Privacy notice
Last updated: 1 October 2026.
This notice explains how personal information submitted through the Hewston Higgins website is used.
Who controls your information
Hewston Higgins Books & Learning is the trading/brand name used on this website by Jonathan Hewston. Privacy enquiries can be submitted through the contact page.
Information we may collect
When you contact us we may collect your name, email address, organisation or school, enquiry type and the message you choose to send. During checkout we may process your email address, basket contents, delivery information and transaction references needed to complete an order.
Why we use it
- To respond to enquiries and provide requested information.
- To arrange school programmes, visits, resources or orders.
- To complete purchases and maintain accounting and business records.
- To protect the security and reliability of the website.
- To send wider marketing only where an appropriate lawful basis applies.
Service providers
The website is hosted on Cloudflare. When live payments are enabled, Stripe is used for secure payment processing. When transactional or basket-recovery email is enabled, the configured email provider processes the information needed to send those messages. Hewston Higgins does not receive full card details from Stripe.
Basket reminder emails
If you enter your email address while progressing through checkout and do not opt out of basket reminders, Hewston Higgins may send a limited sequence of reminders about that unfinished purchase where the UK electronic-marketing soft-opt-in rules apply. Each reminder includes a simple way to stop further reminders. Basket reminders are not permission for unrelated newsletters.
Children's information
The public contact and checkout routes are intended for adults. Please do not submit unnecessary sensitive or pupil-identifying information about a child through the general website.
Retention
Enquiry and order information is retained only as long as reasonably needed to manage the relationship, fulfil orders and meet legal or accounting obligations. Abandoned-basket recovery records are intended to be short-lived and removed after the recovery window expires.
Your rights
Depending on the circumstances, UK data protection law may give you rights including access, correction, erasure, restriction, objection and data portability. You can also complain to the Information Commissioner's Office (ICO).