Privacy Policy
Last updated: 17 October 2025
This policy explains what personal information PlushieShop collects when you visit plushieshop.co.uk or buy from us, why we collect it, who we share it with, how long we keep it, and the rights you have over it. We only collect what we need to run the shop, deliver your order and keep improving.
1. Who we are
PlushieShop (plushieshop.co.uk) We are the “controller” of your personal information, which means we decide how it is used and are responsible for looking after it.
If you have any questions about this policy or your information, email us at contact@plushieshop.co.uk.
2. What we collect and why
The law lets us use your information only when we have a good reason, called a “lawful basis”. For each type of information below we say what it is, why we need it and which basis applies.
| What | Examples | Why we use it | Lawful basis |
|---|---|---|---|
| Order details | Name, email, phone, billing and delivery address, items bought, order history | To take your order, deliver it, send order and tracking emails, and handle returns and refunds | Contract (to fulfil your order) |
| Payment details | Card or Klarna details | Taken directly by Stripe or Klarna to process your payment. We never see or store your full card number | Contract |
| Account details | Name, email, password, saved addresses, wishlist | So you can log in, see past orders, check out faster and save favourites | Contract |
| Messages you send us | Name, email and anything you write in the contact form or by email | To answer you and sort out any problem | Legitimate interests (customer service) |
| Reviews | Your name, rating, review text and any photos you add | To show other shoppers what customers think. Your name and review are public | Consent (you choose to post it) |
| Newsletter | Email address and, if given, your first name | To send offers and news, only if you sign up. Unsubscribe any time from any email | Consent |
| Visit statistics | Pages viewed, how you found us, country, device type, basket and checkout steps | To understand how the shop is used and improve it (see section 3) | Legitimate interests (improving the shop) |
| Security information | IP address, browser details, login attempts | To protect the site and your account from fraud, spam and attacks | Legitimate interests (security) |
We also keep the records the law requires us to hold, such as order and payment records for accounting (legal obligation).
We do not sell your personal information, and we do not make decisions about you by automated means that have a legal or similarly significant effect.
3. Cookies, visit statistics and advertising
Cookies are small files a website stores in your browser. Some are needed for the shop to work; others help us measure visits and advertising.
Our own visit statistics (no cookies). To see which pages are popular and how people move through the shop, we record the pages you view, how you found us (for example a search engine, social media or one of our emails), your country, your type of device, and whether you add items to your basket or go through checkout. This works without cookies: each visit gets a code that changes every day, created from your IP address and browser, and your IP address is not stored. If you place an order, the visit that led to it may be linked to your order so we can see which pages helped you choose. This information stays on our own website, is not shared, and is deleted after 30 days.
| Cookie type | Set by | What it does | How long |
|---|---|---|---|
| Basket and checkout | Us | Remember what is in your basket and keep checkout working. Essential | Up to 2 days |
| Account login | Us | Keep you logged in to your account. Essential | Session, or 2 weeks with “Remember me” |
| Order source | Us | Record how you arrived (for example a search or an email link) so we know which channels lead to orders | Session |
| Wishlist | Us | Remember the plushies you save | Up to 1 year |
| Currency | Us | Show prices in your currency, chosen from your location | Session |
| Security | Us and our security providers | Tell real visitors apart from bots and attacks. Essential | Up to 1 day |
| Analytics | Google Analytics | Measure visits, popular products and sales so we can improve the shop | Up to 2 years |
| Advertising | Meta (Facebook, Instagram) | Measure visits and purchases from Facebook and Instagram, and help show relevant adverts there | Up to 3 months |
You can delete or block cookies in your browser settings. Blocking essential cookies will stop the basket and checkout from working. To opt out of Google Analytics on every site, use Google’s opt-out add-on. To control adverts on Facebook and Instagram, use your Meta ad preferences.
4. Who we share it with
We share only what each service needs to do its job for us, and they may only use it for that purpose.
| Who | What they get | Why |
|---|---|---|
| Our fulfilment partners | Your name, delivery address, phone number and the items ordered | To pack and send your order, and provide tracking |
| Delivery companies (such as Royal Mail, Evri, DPD, Yun Express and local postal services) | Your name, delivery address, phone number and tracking number | To deliver your parcel |
| Stripe and Klarna | Payment details, name, email and billing address | To take payment securely and prevent fraud |
| MailerLite | Your email address and first name, if you sign up to our newsletter | To send our newsletter |
| Google (Analytics) | Visit and purchase measurements linked to a cookie, not your name | To measure how the shop is used |
| Meta (Facebook, Instagram) | Visit and purchase events linked to a cookie | To measure and improve our adverts |
| Our hosting and security providers | Technical data such as IP address, plus the data the website stores | To run and protect the website |
We may also share information if the law requires it, or to protect our rights, for example to prevent fraud.
Sending information abroad. Some of these services are based outside the UK, including in China and Stripe, Google, Meta and Cloudflare in the United States. When your information leaves the UK, we rely on the protections the law requires, such as the UK International Data Transfer Agreement, the UK addendum to the EU standard contractual clauses, or the UK–US “data bridge” where the company has signed up to it.
5. How long we keep it
| Information | How long |
|---|---|
| Orders, payments and invoices | 6 years after the order, for accounting and legal records |
| Your account | Until you ask us to close it. Order records are kept for the 6 years above |
| Messages to us | Up to 2 years after we last hear from you |
| Reviews | While they are shown on the site, or until you ask us to remove them |
| Newsletter | Until you unsubscribe |
| Our own visit statistics | 30 days |
| Google Analytics | 14 months |
| Security logs | Up to 90 days |
6. Keeping it safe
The whole site uses an encrypted (HTTPS) connection. Payments are handled by Stripe and Klarna, so your card details never reach our servers. We use security tools to block attacks and suspicious logins, keep our software up to date, and limit who can see customer information. No website can be completely secure, but if a breach ever puts your information at risk, we will tell you and the Information Commissioner’s Office when the law requires it.
7. Children
Our plushies are loved by all ages, but the shop is for adults. You must be 18 or over to buy, and we do not knowingly collect information from children under 13. If you think a child has given us their details, contact us and we will delete them.
8. Your rights
Under UK data protection law (and EU law if you live in the EU) you have the right to:
- See your information: ask for a copy of what we hold about you.
- Correct it: ask us to fix anything wrong or incomplete. You can also update your account details yourself.
- Delete it: ask us to erase your information, unless we must keep it, for example order records for accounting.
- Restrict or object: ask us to stop or limit using it, including for visit statistics, and always for marketing.
- Take it with you: ask for the information you gave us in a format you can move elsewhere.
- Withdraw consent: for the newsletter or a review, at any time. This does not affect what we did before.
To use any of these rights, email [Contact email]. We will reply within one month and will not charge you. We may ask you to confirm who you are first.
9. Complaints
If you are unhappy with how we have handled your information, please contact us first so we can put it right. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113. If you live in the EU, you can complain to the data protection authority in your country.
10. Changes to this policy
We may update this policy when our shop or the law changes. The date at the top shows when it last changed. If we make a big change, we will tell you on the website or by email.
11. Contact us
PlushieShop – contact@plushieshop.co.uk