Privacy policy
PRIVACY POLICY
Last updated: 20 October 2026
1. WHO WE ARE
Wrenna (the "Store") is run by [ADD LEGAL NAME], [ADD BUSINESS ADDRESS] ("we", "us"). We are the controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Contact: [ADD EMAIL]. [ICO registration number: ADD IF REQUIRED]
2. WHAT WE COLLECT
- Order and contact details: name, delivery and billing address, email, phone number (if given), order history.
- Payment details: processed by Shopify Payments / our payment providers. We do not see or store your full card number.
- Communications: emails you send us.
- Device and usage data: IP address, browser, pages viewed and similar, collected through cookies and similar technologies (see section 7).
- Marketing preferences: whether you've agreed to receive marketing emails.
3. WHY WE USE IT AND OUR LAWFUL BASIS
- To process, deliver and support your order, and handle returns and refunds: performance of a contract.
- To keep accounting and tax records and meet legal duties: legal obligation.
- To prevent fraud and keep our store secure, and to improve the store: legitimate interests.
- To send marketing emails, including abandoned-basket reminders, only if you've opted in: consent. You can unsubscribe at any time using the link in every email.
- To use non-essential cookies for analytics and advertising: consent, via our cookie banner.
4. WHO WE SHARE IT WITH
- Shopify (our e-commerce platform and payment processor), which hosts our store and processes data on our behalf. Shopify's privacy policy: https://www.shopify.com/legal/privacy and consumer privacy policy: https://privacy.shopify.com/en
- Our product supplier and its delivery partners, who receive your name, delivery address and phone number to send your order.
- Payment providers such as PayPal, Apple Pay and Google Pay, if you use them.
- Advertising and analytics partners, only if you accept cookies.
- Professional advisers, HMRC and other authorities where required by law.
We do not sell your personal data.
5. INTERNATIONAL TRANSFERS
Some of these providers may process data outside the UK, including in Canada, the USA, Singapore or China. Where this happens we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
6. HOW LONG WE KEEP IT
Order and accounting records: 6 years after the end of the tax year (HMRC requirement). Customer service emails: up to 2 years. Marketing data: until you unsubscribe. Cookie data: see section 7.
7. COOKIES
We use essential cookies to make the store work (for example your basket and checkout). With your consent, we also use analytics and advertising cookies and pixels. You can accept, reject or change your choice at any time via "Cookie preferences" in the footer of our site. For details of Shopify's cookies see https://www.shopify.com/legal/cookies
8. YOUR RIGHTS
You have the right to access your personal data, to have it corrected or erased, to restrict or object to its use, to data portability, and to withdraw consent at any time. To use any of these rights, email [ADD EMAIL]. We'll reply within one month.
9. COMPLAINTS
Please contact us first. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk, 0303 123 1113.
10. CHANGES
We may update this policy; the date at the top shows when it last changed.