Privacy Policy
At Whimsical Charm, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what information we collect, why we collect it, how we use it and the rights you have in relation to your personal data.
Who We Are
Whimsical Charm operates the whimsicalcharm.co.uk website and is the data controller responsible for the personal data described in this policy.
For privacy enquiries, you can contact us at support@whimsicalcharm.co.uk.
Information We Collect
When you use our website, we may collect:
Order and customer information, including your name, billing and delivery address, email address, telephone number and details relating to your order.
Payment information. Payments are processed securely by our payment service providers. We do not necessarily receive or store your complete payment-card details ourselves.
Communications, including information you provide when contacting us about an order, enquiry or customer-service request.
Marketing information, such as your email address and marketing preferences if you choose to subscribe to our newsletter or other marketing communications.
Website and device information, which may include your IP address, browser and device information, pages viewed, referring website and information about how you interact with our website.
Cookies and analytics information. We may use cookies and similar technologies to operate our website, understand how it is used and improve our services. Where required, we will ask for your consent before using non-essential cookies. Please see our Cookie Policy or cookie settings for more information.
How and Why We Use Your Information
We use personal information only where we have an appropriate lawful basis.
This may include:
Contract: to process your order, take payment, arrange delivery, manage returns and refunds and provide customer service relating to your purchase.
Legal obligation: where we need to retain or process information to comply with legal, tax, accounting or regulatory requirements.
Consent: where you have chosen to receive marketing communications or consented to non-essential cookies or similar technologies. You can withdraw your consent at any time.
Legitimate interests: where necessary for the legitimate operation and improvement of our business, such as preventing fraud, maintaining website security and understanding how our services are used, provided those interests do not override your rights and interests.
Sharing Your Information
We may share personal information with trusted organisations where necessary to operate our business and fulfil your order. These may include:
payment processors;
website, hosting and ecommerce service providers;
delivery and postal companies;
suppliers or fulfilment partners that dispatch products directly to customers;
analytics and technology providers; and
professional advisers or authorities where required by law.
Where an order is fulfilled directly by a supplier, we may provide that supplier with the information necessary to fulfil and deliver your order.
We do not sell your personal information.
International Data Transfers
Some of the organisations that provide services to us may process personal information outside the United Kingdom.
Where personal data is transferred internationally, we take appropriate steps to ensure that it receives an appropriate level of protection in accordance with applicable UK data-protection law.
How Long We Keep Your Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting and tax requirements.
Different types of information may therefore be retained for different periods. When personal information is no longer required, we will delete or securely dispose of it where appropriate.
Your Data-Protection Rights
Depending on the circumstances, you may have the right to:
ask for access to the personal information we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to erase your personal information in certain circumstances;
ask us to restrict how we use your information;
object to certain types of processing, including direct marketing;
request the transfer of certain information to you or another organisation; and
withdraw consent where we rely on consent to process your information.
These rights are subject to certain legal conditions and exemptions.
To exercise your rights, contact support@whimsicalcharm.co.uk.
Complaints
If you have concerns about how we use your personal information, please contact us first so that we can try to resolve the issue.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator.
Information Commissioner's Office
The ICO specifically says privacy notices should tell people about their ability to complain to it, so this is a worthwhile addition.
Security
We take appropriate measures to protect personal information against unauthorised access, loss, misuse or disclosure.
No internet-based service can guarantee absolute security, but we use appropriate technical and organisational measures designed to protect the personal information entrusted to us.
Links to Other Websites
Our website may contain links to websites operated by other organisations. We are not responsible for their privacy practices, so we recommend reviewing their privacy information when visiting those sites.
Changes to This Privacy Policy
We may update this Privacy Policy when our services, legal obligations or data-processing activities change.
We recommend checking this page periodically for updates.
Last updated: 28 August 2026