Our Privacy Policy
Privacy Policy
Last updated 21st September, 2026.
Who Are We:
When we refer to 'we’ (or 'our’ or 'us’), that means FOXFORD. Belasa Weavers Ltd is our legal company name, but we are trading as FOXFORD. Throughout this document, we refer to ourselves as FOXFORD.
Privacy Policy Overview:
This Privacy Policy describes how and why we, as Data Controller, obtain, store and
process personal data. 'Personal data’ means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. We commit to processing your personal data fairly, lawfully, and transparently. In the spirit of data privacy principles, we will only collect and use your personal data for the following purposes, to:
· Provide Our Services
· Improve Our Services
· Make our marketing more relevant
· Meet our legal responsibilities
Please do not hesitate to contact us if you have questions in addition to the information
provided in this Privacy Policy by email to customerservice@foxford.com
The Personal Data We Collect:
Depending on the type and level of engagement you have with us, we may collect the
following categories of personal data:
· Identifying and Demographic Information: such as your full name, date of birth,
email address, address (if provided for billing or delivery) and phone number (if provided)
· Billing Information: such as payment preferences, address, bank account details
(if provided)
· Communications: such as records of our interactions with you using one or multiples of the following; direct messages, emails, posts, phone conversations
· User Feedback: while using our services, occasionally you may be asked to provide feedback or to leave a product or company review. Providing this feedback is entirely optional.
The Technical Data We Collect:
When you visit our website, we collect technical data such as:
· Usage data: (if permitted) we collect certain information related to your device,
such as your device’s IP address, what pages your device visited, and the time
that your device visited our website (for more information please see 'Our Use of
Analytics' section)
· Cookies: (if permitted) your IP Address and other information provided to us by
cookies (for more information please see our Cookies Policy)
· Video Recordings: such as CCTV footage in any of our physical premises.
Please contact us at customerservice@foxford.com for more information on our data retention policy for CCTV footage.
How We Collect Your Data:
We may collect your personal data in one of the following ways:
· When you create an account with us
· When you provide additional information directly ? our products and services
· When you visit our website
· When you express an interest in using our services
· When you contact us for service-related queries
· When you engage with us on social media
· When you review our services
· When you interact with our website (see our Cookies Policy for more details)
· When you apply for an employment vacancy with us
· When you subscribe to our newsletter or blog
· When you contact us with queries using our website chatbot
· When you buy products/services using our online checkout
· We may also receive data about you from various third parties, including:
Technical data from analytics providers.
Please see further information in the section entitled 'Our Use of Cookies’ Contact and/or Transactional Data from our trusted third-party providers.
Please see further information in the section entitled 'How We Share Your Data.'
How We Use Your Data:
We will only collect and process your personal data where we have a legal basis to do so. As a data controller, the legal basis for our collection and use of your personal data varies depending on the manner and purpose for which we collected it. We will only collect personal data from you when:
· We have your consent to do so, or
· We need your personal data to perform a contract with you, or
· We are pursuing our legitimate interests in a way that you might reasonably expect to be a part of running our business and that does not significantly impact your interests, rights, and freedoms. For example, communicating with you if we have a sufficient legal ground based on the e-marketing laws in your country.
· We have a legal obligation to collect or disclose personal data from you (for example, in suspected instances of fraud we may need to give personal data to relevant government bodies).
Why We Process Your Personal Data:
· Setting up an account with us (Legal basis: Performance of a Contract)
· Providing, operating, and maintaining our services (Legal basis: Performance of a Contract)
· Providing communications to existing customers or subscribed users (Legal basis: Consent or Legitimate Interest)
· Processing and completing transactions, and sending related information, including transaction confirmations and invoices. (Legal basis: Performance of a contract)
· Managing our customers’ use of our services, responding to enquiries and comments, and provide customer service and support. (Legal basis: Performance of a contract or Legitimate Interest)
· Sending customers technical alerts, updates, security notifications, and administrative communications. (Legal basis: Performance of a contract)
· Analytics to improve our website, products, services, and features for a better user experience. (Legal basis: Legitimate Interest or Consent - see the "Our Use of Analytics" section for more information)
· Investigating and preventing fraudulent activities, unauthorised access to our services, and other illegal activities. (Legal basis: Legal Obligation)
· Email marketing: Where we have a legal basis, we may send emails about our store, new products, and other updates (Legal basis: Legitimate Interest or
· Consent - see our “Marketing Preferences” section for more information).
