TALES House London
Privacy policy
How we collect, use and look after your information when you shop with us, visit the House or work with us as a brand.
Last updated 13 October 2026
Contents
Who we are
TALES House London is a shop, gallery and event space for independent African brands at 28 Cavendish Square, London W1G 0DB, with an online store at taleshouselondon.co.uk. It is run by Bellafricana UK Limited, which is the data controller for the personal information described in this policy.
If you have any question about your information, email info@taleshouselondon.co.uk or write to us at TALES House, 28 Cavendish Square, London W1G 0DB.
What we collect and why
We only collect what we need for the thing you are doing with us.
Shopping online
Name, email, phone number, billing and delivery address, what you ordered and your order history. We use this to take payment, send your order or prepare it for Click & Collect, send order emails and handle returns. If you create an account we also keep your login details.
Payments
Online card, Apple Pay and Google Pay payments are processed by Stripe. In the shop, card payments are taken by SumUp. We never see or store your full card number.
Delivery
For Royal Mail orders we pass your name, delivery address, email and phone number to Royal Mail so they can deliver your parcel and send you tracking updates.
VIP passes and visits
When you book a free VIP pass we collect your name, email, phone number, the date and number of guests, and whether you agree to WhatsApp messages and marketing. We use this to manage your booking, check you in and send reminders.
Hosting an event
Your name, email, phone number, organisation and event details, so we can reply to your enquiry and plan your event.
Newsletter
Your name and email address, if you sign up. You can unsubscribe at any time using the link in every email.
Brands and residents
If you apply for a residency or join the brand portal, we collect your contact and business details. To pay brands their sales, we also collect identity documents and bank details. These are stored securely, seen only by authorised staff, and used for identity checks, payouts and our legal obligations.
Contacting us
Anything you include when you email, message or call us.
Using our website
Technical information such as your IP address, browser, device and pages visited. Some of this is collected by cookies (see below).
Our lawful reasons
Under UK data protection law we must have a lawful basis for using your information:
- Contract: to sell you products, take payment, deliver or hand over your order, manage bookings and pay brands.
- Legal obligation: to keep tax and accounting records and carry out identity checks.
- Legitimate interests: to run, secure and improve our shop and website, prevent fraud, and reply to enquiries. We always weigh these against your rights.
- Consent: for our newsletter, marketing messages, WhatsApp messages and non-essential cookies. You can withdraw consent at any time.
Cookies
Cookies are small files stored on your device. We use:
- Essential cookies, which keep your basket, checkout and account working, help Stripe prevent fraud, and remember your cookie choice. These are always on.
- Analytics and marketing cookies, from Google Analytics (through Google Tag Manager), Meta (Facebook and Instagram) and our shop software, which record how you found us and how the site is used, and measure our advertising. These cookies are only set if you click Accept on our cookie banner.
Some pages include content from other sites, such as a Google Map, which may set their own cookies. Our fonts are loaded from Google Fonts, which receives your IP address.
You can change your choice at any time using Cookie settings, or block cookies in your browser.
Who we share it with
We do not sell your personal information. We share it only with:
- Service providers who work for us under contract: Hostinger (website hosting), Stripe (online payments), SumUp (in-store payments and till), Royal Mail (delivery), SureContact (sending our emails), Google (analytics and maps) and Meta (advertising measurement, with your consent).
- Resident brands: brands see which of their products sold, but we do not give them your contact details unless it is needed to sort out your order, for example a repair or a special request, and we will tell you if so.
- Authorities, such as HMRC or the police, when the law requires it.
- A buyer of our business, if TALES House or Bellafricana is ever sold or restructured.
International transfers
Our website is hosted in the European Union. Some providers, including Stripe, Google and Meta, may process information in the United States or elsewhere. When that happens, the transfer is protected by safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum.
How long we keep it
- Orders and payment records: 6 years after the end of the financial year, as required for tax.
- Your account: until you ask us to close it.
- VIP pass bookings and event enquiries: up to 2 years after your visit or enquiry.
- Newsletter: until you unsubscribe.
- Brand and resident records, including identity and bank documents: for the length of the partnership and 6 years afterwards.
- Cookie choice: 6 months.
After that, we delete the information or make it anonymous.
Keeping it safe
Our site uses an encrypted (HTTPS) connection. Access to customer and brand information is limited to staff who need it, and payments are handled by Stripe and SumUp, which are certified to the PCI DSS card security standard.
Your rights
You have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct it;
- ask us to delete it;
- object to, or ask us to limit, how we use it;
- ask us to move it to another organisation;
- withdraw your consent at any time.
To use any of these rights, email info@taleshouselondon.co.uk. We will reply within one month. It is free in most cases.
Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator: ico.org.uk or 0303 123 1113.
Children
Our online store and newsletter are not intended for anyone under 16, and we do not knowingly collect their information.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.