Legal
Who we are. The Wall Shop Ltd (company number SC846983), SMK Business Centre, 4 The Piazza, Glasgow, G5 8BE, United Kingdom. We are the data controller for personal data collected through this website.
When you request a quote or send an enquiry we collect your name, email address, phone number, postcode or project location, and the details of the wall or products you are interested in. When you order from our shop we also collect your delivery address and, if you give one, your company name. We record the page you were on and your IP address for security and fraud prevention. We do not collect payment details through this website: card payments are taken by Stripe on its own secure page.
To prepare and send your quotation, to answer your enquiry, to supply and deliver your order, to arrange surveys, delivery and installation, and to keep records required by law. Our lawful basis is taking steps at your request before entering a contract, performing that contract, and our legitimate interest in running the business. We send marketing only where you have asked for it, and you can unsubscribe at any time.
You can sign in to see your orders without creating a password. We email a six-digit code to your address, and entering it signs you in. We store a scrambled version of each code rather than the code itself, and a code works once and expires after ten minutes. Your account shows the orders placed with that email address, and keeps any details you choose to save so the checkout can fill them in next time. Signing in is always optional: you can order as a guest.
We send marketing emails only if you tick the box asking for them, at checkout or in your account. When you do, we record your email address, the date and the exact wording you agreed to. Our lawful basis is your consent, which you can withdraw at any time: untick the box in your account, use the unsubscribe link in any marketing email, or email stephen@thewallshop.co.uk. Once you unsubscribe we keep a note of your address, so that you are not added again by mistake. Order and delivery emails are not marketing and are sent either way.
Our email provider (Resend), our database host (Neon), our hosting provider (Vercel), our card payment provider (Stripe) and the service we use to send marketing emails, all under contract. Where a project requires it, our installation partners receive the details they need to complete the work. We never sell personal data.
Quotations and enquiries are retained for up to three years so we can honour prices and follow up; order records are retained for six years for tax purposes. Sign-in codes are deleted within a day.
You can ask for a copy of your data, ask us to correct or delete it, object to processing, or complain to the Information Commissioner’s Office (ico.org.uk). Contact stephen@thewallshop.co.uk.
We measure how the site is used with our own first-party analytics, not a third-party advertising network. We record the pages visited, how long each page was open, how far down it was scrolled, the site or search engine you arrived from, and actions such as tapping a phone number or sending a form. Alongside that we store your browser, operating system, device type, screen size and language, and an approximate location — usually the town or city — derived by our hosting provider from your network connection.
Your IP address is never stored in this data. It is converted to a one-way scrambled value used only to tell one visitor from another, and it cannot be turned back into an address or used to identify you. Nothing collected here is sold, shared with advertisers or combined with data from other websites. Our lawful basis is our legitimate interest in understanding which pages help customers and which do not; you can object at any time using the contact address above.
This site sets no advertising or tracking cookies. If you sign in, one cookie keeps you signed in for up to 30 days; it holds a signed account number, never your email address or a password, and signing out removes it. Your basket and your saved quote draft are kept in your own browser and never leave it until you order or submit. A referral code, where you arrived on one, is stored so the right person is credited. The analytics described above keeps two random identifiers in your browser’s local storage — one for the visit, one for the browser — so repeat pages are counted as one visit rather than several. Clearing your browser storage removes them.
Last updated September 2026.