How We Share Your Data:
We sometimes share your personal data with our trusted categories of third parties we
use to conduct our business. Our trusted categories of third parties include:
· Website provider
· Cloud service (SaaS) providers
· Social media providers
· Professional services providers (e.g., our lawyers, accountants, and insurance
providers)
· E-marketing providers
· Advertising providers
· Recruitment partners
· Payment providers
A list of our data sub-processors can be found at the bottom of this article.
As part of fraud monitoring and prevention, we may be legally required to share your
personal data with government bodies and law enforcement. Please note that these
bodies may retain a record of the information that we provide to them for this purpose.
Marketing:
We may send you direct marketing communications, product information and promotional offers:
· If you have consented to receiving such communications from us
· If we have an existing business relationship with you and can rely on your implied consent
· If you are from a country where the laws permit us to send you such communications based on our legitimate interests, if you have bought a product or service from us, and have not opted out of receiving communications from us (for example the EEA or UK)
· If you are from a country where the laws permit us to send you such communications
The marketing communications we send will be in relation to our own products or services; your personal data will not be used for third-party direct marketing unless separate explicit consent has been collected for that or you are from a country where the laws permit such processing.
You will always have full control of your marketing preferences. If you do not wish to continue receiving marketing information from us at any time:
· You can unsubscribe by using the unsubscribe directions or link included in marketing communication from us, or
· You may withdraw your consent by contacting us by e-mail at customerservice@foxford.com
Customers located in certain regions, such as the EEA and UK, also have the right to object to their personal data being processed for direct marketing purposes at any time.
Please note that if you are located in the United Kingdom, our ability to send you electronic marketing communications (including email and SMS) is also governed by the Privacy and Electronic Communications Regulations 2003 (PECR). Under PECR, we will only send you marketing communications by email or SMS if you have given us your prior consent to do so, or if you are an existing customer who purchased a similar product or service from us and were given a clear opportunity to opt out of such communications at the time of purchase and in every subsequent communication. Where we rely on this soft opt-in exemption, you will always be given a simple means to opt out.
If you would like to object you can contact us by e-mail at customerservice@foxford.com.
We will process all requests as soon as possible, but please note that due to the nature of our IT systems and servers it may take up to 72 hours for any opt-out request to be implemented.
Our Use of Cookies:
Our website and mobile app use cookies and tags. A cookie is a small text file that can be stored by your browser on the device you use to access internet and allows the browser to pass small amounts of information about user behaviour on the given website to a web server. Tags are pieces of code that exist on web pages and collect information about usage of the web pages.
At FOXFORD, we use our own cookies and tags as well as those from third parties to make your browsing experience better and facilitate the smooth operation of the website, such as the use of the basket function or to automatically log you in when you visit (with your permission). We also use cookies/tags to monitor visits to our website and continuously look for places to improve your website experience. Our marketing partners also use cookies and tags to monitor the performance of our advertising and to serve appropriate advertisements to you on other websites. We will never share any personal information about you with these third parties, and the cookies and tags used maintain your anonymity.
When you first visit our website, you will be presented with a cookie banner that allows you to accept or reject non-essential cookies or manage your cookie preferences. We will only place non-essential cookies on your device where you have provided your consent. Essential cookies, which are necessary for the operation of our website, are used without consent where permitted by law. You can change your cookie preferences at any time by using our cookie settings or by adjusting your browser settings. For more information, please see our Cookies Policy.
Our Use of Analytics:
We use analytics to continuously enhance our website, products, services, and features, ensuring an improved user experience. To achieve this, we rely on third-party tools and services that provide valuable insights and analysis of user behaviour. These third-party tools help us collect information automatically when you visit our website (where we have a legal basis to do so). The data includes details such as device type, browser, IP address, pages visited, and the date and time of your visit. By analysing this information, we gain valuable insights into user preferences, interactions, and usage patterns. Through the use of these analytics tools, we can optimize website performance, personalise content, and enhance our offerings to better meet customer expectations.
