Privacy Policy
Last updated: 14.09.2025
Ditsy & Stitch operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Ditsy & Stitch is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described.
PERSONAL INFORMATION WE COLLECT
We may collect the following types of personal information:
- Contact details: name, address, billing/shipping details, phone number, email.
- Financial information: payment card details, transaction data.
- Account information: username, password, preferences, settings.
- Transaction information: items viewed, carted, purchased, returned.
- Communications: information provided in customer support or messages.
- Device information: IP address, browser, device identifiers.
- Usage information: interactions with the Services.
We collect this information:
- Directly from you when you create an account, make a purchase, or communicate with us.
- Automatically via cookies, pixels, and similar technologies.
- From service providers such as payment processors, couriers, analytics providers.
- From partners or third parties, where permitted.
LEGAL BASES FOR PROCESSING
Under the UK GDPR, we rely on the following legal bases:
- Contractual necessity: to process your orders, payments, shipping, returns, and provide customer support.
- Consent: where you agree to receive marketing emails, cookies, or optional features.
- Legal obligation: to retain records for tax and accounting purposes, or respond to lawful requests.
- Legitimate interests: to improve our Services, prevent fraud, and maintain website security (unless your rights override these interests).
HOW WE USE YOUR INFORMATION
We use personal information for:
- Providing and improving Services (orders, shipping, account management, product recommendations).
- Marketing and advertising (sending promotions, displaying personalised ads where consented).
- Security and fraud prevention.
- Communications and support.
- Legal compliance (accounting, regulatory, dispute resolution).
HOW WE SHARE YOUR INFORMATION
We may disclose personal information:
- To Shopify (our ecommerce platform) and other service providers (payments, shipping, analytics).
- With marketing partners, subject to your choices.
- When you direct us to (e.g. social logins, reviews).
- With affiliates or in connection with business transfers.
- To comply with legal obligations, enforce our terms, or protect rights and safety.
COOKIES AND TRACKING
Our website uses cookies and similar technologies to:
- Enable core functionality (necessary cookies).
- Analyse website traffic (analytics cookies).
- Deliver personalised ads (advertising cookies, with your consent).
You can manage cookie preferences through our cookie banner or via your browser settings.
DATA RETENTION
We retain your personal information only as long as necessary:
- Orders and transaction data: 6 years (for tax/accounting compliance).
- Marketing data: until you withdraw consent or unsubscribe.
- Customer support data: up to 2 years after last contact.
- Account data: as long as your account is active.
When retention periods expire, we securely delete or anonymise your data.
YOUR RIGHTS
If you are based in the UK or EEA, you have rights to:
- Access, correct, or delete your personal information.
- Object to or restrict certain processing.
- Withdraw consent (e.g. for marketing).
- Port your data to another provider.
You may exercise these rights via the contact details below or Shopify’s Privacy Portal.
COMPLAINTS
If you have concerns, please contact us first at kay@ditsyandstitch.co.uk or using the contact form.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.
If you are in the EEA, you may contact your local supervisory authority.
INTERNATIONAL TRANSFERS
Your data may be transferred outside the UK/EEA. Where this occurs, we use safeguards such as the UK International Data Transfer Agreement (IDTA) or EU Standard Contractual Clauses.
CHILDREN'S DATA
Our Services are not intended for children under 18, and we do not knowingly collect their data.
SECURITY
We implement safeguards to protect personal data, but no system is completely secure. Do not send sensitive data via unsecured channels.
CHANGES
We may update this Privacy Policy from time to time. Changes will be posted here with a revised “Last updated” date.
CONTACT
Ditsy & Stitch
Email: kay@ditsyandstitch.co.uk
Or use the contact form here