Privacy & Security

Privacy & Security

What we need: Poppy and Rufus will be what’s known as the ‘Controller’ of the personal data you provide to us. We only collect basic personal data about you, which includes name, address, email and telephone number. You don’t need to provide us with any of your personal data to use poppyandrufus.co.uk, “the website”, however you won’t be able to purchase items from our website without providing us with your personal data first.

Why we need it: We need to know your basic personal data in order to link the orders for goods or services you buy from us, with you, in line with this overall contract. We will not collect any personal data from you we do not need in order to fulfil these contracts with you. What we do with it : All the personal data we process is processed by our staff in the UK and for the purposes of IT hosting and maintenance this information is located on secure servers within the UK.

No 3rd parties have access to your personal data unless the law allows them to do so. You will receive emails from us regarding your purchases, and in response to any questions you send us via the contact form on the website.

We have a Data Protection regime in place to oversee the effective and secure processing of your personal data, and our staff are trained in their data protection responsibilities. We don’t collect or store any credit card or financial information ourselves, as this is handled by our Payment Gateway Providers, Stripe and Paypal. Should you wish to see their individual privacy and security policies, please visit their websites.

How long we keep it: We need to keep your basic personal data up until three years after the day of your order. In some circumstances we may need to keep your data for longer, if there has been an issue with any part of your order.

What we would also like to do with it: We would like to use your name and email address to inform you of our future offers and new products by adding you to our mailing list. This is completely optional and your information is not shared with third parties at any stage. You can unsubscribe at any time by clicking the unsubscribe link in any of our newsletters. This will not affect your ability to use your account for making future online store purchases.

What are your rights? If at any point you believe the information we process on you is incorrect, you can request to see this information and even have it corrected or deleted. If you wish to raise a complaint on how we have handled your personal data, you can contact our Data Protection Officer who will investigate the matter. If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO) in the UK, or the relevant office in your country.

Contacting us: If you have any questions about this Privacy Policy, the practices of this site, or your dealings with this site, please contact us by email HERE.