Privacy Policy

1. Who is responsible for your data

The data controller is Jelly Plushies, 10 Springfield Lane, London, NW6 5UB, United Kingdom. Email: contact@jellyplushies.co.uk.

2. What we collect

• Order details: your name, delivery and billing address, email address, phone number if you give one, and the items you buy.
• Messages you send us through the contact form or by email, and your email address if you join our newsletter.
• Technical and usage data (such as pages visited and device type). See our Cookie Policy.

Card details are entered on our payment providers’ secure pages; we do not store them.

3. Why we use it (legal basis)

• To process, ship and support your order (performance of a contract).
• To meet legal and accounting obligations (legal obligation).
• To prevent fraud, keep the site secure and understand how it is used in aggregate (legitimate interests).
• To send newsletters, only if you have signed up (consent). You can unsubscribe at any time.

4. Who we share it with

Only with the service providers we need to run the shop: payment providers, our website hosting provider, email services, and our suppliers and their carriers (your name, delivery address and order items, so they can ship your order). We never sell your data.

5. International transfers

Because our suppliers and some service providers are located outside the UK, your data may be transferred abroad. Where this happens we use appropriate safeguards required by UK data protection law.

6. How long we keep it

Order and accounting records are kept for 6 years. Contact messages are kept for up to 2 years. Newsletter data is kept until you unsubscribe.

7. Your rights

Under the UK GDPR you can ask to access, correct or delete your data, restrict or object to its use, and receive a copy of it. Email contact@jellyplushies.co.uk. You can also complain to the Information Commissioner’s Office (ico.org.uk).

8. Changes

We may update this policy; the current version is always on this page.