Legal
Privacy Policy
Last updated: July 2026
Who we are
The Porch Edit is a trading name of Tablescape London. We provide bespoke pumpkin and autumn entrance installations for residential properties in London. References to "we", "us" or "our" in this policy refer to The Porch Edit / Tablescape London.
You can contact us at [email protected].
What we collect, why, and how long we keep it
The table below sets out every category of personal data we collect, the reason we collect it, the legal basis under UK GDPR, and how long we retain it.
| Data | Why we collect it | Legal basis | Kept for |
|---|---|---|---|
| Name, email, mobile number | Booking confirmation, design proposals, installation logistics, and follow-up | Contract | 3 years after installation |
| Postcode | Confirming we cover your area and scheduling logistics | Contract | 3 years after installation |
| Property photographs (uploaded by you) | Preparing your bespoke design — never used for any other purpose | Contract | Deleted within 90 days of installation, or on request |
| Preferred dates, package, style preferences | Scheduling and design preparation | Contract | 3 years after installation |
| Payment records (via Stripe) | Processing your deposit and balance; financial record-keeping | Contract / Legal obligation | 7 years (HMRC requirement) |
| Marketing consent flag | Recording that you opted in to marketing communications | Consent | Until you withdraw consent |
| Website usage data (Google Analytics) | Understanding how visitors use the site so we can improve it | Consent | 14 months (Google Analytics default) |
Name, email, mobile number
Why: Booking confirmation, design proposals, installation logistics, and follow-up
Basis: Contract
Kept for: 3 years after installation
Postcode
Why: Confirming we cover your area and scheduling logistics
Basis: Contract
Kept for: 3 years after installation
Property photographs (uploaded by you)
Why: Preparing your bespoke design — never used for any other purpose
Basis: Contract
Kept for: Deleted within 90 days of installation, or on request
Preferred dates, package, style preferences
Why: Scheduling and design preparation
Basis: Contract
Kept for: 3 years after installation
Payment records (via Stripe)
Why: Processing your deposit and balance; financial record-keeping
Basis: Contract / Legal obligation
Kept for: 7 years (HMRC requirement)
Marketing consent flag
Why: Recording that you opted in to marketing communications
Basis: Consent
Kept for: Until you withdraw consent
Website usage data (Google Analytics)
Why: Understanding how visitors use the site so we can improve it
Basis: Consent
Kept for: 14 months (Google Analytics default)
We never store card numbers or CVV codes. All payment data is handled directly by Stripe and subject to their privacy policy.
Property photographs
Photographs of your property that you upload during the booking process are used solely to prepare your bespoke design. They are kept strictly private and are never used for marketing, social media or any other purpose without your explicit written permission. They are deleted within 90 days of your installation date, or immediately on request.
Legal basis for processing
We process your data under the following lawful bases (UK GDPR):
- Contract — processing necessary to fulfil your booking.
- Legitimate interests — improving our service and preventing fraud.
- Consent — analytics tracking and marketing communications.
Cookies & analytics
We use Google Analytics 4 to understand how visitors use our site. This is only activated after you accept our cookie consent banner. You can withdraw consent at any time by clicking "Revoke consent" in your browser or clearing your cookies.
Third parties
We share data only with the following trusted third parties, strictly as necessary:
- Stripe — payment processing.
- Google Analytics — anonymised usage analytics (consent-gated).
- GoDaddy / Airo — website hosting and messaging infrastructure.
We do not sell your data to any third party.
How to request deletion
You can ask us to delete your personal data at any time. Here is how:
- Email us at [email protected] with the subject line "Data deletion request" and include the name and email address associated with your booking.
- We will confirm receipt within 5 business days and complete the deletion within 30 days, in line with UK GDPR requirements.
- We will tell you if any data must be retained for a legal reason (e.g. financial records required by HMRC for 7 years) and explain exactly what is kept and why.
Property photographs you uploaded are deleted within 90 days of your installation date as standard, or immediately on request.
Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your data (see above for the process).
- Restriction — ask us to pause processing while a dispute is resolved.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — for analytics or marketing, at any time and without penalty.
- Complain to the ICO — if you believe we have mishandled your data, you can contact the Information Commissioner's Office at ico.org.uk or call 0303 123 1113.
To exercise any of these rights, email [email protected]. We will respond within 30 days.
Changes to this policy
We may update this policy from time to time. The date at the top of this page will always reflect the most recent version.