Privacy Policy

1. Information we collect

We may collect your name, contact details, delivery and billing details, account information, order and payment status, messages sent through our contact or waitlist forms, wishlist choices, and technical information such as device type, pages viewed and referral source when you consent to analytics.

2. How we use it

We use personal information to provide accounts, process and deliver orders, take payment, send service messages, respond to enquiries, manage returns and refunds, prevent fraud, maintain our records and comply with legal duties. With your consent, we use limited analytics to understand and improve the website.

3. Our lawful bases

Depending on the purpose, we process information to perform our contract with you, comply with a legal obligation, pursue legitimate interests such as operating and securing our shop and customer service, or on the basis of your consent. You may withdraw consent at any time.

4. Who receives information

We share only what is needed with trusted service providers that support our shop, including Supabase for database and account services, Stripe for payment processing, delivery providers, and our transactional email service. Payment card details are handled by Stripe and are not stored by us. We may also disclose information where the law requires it.

5. International transfers

Some service providers may process information outside the UK. Where this happens, we rely on appropriate legal safeguards required by UK data-protection law.

6. How long we keep it

We keep information only as long as reasonably needed for the purpose collected, including customer service, accounting, tax, fraud-prevention and legal requirements. Retention periods vary by record type. You may ask us about a specific record.

7. Security

We use reasonable technical and organisational measures designed to protect personal information. No online system can be guaranteed completely secure, but we restrict access and use reputable providers.

8. Your rights

Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase or restrict your information, object to processing, receive portable data, and withdraw consent. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.

9. Children

Our shop is not directed at children and we do not knowingly collect personal information from children.

10. Changes

We may update this policy when our services or legal obligations change. The latest version will always appear on this page.

11. Cookies

See our Cookie Policy for information about browser storage and analytics choices.

12. Contact us

To ask a privacy question or exercise a right, email hello@lollypawlondon.com. We may need to verify your identity before acting on a request.

Last updated: 19 March 2026.