Effective date: 10 December 2025 · Last updated: 31 August 2026
1. Introduction
Welcome to Ashley & Lewis Heritage Paint & Papers (“we”, “us”, “our”). We are committed to protecting your personal information and respecting your privacy rights in accordance with the UK GDPR and applicable UK data protection law.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights regarding your data. By using our website ashleylewis-paint.com (the “Site”), you agree to the collection and use of information in accordance with this Privacy Policy.
2. Data Controller
The data controller responsible for your personal data is:
M Purcell Services Limited, trading as Ashley & Lewis Heritage Paint & Papers
41 Bridge Street, Godalming, Surrey, GU7 1HL
Company registration number: 09109181
Company VAT number: 190414130
Email: sales@ashleylewis-paint.com
If you have any questions about this Privacy Policy or how we handle your data, please contact us using the details above.
3. What Personal Data We Collect
This Site is a brochure and enquiry site. It does not have a shopping basket, checkout, or customer accounts. We collect much less data than a typical online shop as a result.
3.1 Information you provide to us directly
- Contact form submissions: your name, email address, phone number, subject and message when you get in touch via our contact form.
- Swatch book: if you choose to email yourself a copy of your saved colours and wallpapers, we collect the email address you enter. Whether you print or email your list, a copy of it is also kept on our server against a unique reference number for 90 days, so our team can retrieve it in-store if you lose your copy or forget to bring it with you.
- Sample requests: if you ask us to put samples together from your swatch book, we collect your name, email address, phone number (if given), whether you are collecting or would like them posted, the postal address you provide in that case, and any notes you add, along with the list of colours and papers you asked for.
- Direct communications: information contained in any enquiries you send us by phone, email, or in person.
Contact form enquiries and sample requests are stored on our own server as well as being emailed to us, so that a message cannot be lost to a bounced or accidentally deleted email. They are visible only to Ashley & Lewis staff signed in to the site’s admin area.
3.2 Information collected automatically
- Technical data: standard server log information such as IP address, browser type, device information and access times, collected by our hosting provider for security and reliability purposes.
- Basic site usage: we record which pages are viewed and which colours and wallpapers are added to a swatch book, so we can see which pages and products are popular. This does not use cookies or identify individual visitors: we do not know who viewed what, only that a page was viewed or a colour was saved.
- Counting visitors: so that we can tell the difference between one person reading five pages and five people reading one, each page view is tagged with a short one-way code derived from your IP address, browser and today’s date. Your IP address itself is never stored, and because the date forms part of the code it changes every day, so it cannot be used to recognise you tomorrow, or on any other website.
- Colour searches: we record what is typed into the colour search and how many results it returned, so we can see what customers are looking for and stock the things they cannot find. Search terms are stored on their own, with no link to you or to your other activity on the site.
We do not use advertising or marketing cookies on this Site, and the usage data described above does not use cookies either. It is collected only with your agreement, and is never shared with advertising networks or any other third party. If that changes in future, we will update this Policy and our Cookie Policy accordingly.
3.3 Information from third parties we use to run this Site
- Cloudflare Turnstile: a bot-detection service we use to verify that contact form submissions come from a real person rather than automated spam. Turnstile may process technical data about your browser and device as part of that check. See Cloudflare’s Privacy Policy for details.
- Brevo: the email delivery platform we use to send emails. This includes messages submitted through our contact form, and copies of your swatch book if you choose to email one to yourself. See Brevo’s Privacy Policy for details.
4. Legal Basis for Processing
We process your personal data only where we have a lawful basis to do so:
- Legitimate interests: to respond to enquiries sent through our contact form, and to protect our Site from spam and abuse using Cloudflare Turnstile, provided your rights do not override those interests.
- Legal obligation: where processing is necessary to comply with our legal obligations, such as accounting, tax or regulatory requirements for our business generally.
- Consent: where we ask for your consent for a specific purpose, such as opting in to marketing communications, if we introduce these in future.
5. How We Use Your Personal Data
- To respond to enquiries you submit through our contact form, by phone, or in person.
- To email you a copy of your swatch book when you ask us to, and to retrieve your saved list in-store if you give us your reference number.
- To provide colour, product and order advice as part of running our shop.
- To understand which pages, colours and wallpapers are popular, so we can improve the Site and what we stock.
- To protect the security of our Site and prevent spam or misuse of our contact form.
- To comply with our legal and accounting obligations.
6. Cookies and Tracking Technologies
Our Site uses a limited number of cookies, primarily to support Cloudflare Turnstile’s spam-protection check on our contact form. We do not use analytics, advertising, or marketing cookies. The page and product popularity information described in section 3.2 is recorded without cookies and without identifying individual visitors, and only if you agree when asked, and you can change that answer at any time using the “Cookie Choices” link in the footer. Full details are in our Cookie Policy.
7. Who We Share Your Data With
We may share your personal data with:
- Brevo: to receive and process contact form submissions, send our replies, and email swatch books when you ask us to.
- Cloudflare: to verify contact form submissions are not automated spam (Turnstile) and to host and secure our Site.
- Our web hosting provider: to host our Site and keep it running securely.
- Professional advisers: such as accountants or legal advisers, where necessary.
- Authorities: law enforcement, regulators, or courts where we are required to do so by law or to protect our legal rights.
Saved swatch books and the basic page/product usage information described in section 3.2 are kept on our own server and are not shared with or processed by any third party.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. They are not permitted to use your personal data for their own purposes and may only process it for the purposes described above.
8. International Transfers
Some of our service providers, including Cloudflare and Brevo, may process data outside the UK. Where this happens, we rely on the safeguards those providers have in place, such as standard contractual clauses or equivalent measures approved by UK authorities. You can contact us for more information about the safeguards we use for international transfers.
9. Data Retention
We keep contact form enquiries only as long as reasonably needed to respond to you and for our records, typically no longer than 24 months unless we need to keep it longer for legal or accounting reasons. Sample requests are kept on the same basis as contact form enquiries. Saved swatch books, including any email address given to send one, are automatically deleted after 90 days. Server log data is retained by our hosting provider for a limited period for security purposes. The basic page and product popularity information described in section 3.2 does not identify individual visitors, so we retain it to understand usage trends over time.
10. Your Rights
Under data protection law, you have the right to:
- Access: request a copy of the personal data we hold about you.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of your personal data where there is no good reason for us to continue processing it.
- Restriction: request that we suspend the processing of your personal data in certain circumstances.
- Object: object to processing based on our legitimate interests.
- Data portability: request that we transfer your personal data to you or a third party in a structured, machine-readable format.
- Withdraw consent: where we rely on consent, you can withdraw it at any time.
To exercise any of these rights, contact us at sales@ashleylewis-paint.com. We may need to verify your identity before responding. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
11. Security of Your Data
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, use, disclosure, alteration or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
12. Children
Our Site is not intended for children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete that information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this Policy regularly.
If you have any questions about this Privacy Policy, please contact us at sales@ashleylewis-paint.com.
