Privacy Policy

Poppy and Wicks (“we”, “us”, “our”) is committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website, make a purchase, or interact with us in any way. Our website is hosted by IONOS, and certain data processing activities are carried out through their secure infrastructure.

1. Information We Collect

We collect information to provide a seamless, personalised experience when you browse or shop with us.

1.1 Information You Provide

• Name
• Email address
• Payment details (processed securely by third‑party payment providers; we do not store card numbers)
• Order history
• Enquiries or messages sent via our contact forms
• IP address (anonymised by IONOS)
• Browser type and version
• Device information
• Pages visited and time spent on the site
• Referring websites

IONOS collects technical data for security and performance monitoring. According to IONOS, this data is anonymised and cannot be traced back to individual users.

2. How We Use Your Information

We use your information to:

• Process and fulfil your orders
• Communicate with you about purchases, deliveries, or enquiries
• Improve our website, products, and customer experience
• Send marketing emails (only with your consent)
• Maintain website security and performance
• Comply with legal obligations

We never sell your data.

3. Legal Basis for Processing (UK GDPR)

We process your personal data under the following lawful bases:

• Contractual necessity – to fulfil your orders
• Legitimate interests – improving our website and customer experience
• Consent – for marketing communications
• Legal obligation – for tax and accounting purposes

4. Sharing Your Information

We only share your data with trusted third parties essential to running our business, including:

• IONOS (website hosting and analytics)
• Payment processors (e.g., PayPal, Stripe)
• Delivery partners (e.g., Royal Mail, couriers)
• Email marketing platforms (if you subscribe)

These partners only receive the information necessary to perform their services and must protect your data in accordance with UK GDPR.

5. Cookies & Tracking Technologies

Our website uses cookies to: 

• Improve performance and security
• Analyse website traffic
• Personalise your browsing experience

6. Data Storage & Security

Your data is stored securely on IONOS servers located in the UK/EU.
We implement appropriate technical and organisational measures to protect your information from unauthorised access, loss, or misuse.

7. How Long We Keep Your Data

We retain your personal information only for as long as necessary:

• Order records: up to 7 years (legal requirement)
• Marketing data: until you unsubscribe
• Contact form messages: up to 12 months

8. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate information 
• Restrict or object to processing
• Withdraw consent at any time
• Request data portability

To exercise any of these rights, contact us at:
poppyandwicks@gmail.com

9. Children’s Privacy

Our website is not intended for individuals under 16, and we do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

11. Contact Us

For questions about this Privacy Policy or your personal data, contact:
Poppy and Wicks
Email: poppyandwicks@gmail.com
Address: 2 Sarus Place, Cranleigh, Surrey, GU6 8FE