Privacy Policy

**Privacy Policy**

Last updated: July 2026

**Who we are**

Festive Finds (myfestive-finds.myshopify.com) is a UK-based online shop. We are the data controller for any personal information you provide to us.

**What information we collect**

When you make a purchase or attempt to make a purchase through our store, we collect the following information from you:

- **Name and billing address**
- **Shipping address**
- **Email address**
- **Phone number** (if provided)
- **Payment information** (processed securely through our payment provider — we do not store full card details)
- **IP address and browser information** (for analytics and fraud prevention)

We also collect information through cookies — see the Cookies section below.

**How we use your information**

We use the information we collect to:

- Process and fulfil your orders (including shipping, payment confirmation, and delivery updates)
- Communicate with you about your order (confirmation, dispatch, tracking, and any issues)
- Screen orders for potential risk or fraud
- Provide you with information about our products — only if you have opted in to marketing emails
- Improve and optimise our store experience

**Lawful basis for processing**

Under UK GDPR, we process your personal data on the following bases:

- **Contractual necessity** — to fulfil your order and deliver products to you
- **Legitimate interest** — for fraud prevention and improving our store
- **Consent** — for marketing communications (you can unsubscribe at any time)

**Cookies**

Our store uses cookies and similar tracking technologies to:

- Remember items in your shopping cart
- Recognise you when you return to our site
- Understand how visitors use our store (analytics)
- Provide relevant product recommendations

You can control cookies through your browser settings. Blocking certain cookies may affect how our store functions for you.

**Third-party services**

We share your information with trusted third-party service providers who help us run our store, including:

- **Shopify** — our ecommerce platform (see Shopify's GDPR/CCPA compliance)
- **Payment processors** (e.g., Stripe, PayPal) — for secure payment handling
- **Shipping partners** — to deliver your orders
- **Email providers** — for order updates and marketing (if opted in)

These third parties are contractually prohibited from using your data for any purpose other than providing services to us.

**Data retention**

We retain your order information for as long as necessary to fulfil your order and for six years after your last interaction with us, as required by UK tax law. Marketing data is retained until you unsubscribe.

**Your rights**

Under UK GDPR, you have the right to:

- **Access** the personal data we hold about you
- **Rectify** any incorrect or incomplete data
- **Erase** your data (subject to legal retention requirements)
- **Restrict** or **object** to processing of your data
- **Data portability** — receive your data in a machine-readable format
- **Withdraw consent** for marketing at any time

To exercise any of these rights, please contact us at **[your email address]**. We will respond within one month.

**Changes to this policy**

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

**Contact us**

If you have any questions about this privacy policy or how we handle your data, please contact us at:

Festive Finds  
lesleyannrae@gmail.com