Privacy Notice

This notice explains what Westucci Ltd does with personal information collected through this website. It was last updated in October 2026.

Who we are

Westucci Ltd, registered in England and Wales, company number 17080831. Registered office: 167–169 Great Portland Street, London W1W 5PF. We are the data controller for the information described here. You can reach us at info@westucci.com.

What we collect

Only what you choose to give us. From the contact form: your name, your email address, the reason for your enquiry, and your message. From the House list signup: your email address alone. From an account: your name, your email address and a password. From an order: your name, email address, delivery address and what you ordered.

Nothing else is collected from you unless you fill something in. This site uses no analytics and no advertising, and loads no fonts, scripts or trackers from other companies.

Like any website host, Netlify, which hosts this site, processes the technical details your browser sends when it asks for a page, such as your IP address, in order to deliver the page and keep the service secure. We do not use this to identify you or to track what you read.

Cookies and storage

We set no tracking cookies. This site keeps a few small records in your browser’s storage, only to make the parts of the site you use work:

• Your cookie choice, so that we do not ask you again.
• Your shopping bag: the pieces you have added, their price and quantity, kept only for your visit so the bag is still there as you move between pages; it is cleared when you close the browser tab.
• Who is signed in: if you sign in, your email address and name, so the site can show that you are signed in and fill in forms for you. Signing out removes them. Your password is never stored on your device.

These records stay on your device and are not sent to us. Because they are strictly necessary for things you have asked the site to do, they do not need your consent, but you can remove them at any time by clearing this site’s data in your browser.

The banner offers analytics and marketing categories, and both are switched off unless you turn them on. Nothing currently uses either. They exist so that if we ever add measurement, it will already be governed by the choice you have made rather than added over the top of it. You can change your choice at any time with the Cookie Settings link at the foot of every page.

Why we use it, and on what basis

To read and answer your enquiry, and to keep a record of the correspondence. Our lawful basis is legitimate interest — specifically, responding to someone who has asked us to.

If you join the House list, we use your address only to write to you about the House and its collections. Our lawful basis is your consent, given by submitting the form, and you can withdraw it at any time by asking us to remove you.

If you place an order or create an account, we use what you give us to fulfil the order and to run the account. Our lawful basis is the contract between us. We also keep order records for as long as tax law requires, which is a legal obligation rather than a choice.

The technical details processed by our host when you visit are used to deliver the site and keep it secure. Our lawful basis is legitimate interest — running a website that works and is safe.

Who else sees it, and where

We use a small number of companies to run parts of this site. They act on our instructions and may not use your information for their own purposes.

Netlify hosts this website. It receives what you send through the contact form, the House list signup and the order form at checkout, and keeps a copy on our behalf. If you create an account, Netlify also holds your name, email address and password for it, and sends the emails that confirm your address or reset your password; the password is stored scrambled (hashed) and is never visible to us.

PayPal handles payment when you choose Pay with PayPal. You pay on PayPal’s own pages, and what you give PayPal there, including your payment details, is handled under PayPal’s privacy statement. PayPal tells us the payment has been made and shares the details we need to fulfil the order, such as your name, email address, delivery address and what you bought. We never see or hold your card or bank details.

When you reserve the Heritage Box, we check the payment with PayPal and keep a record of your reservation — your name, email address, the PayPal transaction reference, the deposit paid and the balance still due — in private storage with Netlify that only we can open. It is not shown on this website.

Some of these companies are based outside the United Kingdom, so your information may be transferred abroad. Where that happens it is protected by the safeguards UK data protection law requires, such as the International Data Transfer Agreement or an adequacy decision.

We do not sell your information, and we do not share it with anyone for marketing.

How long we keep it

Enquiries: for as long as needed to deal with them and any follow-up. Orders: for six years after the end of the tax year, which is what UK tax law requires of us. Accounts: until you ask us to close it. House list: until you unsubscribe.

Your rights

Under the UK GDPR you have the right to be informed about what we do with your information — which is what this notice is for — and the right to:

Access a copy of what we hold about you. Rectification of anything wrong or incomplete. Erasure of what we hold, where we have no continuing reason to keep it. Restriction, asking us to pause using it while something is resolved. Portability, receiving what you gave us in a form you can take elsewhere. Objection to our using it on the basis of legitimate interest. And the right to withdraw consent at any time where consent is what we relied on, without affecting what was done before.

Write to info@westucci.com. We will answer within one month, and there is no charge. We may ask you to confirm who you are before we send personal information out.

We do not make any decision about you by automated means, and we do not profile you.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk.