Privacy Policy

This privacy policy explains how Twinkle & Twine Ltd ("we", "us", "our") collects, uses, and protects your personal data when you visit www.twinkleandtwine.co.uk or make a purchase from us.

We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Twinkle & Twine Ltd
Grosvenor House, 3 Chapel Street, Congleton, CW12 4AB
Website: www.twinkleandtwine.co.uk

What data we collect

When you place an order or contact us, we may collect the following personal data:

Name and delivery address
Email address
Phone number (if provided)
Payment information (processed securely — we do not store card details)
Order history and purchase details
Communications you send to us

We also collect non-personal data automatically when you visit our website, including IP address, browser type, pages visited, and time spent on the site via cookies and analytics tools.

How we use your data

We use your personal data to:

Process and fulfil your orders
Communicate with you about your order
Respond to your enquiries
Improve our website and customer experience
Comply with our legal obligations

We will only send you marketing communications if you have opted in to receive them. You can unsubscribe at any time.

Our lawful basis for processing

We process your data on the following lawful bases:

Contract — to fulfil orders you have placed with us
Legitimate interests — to improve our service and respond to enquiries
Consent — for any marketing communications
Legal obligation — where required by law
Who we share your data with

We do not sell your personal data. We may share it with trusted third parties who help us operate our business, including:

Shopify (our e-commerce platform)
Amazon Fulfilment Services (to fulfil and deliver your order)
Payment processors (to handle secure payments)
Analytics providers (to help us understand website usage)

All third parties are required to handle your data securely and in accordance with applicable data protection law.

How long we keep your data

We retain your personal data for as long as necessary to fulfil your order and comply with our legal obligations. Order records are typically kept for 6 years in line with UK tax requirements. You can request deletion of your data at any time by contacting us.

Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Object to or restrict how we process your data
Data portability
Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

Our website uses cookies to improve your experience and analyse website traffic. You can control cookie settings through your browser. For more information on the cookies we use, please see our cookie settings banner.

Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date.

If you have any questions about this privacy policy or how we handle your data, please contact us.