For example, where users have accepted cookies, we enhance our marketing efforts
using Klaviyo's segmentation feature. This allows us to segment our customer base and create targeted marketing campaigns. We categorise customers based on their preferences, behaviours, and purchase history, ensuring that we send personalised and relevant content to individuals (where we have a legal basis to do so). The information used for segmentation may include but is not limited to email addresses, browsing activity on our website, product preferences, order history, and demographic data. This enables us to provide tailored promotions, discounts, and product recommendations,
increasing the overall shopping experience for our customers.
Our Use of Targeted Advertising:
We use targeted advertising tools to advertise our services, including (but not limited to):
- Google Analytics
- META (Facebook & Instagram)
- TikTok
- Quantcast
- YouTube
We use these tools to deliver relevant content to you in marketing communications (where applicable), and to measure the effectiveness of the advertising provided.
If you would like any further information about the data collected by these third parties or would like to opt-out of targeted advertising, please contact us by email to customerservice@foxford.com
Behavioral Advertising:
We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page here
We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (which you may consent to, depending on your location).
We use Shopify Audiences to help us show ads on other websites with our advertising partners to buyers who made purchases with other Shopify merchants and who may also be interested in what we have to offer. We also share information about your use of the Site, your purchases, and the email address associated with your purchases with Shopify Audiences, through which other Shopify merchants may make offers you may be interested in.
We use retargeting and behavioral advertising through Meta, Google, Bing and Quantcast.
You can opt out of targeted advertising by:
FACEBOOK – here
GOOGLE – here
BING – here
QUANTCAST -here
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal here
Do Not Track:
Please note that because there is no consistent industry understanding of how to respond to ‘Do Not Track’ signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.
Legal Disclaimer:
Though we make every effort to preserve user privacy, we may need to disclose personal information when required by law wherein we have a good-faith belief that such action is necessary to comply with a current judicial proceeding, a court order or legal process served on our web sites.
Data transfers:
Our servers are located in the European Union. However, the personal data we collect from you may be transferred to, and stored at, destinations outside the European Economic Area ("EEA") using legally provided mechanisms to lawfully transfer data across borders. It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the provision of our services to you. We will take all steps necessary to ensure that your data is treated securely and in accordance with this privacy notice.
Please contact us via email at customerservice@foxford.com if you want further information on the countries to which we may transfer personal data and the specific mechanism used by us when transferring your personal data outside the EEA.
Retaining Your Data:
We will not keep your personal data for longer than is necessary and when we no longer need to keep it, we will securely destroy, delete or anonymise it in line with our Data Retention policy.
Having obtained your consent (or other legal basis) to contact you, we will retain your personal data for marketing and analysis purposes until you withdraw your consent or unsubscribe. If you choose to withdraw your consent or unsubscribe from marketing, we will delete your personal data from our systems, unless we have another legal basis to retain it, which may include performance of our contract with you or to maintain your contact details on an 'unsubscribed list' to ensure we do not send you further communications.
We may need to retain your personal data to satisfy our legal obligations, to deal with complaints and queries, in order to resolve, litigate or defend a dispute and to prevent fraud and abuse.
Links to Other Websites and Third Parties:
Our website may include links to social media platforms and other websites. If you follow a link to any of these platforms or websites, please note that their own privacy policies will apply and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to their platforms or websites.
In order to provide and improve our online store and customer experience, we may use trusted third-party applications and services that integrate with our Shopify platform. These applications may process personal data on our behalf to support functions such as order fulfilment, customer support, payment processing, marketing, analytics, product reviews, loyalty programmes, and website functionality. We only use third-party providers where we have a lawful basis to do so and require them to process personal data in accordance with applicable data protection laws and appropriate contractual safeguards. These providers are only permitted to use your personal data for the purposes of providing services to us and not for their own independent marketing purposes. Examples of Third-Party apps being used across foxford.com include Klaviyo, Smiles.io (loyalty app) and Judge.me (reviews app).
Information Security:
To protect your information, we have policies and procedures in place to make sure that only authorised personnel can access the information, that information is handled and stored in a secure and sensible manner and all systems that can access the information have proportionate and reasonable security measures in place.
While we take commercially reasonable measures to ensure the safety and security of your data, due to the inherent risks with the Internet, we are unable to warranty the absolute security of your data when using our services.
