Last Updated: 16 April 2026

Introduction

Welcome to Dilli House. As a small-batch, artisanal brand, we commit to quality in our products and integrity in our practices. We value the trust you place in us when you share your personal data. Handling your information with transparency and care is fundamental to how we operate.

This Privacy Policy explains how Dilli House ("we," "us," or "our") collects, uses, and protects the personal information of our customers and website visitors.

The Information We Collect

We collect information to help us fulfil your orders and improve your experience on our website.

Information You Provide Directly

We collect the information you provide when you make a purchase, create an account, or contact us. This includes:

• Contact Information: Your name, email address, and phone number.

• Delivery Information: Your billing and shipping addresses.

• Purchase Details: Information about the products you buy.

• Account Information: If you create an account, we store your preferences and order history.

A note on payments: We do not store your payment card information. It is handled securely by our payment processors.

Information Collected Automatically

When you visit our site, we collect information about your device and how you interact with our site. This helps us understand what is working and what we can improve.

• Technical Data: Information about your browser, network, device, and IP address.

• Usage Data: Details about your visit, including the pages you view and how you navigate the site. We analyse this with Plausible Analytics, which is cookieless and does not collect personal data or identifiers.

• Referral Information: How you found our website.

Information from Our Hosting Provider

Our website is hosted by Squarespace. They collect necessary data when you visit to ensure the site runs effectively and securely. Squarespace analyses this data in a de-personalised form.

How We Use Your Information

We use your information for specific purposes. We ensure our use is lawful, relying on the necessity to fulfil our contract with you, our legitimate business interests, your consent, or our legal obligations (in line with the UK GDPR).

To Fulfil Your Order

• Processing: To manage your transactions and process payments.

• Shipping: To arrange delivery via our shipping partner (UPS) and provide tracking updates.

• Service Communications: To send essential emails such as order confirmations and shipping notices.

For Our Legitimate Business Interests

We use your information to keep our business running smoothly, provided it does not interfere with your rights:

• Security and Fraud Prevention: To protect our website and customers (using services like Sift).

• Website Functionality: To ensure the website operates correctly, such as displaying fonts (Google Fonts, Adobe Fonts) and assisting with checkout (e.g., using the Google Places API for address auto-completion).

With your consent

We ask for your permission for the following activities. You can change your mind at any time.

• Newsletters: To send you our newsletter and updates via Squarespace Email Campaigns.

• Abandoned Cart Reminders: If you begin checkout but do not complete it, we may send an automated reminder email.

To Comply with Legal Obligations

We may process your information to comply with laws and regulations, such as tax and accounting requirements.

How We Share Your Information

We do not sell your personal information. We only share it with trusted partners who help us operate.

• Website Platform: Squarespace hosts our site and provides e-commerce and analytics services.

• Payments and Security: We use Squarespace Payments, which utilises Stripe for secure payment processing (stripe.com/privacy) and Sift for fraud detection (sift.com/service-privacy).

• Shipping: We share necessary details (name, address) with UPS to deliver your order. We currently ship to the UK, EU, USA and Singapore.

• Analytics: We use Plausible Analytics, a privacy-friendly, cookieless service that measures aggregate site usage without collecting personal data or cross-site identifiers. Plausible’s privacy policy is available at plausible.io/privacy.

• Email and Communication: We use 37Signals (hey.com) for email. Squarespace Email Campaigns is used to send our newsletters (squarespace.com/privacy).

• Project Management: We use Basecamp (by 37Signals) for internal project management and collaboration. Where relevant, limited customer or order information may be referenced within this platform for operational purposes.

• Website Tools: Google Places API assists with address suggestions during checkout. Google Fonts and Adobe Fonts are used to display text; these services may receive your IP address to function.

Cookies and Tracking Technologies

Our website uses only a small number of strictly-necessary, first-party cookies set by Squarespace, our hosting platform. We do not use Google Analytics, Meta Pixels, or any advertising or cross-site tracking cookies.

• Strictly-necessary cookies (Squarespace): crumb (security/CSRF protection for forms and checkout), ss_cvr and ss_cvt (first-party session identifiers used by Squarespace’s built-in site analytics). These are required for the website to function and cannot be disabled.

• Analytics: We use Plausible Analytics for privacy-friendly traffic measurement. Plausible does not set any cookies, does not collect personal data, and does not use cross-site identifiers.

Because we do not use any non-essential or third-party tracking cookies, we do not display a cookie consent banner. For details of the specific Squarespace cookies, see squarespace.com/cookie-policy.

Email Communication

• Transactional Emails: We will email you about your order or account. These messages are essential to the service we provide.

• Marketing and Newsletters: We send a regular newsletter and occasional updates to subscribers.

Opting Out: You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link at the bottom of the email.

Data Security and Retention

We implement appropriate technical and organisational measures to protect your data. Our platform, Squarespace, and our payment processors employ robust security, including encryption (SSL).

We retain your information only as long as necessary for the purposes it was collected, including meeting legal and accounting requirements.

International Data Transfers

We use global service providers. Your information may be processed outside the UK, primarily in the United States (where many of our providers are based).

When transferring data internationally, we ensure appropriate safeguards are in place to protect your information to UK standards, using approved transfer mechanisms such as the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses (SCCs).

Your Rights

If you are in the UK or EEA, you have rights regarding your personal information, including the right to access, correct, delete, restrict, or object to the processing of your data.

To exercise these rights, please contact us.

Changes to This Policy

We may update this policy occasionally. We will notify you of significant changes by updating the "Last Updated" date on this page.

Contact Us

For any questions or requests regarding this policy or your data, please contact us at:

Dilli House
hello@dilli.house
5-7 Buck Street,
London NW1 8NJ