Privacy policy

Last updated: April 3, 2026

XL Joinery Doors Online is a trading name of JW Hardware Ltd, which operates this website and online store. We use Shopify to power our ecommerce platform and to help us provide our products and services to customers.

This Privacy Policy explains how we collect, use, and disclose your personal information when you visit our website, place an order, contact us, or otherwise use our services.

Please read this Privacy Policy carefully. By using our website and services, you acknowledge that you have read and understood how your personal information may be collected, used, and disclosed as described in this Privacy Policy.

Who We Are

For the purposes of applicable data protection law, the data controller of your personal information is JW Hardware Ltd, trading as XL Joinery Doors Online.

If you have any questions about this Privacy Policy or how we handle your personal information, you can contact us using the details at the end of this page.

Personal Information We Collect

Depending on how you use our website and services, we may collect the following types of personal information:

Contact information, including your name, billing address, delivery address, email address, and telephone number.
Order and transaction information, including the products you view, add to basket, purchase, return, exchange, or cancel, and records of previous orders.
Payment information, including payment method details and transaction confirmations. Payment card information is processed securely through our payment providers and ecommerce platform.
Account information, if you create an account, including login details, saved preferences, and account settings.
Communications, including messages you send to us by email, contact forms, or customer service enquiries.
Technical and device information, including your IP address, browser type, device type, operating system, and network connection details.
Website usage information, including how you browse and interact with our website, pages visited, products viewed, and actions taken on the site.

How We Collect Your Information

We may collect personal information in the following ways:

Directly from you, when you place an order, contact us, sign up to emails, request samples, create an account, or otherwise provide information to us.
Automatically, through cookies and similar technologies when you browse or interact with our website.
From service providers, such as Shopify, payment providers, delivery providers, analytics services, and fraud prevention services, where they process information on our behalf.
From partners or third parties, where permitted by law and relevant to the services we provide.

How We Use Your Personal Information

We use personal information for the following purposes:

To process and fulfil orders, including payments, delivery, returns, exchanges, refunds, and order administration.
To provide customer service, including responding to enquiries, sample requests, product questions, and after-sales support.
To operate and improve our website and services, including analysing website usage, improving site performance, and enhancing the customer experience.
To manage accounts, where customers choose to create and use an online account.
To communicate with you, including sending order updates, service-related notifications, and other necessary communications.
For marketing, where permitted by law, including sending promotional emails or showing relevant advertising based on your interactions with our website.
For fraud prevention and security, including verifying transactions, protecting our business, customers, and website, and detecting suspicious or unlawful activity.
To comply with legal obligations, including accounting, tax, consumer protection, and data protection requirements.

Lawful Bases for Processing

If you are located in the UK or European Economic Area, we process your personal information only where we have a lawful basis to do so. These may include:

Contract – where processing is necessary to fulfil your order or provide our services.
Legitimate interests – where processing is necessary for the operation, improvement, and protection of our business and services, provided your rights do not override those interests.
Legal obligation – where we are required to process information to comply with applicable law.
Consent – where required by law, for example in relation to certain marketing or cookie activities.

How We Share Personal Information

We may share your personal information with third parties where necessary to operate our business and provide our services. This may include:

Shopify, which hosts and supports our ecommerce platform.
Payment providers, to process secure payments and help prevent fraudulent transactions.
Delivery and fulfilment providers, to dispatch and deliver orders.
Technology, IT, and website service providers, who help us host, maintain, and improve our systems.
Analytics and marketing providers, where permitted, to help us understand website use and improve advertising performance.
Professional advisers, such as accountants, legal advisers, insurers, or auditors where necessary.
Authorities or regulators, where required by law or to protect our rights, property, customers, or business.
Affiliates or businesses within our corporate group, where relevant for business administration and service delivery.

Shopify

Our store is hosted on Shopify. When you use our website, Shopify may process personal information on our behalf in order to support the operation of the store, including checkout, hosting, analytics, and related ecommerce functionality.

Some information submitted through our website may be transmitted to or processed by Shopify and its service providers, including where systems or data are located outside the UK or your country of residence.

To learn more about how Shopify handles personal information, please review Shopify’s privacy information and policies.

Marketing and Advertising

Where permitted by law, we may use your personal information to send you marketing communications by email or to show you relevant advertising. You can unsubscribe from marketing emails at any time by using the unsubscribe link in our emails or by contacting us directly.

Even if you opt out of marketing communications, we may still contact you with important service-related messages, such as order confirmations, delivery updates, or information about returns and refunds.

Cookies and Similar Technologies

Our website may use cookies and similar technologies to help the site function properly, remember your preferences, understand website usage, and improve the customer experience.

Some cookies may also be used for analytics, performance monitoring, or advertising, where permitted. You can usually manage cookie preferences through your browser settings and, where applicable, through our cookie banner or consent tool.

Third-Party Links

Our website may contain links to third-party websites or services. If you follow links to websites not operated by us, you should review their privacy policies and terms separately. We are not responsible for the privacy, security, or content of third-party sites.

Children’s Privacy

Our website and services are not intended for children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so that we can take appropriate steps.

Data Security

We take reasonable steps to protect personal information using appropriate technical and organisational measures. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

You should also take care when using the internet and avoid sending sensitive information through unsecured channels.

How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to fulfil orders, provide services, maintain records, resolve disputes, enforce agreements, and comply with legal, tax, and accounting obligations.

The exact retention period may vary depending on the type of information and the reason we hold it.

Your Rights

Depending on where you are located, you may have certain rights in relation to your personal information, subject to applicable law. These may include the right to:

request access to the personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion of your personal information in certain circumstances;
request restriction of processing in certain circumstances;
object to certain types of processing;
request transfer of your personal information to you or another provider, where applicable;
withdraw consent where processing is based on consent.

To exercise any of your rights, please contact us using the details below. We may need to verify your identity before responding to your request.

Complaints

If you have concerns about how we handle your personal information, please contact us first and we will do our best to resolve the issue.

If you are located in the UK, you may also have the right to complain to the Information Commissioner’s Office (ICO). If you are located in the EEA, you may contact your local data protection authority.

International Transfers

Your personal information may be transferred to, stored in, or processed in countries outside the UK or your country of residence, including where our service providers operate internationally.

Where required, we take appropriate steps to ensure that international transfers are carried out in accordance with applicable data protection law and that suitable safeguards are in place.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, legal obligations, or data protection practices. Any updates will be posted on this page with a revised “Last updated” date.

Contact Us

If you have any questions about this Privacy Policy or would like to exercise your data protection rights, please contact:

XL Joinery Doors Online
A trading name of JW Hardware Ltd
Email: help@xljoinerydoorsonline.co.uk
Telephone: 03330 507 471
Address:

22G Boho One,

Bridge Street West,

Middlesbrough

TS2 1AE

For the purposes of applicable data protection law, JW Hardware Ltd is the data controller of your personal information.