Privacy policy

Privacy Policy

Last updated: 21 May 2026

This Privacy Policy explains how Puuky ("we," "us," or "our") collects, uses, shares, and protects your personal information when you visit our website, make a purchase, or interact with our services. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

Information We Collect

Personal Information

We collect the following types of personal information:

Contact Details: Name, email address, phone number, postal address, delivery address, billing address
Account Information: Username, password, security questions, preferences, settings
Payment Information: Payment card details (processed securely by our payment providers), billing information
Order Information: Purchase history, product preferences, returns, exchanges, customer service interactions
Technical Information: IP address, browser type, device information, location data, cookies and similar technologies
Communication Information: Emails you send us, customer service enquiries, feedback

How We Collect Information

Directly from you: When you create an account, make a purchase, contact customer service
Automatically: Through cookies, web beacons, and similar technologies when you browse our website
From third parties: Payment processors, delivery services, analytics providers, marketing partners

Legal Basis for Processing

We only process your personal information when we have a valid legal basis under UK GDPR:

Contractual Necessity: To process and deliver your orders, provide customer service
Legal Obligation: To comply with legal requirements, tax regulations, consumer protection laws
Legitimate Interests: To prevent fraud, improve our services, send relevant marketing (where you've consented)
Consent: For marketing communications, cookies, and other optional processing

How We Use Your Information

We use your personal information for the following purposes:

Order Processing: Process payments, arrange delivery, handle returns and exchanges
Customer Service: Respond to enquiries, provide support, resolve issues
Account Management: Create and maintain your account, personalise your experience
Marketing Communications: Send promotional emails (with your consent), show relevant advertisements
Website Improvement: Analyse usage patterns, improve our products and services
Legal Compliance: Meet legal obligations, prevent fraud, ensure security

Sharing Your Information

We may share your information with the following third parties:

Payment Processors: Stripe, PayPal, and other payment providers to process transactions
Delivery Services: Royal Mail, courier companies to deliver your orders
Technology Providers: Shopify (our e-commerce platform), analytics services, email marketing providers
Legal Authorities: When required by law, court order, or to protect our rights
Business Partners: For marketing services (with your consent)

All third parties are contractually bound to protect your personal information and only use it for the specified purposes.

International Data Transfers

Your personal information may be transferred to and processed in countries outside the UK. We ensure adequate protection through:

Adequacy Decisions: Countries recognised by the UK as having adequate data protection
Standard Contractual Clauses: Legally binding agreements with our service providers
Appropriate Safeguards: Additional measures to protect your data

Data Security

We implement appropriate technical and organisational measures to protect your personal information:

Encryption: SSL/TLS encryption for data transmission, encrypted storage
Access Controls: Limited access to personal information on a need-to-know basis
Regular Reviews: Ongoing security assessments and updates
Staff Training: Regular training on data protection best practices

Your Rights Under UK GDPR

You have the following rights regarding your personal information:

Right to be Informed: Clear information about how we use your data
Right of Access: Request a copy of your personal information
Right to Rectification: Correct inaccurate or incomplete information
Right to Erasure: Request deletion of your personal information (in certain circumstances)
Right to Restrict Processing: Limit how we use your information
Right to Data Portability: Request your data in a machine-readable format
Right to Object: Object to certain types of processing
Rights Related to Automated Decision-Making: Protection from automated decisions

Cookies and Tracking Technologies

We use cookies and similar technologies to:

Remember your preferences and login details
Analyze website traffic and usage patterns
Personalise your shopping experience
Show relevant advertisements

You can control cookies through your browser settings. Disabling cookies may affect website functionality.

Data Retention

We only retain your personal information for as long as necessary:

Order Information: 6 years (for tax and legal purposes)
Account Information: Until you delete your account
Marketing Communications: Until you unsubscribe
Website Analytics: 26 months (anonymised after this period)

Children's Privacy

Our website is not intended for children under 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will delete it immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Emailing you if you have an account with us
Posting a notice on our website
Updating the "Last updated" date

How to Exercise Your Rights

To exercise your rights under UK GDPR, please contact us:

Data Protection Officer:
Email: post@puuky.com
Phone: +44 7418 377110
Registered Office: 128 City Road, London, EC1V 2NX, United Kingdom
Company: WEISBERG LLP (No. OC456182)

We will respond to your request within one month (extendable by two months for complex requests).

Complaints

If you're not satisfied with our response to your data protection concerns, you have the right to complain to:

Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Phone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF