Privacy Policy

Who we are

Little Lovables, Unit 4, Maker Yard, Manchester M1 2AB, United Kingdom, is the data controller for personal data collected through this website. For any privacy question or request, contact privacy@littlelovables.example.

Data we collect

• Identity and contact data: name, email address, delivery and billing address, phone number.
• Order data: items purchased, sizes, order value, delivery status and returns history.
• Payment data: processed by our payment provider. We receive confirmation and the last four digits of the card only — we never store full card numbers.
• Technical data: IP address, device and browser type, and pages visited, collected through cookies and analytics.
• Marketing data: your newsletter preferences and whether you opened or clicked our emails.

Why we use it, and our lawful basis

• To take payment, fulfil and deliver your order, and handle returns — performance of our contract with you.
• To provide customer support and respond to enquiries — performance of a contract and our legitimate interests.
• To detect and prevent fraud and secure the site — legitimate interests.
• To keep accounting and tax records — legal obligation (retained for six years).
• To send marketing emails — your consent, which you can withdraw at any time.

Cookies

We use strictly necessary cookies to keep your cart and session working; these cannot be switched off. We use analytics cookies to understand which pages and products people use, and marketing cookies only where you consent. You can change your choices at any time in your browser settings or through our cookie banner.

Third parties we share data with

• Payment processors, to take payment securely.
• Delivery carriers, to deliver your parcel and provide tracking.
• Email and analytics providers, to send transactional and (with consent) marketing email and measure site usage.
• Professional advisers and authorities, where we are legally required to disclose information.

We never sell your personal data. Where a provider processes data outside the UK, we rely on adequacy regulations or the International Data Transfer Agreement.

How long we keep it

Order and transaction records are kept for six years to meet UK tax requirements. Marketing data is kept until you unsubscribe and for a short suppression period afterwards. Analytics data is retained for 14 months.

Your rights

• Access a copy of the personal data we hold about you.
• Have inaccurate data corrected, or ask us to erase data we no longer need.
• Restrict or object to processing, including direct marketing at any time.
• Receive your data in a portable format, and withdraw consent where processing relies on it.

To exercise any of these, email privacy@littlelovables.example. We respond within one month. If you're unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.