When our order form asks users to enter sensitive information (such as credit card number), that information is encrypted and is protected with the best encryption software in the industry – SSL. While on a secure page, such as our order form, the lock icon on the bottom of Web browsers such as Netscape Navigator and Microsoft Internet Explorer becomes locked, as opposed to un-locked, or open, when users are just ‘surfing’. While we use SSL encryption to protect sensitive information online, we also do everything in our power to protect user-information off-line.
The communication between your browser and our website uses a secure encrypted connection wherever your personal data is involved.
We have put in place physical, electronic, and managerial security procedures in the storage and disclosure of your personal data to protect it against accidental loss, destruction or damage. Nevertheless, any data transmission over the internet or by any other means can never be fully secure, such is the character of the internet, and provision of personal data by you to us is at your own risk. We take all reasonable measures to protect your personal data by putting appropriate technical and operational security measures in place.
When we disclose your personal data to trusted third parties (for the purposes set out in this Privacy Policy) and our Data Sub-Processors, we require all third parties to have appropriate technical and operational security measures in place to protect your personal data, and we work with them to ensure that your data privacy rights are respected. Where your personal data is shared with a third party, it must only be used for the purposes for which it was supplied.
In the unfortunate event of a personal data breach, we will notify you and any applicable data protection authority when we are legally required to do so.
Transfers of your information out of the EEA:
We may from time to time need to transfer your personal information to support partners located outside the European Economic Area, for the purpose of ensuring our websites are operating correctly or in relation to third parties to whom we share your data. Any transfer of your data will be subject to adequate levels of protection that will safeguard your privacy rights and give you remedies in the unlikely event of a security breach. For more information on how data transfers comply with GDPR, see Shopify’s GDPR White paper:
https://help.shopify.com/en/manual/your-account/privacy/GDPR.
Your Rights:
You have the following rights with regards to the information we hold about you. Please note, that in order to process any of the requests listed below, we may need to verify your identity for your security.
- The right to access information we hold about you
- The right to correct and update the information we hold about you
- The right to request that we delete the information we hold about you
- The right to object to processing of your data
- The right to ask us to stop contacting you with direct marketing
- The right to object to automated decision making / profiling
- The right to complain – you can make a complaint to us by contacting us by email to customerservice@foxford.com.
Automatic Decision-Making:
If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.
We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data. Our processor, Shopify, uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.
Services that include elements of automated decision-making include:
· Temporary blacklist of IP addresses associated with repeated failed transactions. This blacklist persists for a small number of hours.
· Temporary blacklist of credit cards associated with blacklisted IP addresses. This blacklist persists for a small number of days.
Consent:
Where we require your consent to process your information, we will ask you to make a positive indication (e.g. to tick a box or insert your contact details on the relevant form or web page requiring consent). By actively providing us with your consent, you are stating that you have been informed as to the type of personal information that will be processed, the reasons for such processing, how it will be used, for how long it will be kept, who else will have access to it and what your rights are and that you have read and understood this privacy policy.
Sharing your information:
We understand that you care about the use and storage of your personal information and we value your trust in allowing us to do this. We would not want to share your personal information with anyone else unless we have your express consent. We will never disclose, rent, trade or sell your personal information to any third parties for their marketing purposes.
We do disclose or transfer your data or personal information to other companies, data processors or agents employed by us to perform any necessary functions on our behalf (such as fulfilling our contracts with you, hosting and maintaining our website, providing us with data management systems, market research, customer satisfaction surveys and support services), but they are bound by similar terms to those set out in our privacy policy and may not use this information for their own purposes.
We use Google Analytics to monitor how customers use www.foxford.com – this information cannot in anyway personally identify a customer other than his/her general geographical location. You can read more about how Google uses your personal information here https://www.google.com/intl/en/policies/privacy/.
We use Shopify to power our online store. You can read more about how Shopify uses your personal information here https://www.shopify.com/legal/privacy.
We may also provide aggregate statistics about our customers, sales, traffic patterns and related site information to reputable third parties in order to better understand our services, website and overall customer satisfaction which may include personally identifying information.
