Privacy Policy

The data controller is SONIC PULSE LTD (“Hushroom”, “we”, “us”), registered at 29 Balvie Road, Milngavie, Glasgow, Scotland, G62 7EH, United Kingdom. You can reach us about privacy at support@sonicpulseuks.shop or +44 7250006658.

We are the controller for the personal data described here and choose the processors listed below to handle it on our instructions.

• Order & delivery data (shipping address): your name, email, phone, shipping address (street, city, postal code and country) entered at checkout. We use this shipping address for order fulfilment — to process, pack, ship and track your order, hand it to the delivery carrier, and handle returns, refunds and customer support for that order.
• Purchase & billing data: items ordered, order value in USD, and billing details processed by our payment provider. We receive confirmation and the last four digits / card type — never your full card number.
• Account & membership data: if you join Hushroom Club, your subscription tier, status and renewal dates.
• Support & enquiry data: messages you send through the contact and room-help forms, including room details you choose to share.
• Technical & usage data: IP address, device/browser type and pages viewed, collected through essential cookies and privacy-respecting analytics.

We collect your personal data from the following collection sources:

• Directly from you: information you enter at checkout (including your shipping address), and in the contact, room-help, account and membership forms, and in emails you send us.
• Automatically from your device: IP address, device and browser type and pages viewed, gathered through essential cookies and privacy-respecting analytics when you use the site.
• From our processors and partners: our payment provider confirms payment and returns limited billing data (card type and last four digits, never the full number); our delivery carriers return shipping and tracking status against the shipping address you provided.

We do not buy or acquire personal data about you from third-party data brokers.

• To fulfil your order and membership — process payment, use your shipping address to ship items to you via our delivery carriers, provide tracking, and manage returns, refunds and renewals. Legal basis: performance of a contract.
• To provide support — answer enquiries and room-help requests. Legal basis: legitimate interests and, where you ask us to, your consent.
• To keep the store secure and working — fraud prevention, essential cookies. Legal basis: legitimate interests and legal obligation.
• To send updates you asked for — inspiration digests for members. Legal basis: consent, which you can withdraw at any time.
• To meet legal duties — tax, accounting and consumer-law records. Legal basis: legal obligation.

• Payment: Stripe processes card payments and subscriptions. Stripe receives the billing and transaction data needed to take payment. We never store or see your full card number.
• Hosting & platform: Vercel hosts the website and serves pages.
• Database & auth: Supabase stores order, account and form-lead records.
• Email: our transactional email provider sends order and support emails.
• Delivery: shipping carriers receive the name and delivery address to deliver your parcel.
• Analytics: a privacy-respecting analytics provider gives us aggregate usage insight.

We share only what each processor needs, under contracts that require them to protect your data. We do not sell your personal data.

We ship and sell worldwide, so your data may be processed outside your country, including in the United Kingdom, the European Economic Area and the United States. Where data leaves the UK/EEA we rely on recognised safeguards such as UK International Data Transfer Agreements, EU Standard Contractual Clauses and adequacy decisions.

• Order, delivery and billing records: kept for up to 7 years to meet tax and accounting law.
• Support and room-help enquiries: up to 24 months from your last contact.
• Marketing consent records: until you withdraw consent, then a suppression record only.
• Analytics data: retained in aggregated form on a rolling basis.

Depending on where you live you may have the right to:

• access the personal data we hold about you;
• correct inaccurate data or complete incomplete data;
• erase data where there is no lawful reason to keep it;
• restrict or object to certain processing, including direct marketing;
• data portability;
• withdraw consent at any time;
• for California residents, to know, delete, correct, and to opt out of “sale” or “sharing” of personal information (see below).

To exercise any right, email support@sonicpulseuks.shop. We respond within the time limits set by the applicable law.

We do not sell your personal information for money, and we do not share it for cross-context behavioural advertising. California residents can still make a “Do Not Sell or Share My Personal Information” request by emailing support@sonicpulseuks.shop; we will honour it.

We use essential cookies to run the cart and checkout, and limited analytics to understand usage. You can control non-essential cookies in your browser. See our Cookie Policy for details.

We do not make solely automated decisions that produce legal effects about you. Our store is not intended for children: it must not be used by anyone under 13, and 13–17 year-olds should only use it with a parent or guardian's consent. Installation should be carried out by an adult.

Contact us first at support@sonicpulseuks.shopand we will try to resolve any concern. UK/EU residents may also complain to their data protection authority (in the UK, the Information Commissioner's Office). This policy may be updated; the date at the top shows the latest version.