we rely on the following lawful bases:
Contract
We process personal information where necessary to fulfil orders, manage accounts, provide services, and respond to pre-contract enquiries.
Legal Obligation
We process information where required to comply with legal obligations, including accounting, taxation, and consumer protection requirements.
Legitimate Interests
We process information for legitimate business purposes including:
- Website security
- Fraud prevention
- Customer service
- Business administration
- Website improvement and analytics
We ensure that these interests do not override your rights and freedoms.
Consent
Where required by law, we rely on your consent for:
- Marketing communications
- Non-essential cookies and tracking technologies
You may withdraw consent at any time.
Payment Processing
Payments made through our website are processed securely by Stripe.
We do not store or have access to your full payment card details.
When processing payments, Stripe may collect and process personal information including:
- Name
- Billing information
- Payment details
- IP address
- Device information
- Transaction information
Stripe acts as an independent controller for certain aspects of payment processing and handles data in accordance with its own Privacy Policy.
Data Processors and Third Parties
We use trusted third-party service providers to help operate our business and website. These may include:
- Stripe (payment processing)
- Website hosting providers
- Website maintenance providers
- Email service providers
- Analytics providers
- Backup and security providers
These organisations only process personal information where necessary to provide services on our behalf and are required to keep your information secure and confidential.
We do not sell your personal information to third parties.
International Transfers
Some of our service providers may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK data protection laws.
Data Retention
We retain personal information only for as long as necessary for the purposes for which it was collected.
Typical retention periods include:
- Customer enquiries: up to 24 months
- Customer account information: while the account remains active
- Order records: up to 7 years for accounting and tax compliance
- Marketing consent records: until consent is withdrawn
- Website analytics data: in accordance with analytics platform settings
Where information is no longer required, it will be securely deleted or anonymised.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to:
- Enable website functionality
- Remember user preferences
- Improve website performance
- Analyse website traffic
- Support security and fraud prevention
Where required by law, we will obtain your consent before placing non-essential cookies on your device.
Further information can be found in our Cookie Policy.
Your Rights
Under UK GDPR, you have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your information
- Restrict processing
- Object to processing
- Request transfer of your information
- Withdraw consent where processing is based on consent
To exercise any of these rights, please contact us.
We may request proof of identity before responding to requests.
Data Security
We implement appropriate technical and organisational measures to protect personal information against:
- Unauthorised access
- Loss
- Misuse
- Disclosure
- Alteration
- Destruction
Access to personal information is limited to individuals who require it for legitimate business purposes.
Where required by law, we will notify affected individuals and regulators of relevant personal data breaches.
Children’s Privacy
Our website and services are intended for individuals aged 16 and over.
We do not knowingly collect personal information from children under the age of 16.
Complaints
If you have concerns about how we handle your personal information, please contact us first.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Any updates will be published on this page together with the revised “Last Updated” date.