Sale or Merger:
We may share your personal information as part of a merger or acquisition. If FOXFORD is involved in a merger, financing, transaction or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets, or in the event of a liquidation, insolvency, bankruptcy, or receivership, we may share your information with that company before and after the transaction closes. In such a case, unless otherwise directed by applicable law, your information would remain subject to the terms of the applicable privacy policy in effect at the time of such transfer. You will be notified of any such changes in advance.
Children:
While our services are designed for a general audience, we will not knowingly collect any data from children under the age of 16 or sell products to children, without the consent of a parental guardian to do so. If you are under the age of 16 and we do not have the consent of a parental guardian, you are not permitted to use or submit your data to the website.
Changes to this Privacy Notice:
We may change this policy from time to time, to reflect how we are processing your data. If we make significant changes, we will make that clear on our website or by some other means of contact such as email, so that you are able to review the changes before you continue to use our services.
Contact Details/Complaints:
After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by email to customerservice@foxford.com or by post to Customer Service, FOXFORD, Providence Road, Foxford, Co Mayo, Ireland F26 H9E4.
If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority. You can contact your local data protection authority, or our supervisory authority here https://www.dataprotection.ie/en/individuals/exercising-your-rights/raising-concern-commission.
List of Data Sub-Processors:
Below is a list of our active and trusted Sub-Processors. From time to time, we may need to change providers as our e-commerce business grows and evolves, any changes will be updated here.
Dataships
Dataships are an Irish-based technology company that specialise in data privacy. Dataships provide us with software that automates a number of our data privacy (GDPR) obligations. This software is featured on our website in the form of a Privacy Centre. It provides our customers with a portal where they can view key privacy related documents (e.g. Privacy Policy) and exercise many of their Data Privacy Rights. For more information about Dataships, please visit
Google Analytics
Google Analytics is a web analytics service offered by American multinational company, Google LLC. It tracks and reports website traffic, currently as a platform inside the Google Marketing Platform brand.
For more information about Google Analytics, please visit:
https://analytics. google.com/
or to learn how Google uses data when you use their partners' sites or apps please visit
https://policies.google.com/technologies/partner-sites
Instagram is a photo and video sharing social networking service owned by American company Meta. The app allows users to upload media that can be edited with filters and organised by hashtags and geographical tagging. We use Instagram to reach more users and advertise our products.
For more information about Instagram, please visit their website at
Judge.me
Judge.me is a product reviews app for Shopify stores. It helps e-commerce merchants automatically collect and display customer text, photos and video reviews to build trust across their websites.
https://judge.me/
Klaviyo
Klaviyo is an American company, based in Boston, Massachusetts, that provides marketing automation tools. We use Klaviyo to help us perform activities such as create personalized emails and SMS, analyse customer data and marketing performance, and manage e-commerce information.
For more information about Klaviyo, please visit
Shopify
Shopify Inc. is a Canadian multinational e-commerce company headquartered in Ottawa, Ontario. It is also the name of its proprietary e-commerce platform for online stores and retail point-of-sale systems.
For more information about Shopify, please visit
Smiles.io
Smile.io is a leading e-commerce loyalty and rewards platform. It allows online merchants to build custom points, VIP tiers, and referral programs. Businesses use it to turn one-time shoppers into repeat, high-value customers by rewarding them for making purchases, creating accounts, or engaging on social media.
TikTok
TikTok, known in China as Douyin, is a short-form video hosting service owned by Chinese company ByteDance. It hosts a variety of short-form user videos, from genres like pranks, stunts, tricks, jokes, dance, and entertainment with durations from 15 seconds to ten minutes. We use TikTok to reach more users and advertise our new products.
For more information about TikTok, please visit their website at
YouTube
YouTube is an American online video sharing and social media platform headquartered in San Bruno, California. It is currently owned by Google, and is the second most visited website, after Google Search. We use YouTube to introduce our services, provide instructions, and reach more users.
Youtube.com
Quantcast:
Quantcast is an AI-powered advertising platform based in San Francisco, and with offices in Dublin, Ireland. It uses real-time data to analyse consumer behaviour, identify target audience segments while automating the buying and placement of display and video ads. It does this through behavioural and interest tracking. We use it to show digital adverts across various media publications.
https://www.quantcast.com/home
Last Updated 21st September 2026.
